Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: PwVA6VQImAg4qkI5swhKni5Z4DDhXHdskBxMHJNPT0M=
Subject key identifier: 71:DE:29:E4:C1:B1:7E:CE:24:B0:3D:8A:EB:0B:27:51:E0:74:35:DE
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 0194BB96DD53902CDBC5D382F1BDA4B2F31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 09:00:13 +0000
Manifest this update: Fri 31 Jan 2025 09:00:13 +0000
Manifest next update: Sat 01 Feb 2025 09:00:13 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: lZTCrjrU84dNgLWcorb+LV/GeeP6drWZGIsfX92i9s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:dd:53:90:2c:db:c5:d3:82:f1:bd:a4:b2:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Jan 31 09:00:13 2025 GMT
Not After : Feb 1 09:00:13 2025 GMT
Subject: CN=71de29e4c1b17ece24b03d8aeb0b2751e07435de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:94:c4:5f:6a:80:6d:91:8c:a4:aa:a7:e9:
53:a5:97:38:fe:0c:51:0e:2c:da:40:6f:01:23:35:
45:6c:63:df:5e:e4:49:06:4c:ab:42:bf:bc:3f:c3:
ab:7f:d1:11:15:a1:ba:16:67:e2:32:6d:59:28:a9:
f1:9d:c5:25:d3:57:77:02:5e:73:30:c5:4e:dd:fc:
40:af:ae:32:d3:94:5c:57:3b:15:e0:c9:59:8d:8e:
db:c3:da:f9:f1:d9:40:a9:8d:51:61:c1:47:e5:4f:
be:f4:75:ce:13:91:45:e0:b8:49:39:42:ce:3a:06:
ef:db:d5:36:16:11:41:f2:e8:d3:c7:1d:2a:ef:b0:
d0:fd:9e:69:cc:df:b5:ca:e5:1f:71:6f:31:27:59:
99:3a:67:02:9f:19:93:0b:38:8a:c0:27:aa:0f:54:
b7:41:7b:ea:2b:81:18:7e:d3:ef:ab:0d:c0:cf:66:
c7:a9:ce:50:18:f5:19:c9:f8:0d:f6:86:53:dc:21:
54:5a:9f:26:c1:cb:a8:b6:23:d6:c7:ba:93:68:4e:
6f:f6:e0:fb:98:c0:fc:e5:63:3f:ab:a0:2d:9d:b2:
15:cd:82:67:61:1f:47:4c:08:8c:07:92:80:fa:de:
61:1c:08:e7:a1:15:8a:d9:95:4f:99:88:d8:c4:0f:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:29:E4:C1:B1:7E:CE:24:B0:3D:8A:EB:0B:27:51:E0:74:35:DE
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:c6:f6:9f:cb:97:9f:66:73:45:fa:6e:a8:86:6c:45:87:
b3:29:50:8a:81:db:fe:8f:2e:53:13:b5:15:df:db:fc:da:07:
05:22:b3:cd:c6:ab:29:33:73:69:18:1e:25:73:33:38:9e:a9:
de:a7:2a:fb:8c:aa:be:5f:a9:fc:d8:3f:9e:10:e7:4b:5b:94:
60:86:fd:b0:63:97:7a:b1:ca:08:74:42:59:ea:aa:4a:8f:8e:
42:2a:9d:79:14:a9:a7:42:d1:fc:a3:00:8a:3e:82:ff:b1:96:
40:d6:f0:25:cc:a3:42:af:1c:5b:e8:b2:f9:e1:65:d0:54:52:
9b:59:ff:18:be:de:99:82:ba:23:b3:bf:e6:8d:c3:f6:a8:cd:
01:28:09:51:fd:08:e0:bb:b9:cb:7d:37:ab:73:c2:a0:cb:d7:
57:79:cb:1e:dc:56:5a:af:2d:a7:48:04:48:40:61:ca:04:7c:
0d:a3:cb:51:19:af:3e:9a:58:8d:fc:53:7c:16:34:1f:ac:18:
8c:4d:91:5f:b0:26:3c:9c:51:c4:b8:87:7e:61:ee:d7:d6:b6:
41:81:e4:1b:e8:6c:89:c7:3e:04:f9:62:f8:45:be:62:24:ea:
63:c5:99:08:e4:d0:f6:22:c2:be:28:86:64:c7:61:6b:d0:1d:
e6:ae:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:33 2025 by rpki-client on console-fra.rpki-client.org