Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: Wegxfo3WTumwoF3BAeZsBzVjCQqVyCrJRVtHaf2ZmUc=
Subject key identifier: 92:27:FC:62:66:61:2B:8D:28:00:9B:C2:A6:6C:F7:44:DE:2C:79:94
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 0194BABB8D42D96D918184EDD47F00076E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 010D
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: RYoTL6kVq38vM89SPujrG5WNl/4E/9nqfOK0duOek6E=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8d:42:d9:6d:91:81:84:ed:d4:7f:00:07:6e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=9227fc6266612b8d28009bc2a66cf744de2c7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e7:1b:21:4f:7e:ab:9c:45:60:dc:32:9b:39:
66:cc:60:23:ce:ce:41:a1:6a:66:34:15:64:5f:9c:
cc:a1:27:85:1d:9c:55:77:43:86:81:70:67:d3:2b:
29:35:ea:00:42:0f:13:77:cc:e9:2e:16:c0:9a:45:
14:9a:5f:a9:f2:a3:35:a5:09:b6:6b:fa:30:08:9d:
15:2c:27:66:a8:ee:1e:fd:29:ca:53:be:b5:60:17:
e0:91:5f:a9:2c:90:11:99:a4:6c:10:14:bc:bf:be:
91:ca:42:41:d0:73:85:1d:f0:3c:f4:20:e5:70:0d:
cf:d5:43:e7:99:40:01:b5:d9:46:f0:56:84:15:80:
3a:69:91:f3:60:e3:05:55:25:64:f2:54:b7:7a:59:
1b:d3:b3:d2:b9:18:9e:b0:27:8a:02:b4:f2:54:6d:
c3:57:10:e7:86:93:12:c7:f1:67:34:64:75:1b:6a:
f8:99:87:20:a8:ab:a1:a9:c1:62:1f:10:f9:0c:14:
63:01:5f:7a:ef:31:63:18:a1:ac:43:a0:11:68:9f:
e0:07:ae:14:06:02:52:5b:99:ef:d0:44:8c:17:8f:
48:72:33:da:f0:1a:39:97:25:db:de:78:61:a8:5e:
ed:12:2a:b2:c6:99:e2:78:37:10:f9:b3:e2:18:3d:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:FC:62:66:61:2B:8D:28:00:9B:C2:A6:6C:F7:44:DE:2C:79:94
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:ca:c1:c7:0c:54:a5:52:5e:5c:6c:d7:7c:d0:5a:72:2f:
46:03:08:bf:73:4b:e8:44:3c:11:d8:b6:e6:b9:b8:6b:a1:e6:
fd:e0:f9:fa:97:5d:e8:af:01:ab:b3:57:9c:fd:e0:41:64:80:
7b:ab:ac:98:86:9a:b2:8d:04:97:d6:f3:d2:6f:8b:e0:91:78:
70:98:03:b5:90:7b:72:72:7a:c7:79:2b:7e:03:fd:ab:43:e8:
ba:9f:9f:8d:81:d6:f2:c1:91:df:8e:a3:84:37:01:fc:e0:6c:
d5:56:9b:5e:29:11:d9:bb:7e:c5:65:d0:44:c7:0f:2c:28:0b:
d8:2d:85:de:38:3e:7b:a1:b3:48:91:2d:25:c7:75:57:7c:c9:
54:bf:18:fe:68:7e:f6:1d:c5:f8:a8:da:79:ac:39:75:37:7e:
73:a4:b1:77:f2:90:9a:a2:ce:e4:d0:9b:71:11:9a:df:81:44:
95:e7:36:eb:be:da:75:33:fe:82:09:4f:8d:b2:02:06:e4:10:
ab:f8:d6:e9:20:cd:b0:d5:05:bf:57:48:a7:7c:b9:9a:93:6c:
a0:f8:66:b4:d4:74:8a:36:30:78:ae:62:9e:39:7a:a7:1e:8c:
0f:1c:2d:c1:58:f9:fa:5a:c9:08:69:eb:9e:0d:c8:39:f0:a7:
33:b1:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:27 2025 by rpki-client on console-fra.rpki-client.org