Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: hEoUMQVr6yFWwNh/zKyFqG3wdxd3DFt7NzfkLLVYNsY=
Subject key identifier: 96:B2:5B:DD:F1:A8:64:29:4A:C0:93:28:71:4B:96:FC:EB:8E:75:FB
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 0194BABB2E598E9A7F656382F33ACB052678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: jXr9UYOpqf3bUo2QIBmbAPKXx5bqHTIPAGTRG4bWASI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2e:59:8e:9a:7f:65:63:82:f3:3a:cb:05:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=96b25bddf1a864294ac09328714b96fceb8e75fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:5d:23:83:0e:47:e7:b5:17:2f:cd:be:ed:
42:cd:88:8e:74:3e:c3:ce:5e:8f:ec:c7:02:2f:19:
d8:09:1d:9a:fe:ca:6a:cd:5c:b4:75:36:36:a8:8a:
c4:d6:36:f3:52:65:75:f8:89:88:7f:c6:61:36:2e:
5f:72:27:d0:fc:0f:2e:4f:c9:9c:f3:14:d1:81:98:
6c:10:47:c9:af:8a:66:6f:f8:2b:31:12:7a:e5:c6:
ee:77:3b:3a:60:c5:95:3b:1a:24:54:0b:86:ab:2f:
68:40:46:4d:4f:a1:fd:3c:a4:ff:80:72:3c:ef:e1:
ef:b5:2c:c2:b5:3a:11:7d:8f:40:80:70:26:b5:a3:
19:e9:72:a0:2d:27:00:21:a0:b5:f8:53:5e:be:86:
de:f5:2a:73:90:95:79:85:31:41:8e:f4:f2:6f:75:
82:01:d9:bf:5d:8d:77:94:f6:0a:ca:57:12:0e:ed:
6f:1d:76:e8:ce:60:7c:17:fe:3d:62:bd:20:ed:09:
01:45:f9:14:59:72:b1:72:b9:7d:75:b4:0e:6d:cf:
26:cd:77:e1:62:4b:e5:06:6b:6a:62:d2:78:c3:58:
5c:05:60:5c:7f:23:0a:a7:be:cf:1c:a0:de:05:e8:
23:f0:ce:05:f6:ec:ca:92:12:6a:11:a2:28:46:b6:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:5B:DD:F1:A8:64:29:4A:C0:93:28:71:4B:96:FC:EB:8E:75:FB
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:8d:50:ad:90:07:52:1a:ef:25:58:f6:6c:97:a8:82:fa:
54:86:d3:28:aa:c5:97:08:97:2a:94:b2:31:6b:3c:8e:e2:f6:
3b:c1:f5:3f:61:f7:94:a6:a1:04:1f:94:69:39:d4:69:e2:c4:
a5:37:12:2d:a9:eb:16:4e:40:11:52:d3:17:36:2e:cb:8e:1e:
cb:2b:ed:4a:7d:a4:d8:9a:0e:30:c5:bf:eb:44:08:9e:4f:f3:
06:69:24:d6:8a:91:cb:c9:0c:90:0b:3b:fc:c1:64:c9:ae:52:
3f:ee:1b:68:ac:1c:d7:fd:4a:37:f7:a4:0e:b3:84:c2:94:77:
a5:13:46:d0:d7:cd:96:63:7c:71:c9:17:ba:c2:4b:5d:bb:a3:
cf:17:1b:71:c1:6a:24:4e:19:e1:43:d0:bf:76:71:fa:08:7a:
18:81:78:b3:e4:73:ed:7b:11:d2:17:f2:a4:fd:35:23:cf:0f:
95:6b:74:47:9b:1e:7e:ac:3b:55:01:37:c5:f8:be:46:c8:ff:
e3:94:98:d9:33:8b:ea:b9:87:44:a1:f0:0b:68:5b:de:16:aa:
68:35:55:04:24:24:9d:5c:c4:6f:c8:69:14:c2:65:2f:63:c2:
67:68:67:c2:0c:f5:04:50:5c:da:6f:03:67:63:40:09:f2:11:
c9:28:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:10 2025 by rpki-client on console-fra.rpki-client.org