Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
File: NmTkRiopAqUvgm2uOFZXMe_FvdM.mft (raw, json)
Hash identifier: KwSvQ577olU+voxjZCQuLaCd4Bn2ci73+ZJYkdlbTm0=
Subject key identifier: 9B:73:D6:CF:26:30:DD:F3:98:FE:45:98:46:40:B7:8E:2C:3B:D6:49
Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
Certificate issuer: /CN=3664e4462a2902a52f826dae38565731efc5bdd3
Certificate serial: 0194BABB5BB34BE26F308B8A6DF31FFF58C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
Manifest number: 1379
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: NmTkRiopAqUvgm2uOFZXMe_FvdM.crl (hash: n0FrQhrUqYNylfLN2i6yK346CJEchx3m88//PlHM8Ec=)
2: bRSiH3Ltu0n345442eKdUINyK3s.roa (hash: WObRy2TpZce8N0K21ZTeL8NwUXrbmFADn/Y+S73z7rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5b:b3:4b:e2:6f:30:8b:8a:6d:f3:1f:ff:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=9b73d6cf2630ddf398fe45984640b78e2c3bd649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:c8:4f:fe:05:5a:ff:45:d2:3a:6b:d0:e2:
97:59:41:af:62:74:8e:07:3d:ce:82:96:63:92:4a:
41:c8:e8:f1:03:20:15:73:f6:ca:c4:74:c6:dc:b6:
39:35:9e:ef:c1:f5:9f:06:ab:1c:1f:60:28:ad:11:
06:bf:b2:fe:b9:3e:06:04:7e:85:ee:75:5e:9e:9d:
e9:dd:f1:9f:1a:f2:32:12:58:76:4e:61:ba:05:85:
db:8d:74:4f:ea:ad:c0:70:61:c9:74:b2:89:c4:d6:
5a:29:ef:ea:86:a0:51:db:54:94:5b:f8:eb:c7:d8:
d6:9b:70:b9:45:1e:2c:2f:54:45:9c:17:4c:64:57:
5e:9e:3f:46:85:c3:2b:b5:85:7f:a5:c4:e4:c1:3e:
9a:f7:10:12:2a:ca:a4:c4:bb:58:fb:21:78:b8:e7:
c1:ba:61:80:d4:86:fd:89:38:16:ba:48:a1:25:3e:
26:c3:af:80:1c:f3:60:fa:48:a3:72:6b:72:95:4c:
1c:b3:63:49:d6:0d:a4:6c:97:98:31:8d:45:67:97:
a9:e6:d4:1b:26:00:c9:73:d1:0f:c7:19:ad:05:4b:
cc:d3:dc:38:d8:b5:1e:a7:1c:a5:69:a6:3e:3c:6d:
c3:ca:02:44:6f:56:8c:de:d3:33:93:ca:e1:ae:6e:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:D6:CF:26:30:DD:F3:98:FE:45:98:46:40:B7:8E:2C:3B:D6:49
X509v3 Authority Key Identifier:
keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:94:9d:ac:7e:fd:70:ad:81:4f:b0:82:d8:b6:b8:ad:87:
7d:09:a9:c8:dd:22:48:b5:09:c9:f7:f5:8f:f8:5f:fa:bf:fd:
d6:9c:a7:73:f2:1d:57:46:5c:c9:de:f2:e9:d1:19:79:32:8f:
ab:da:83:d6:af:cd:82:64:c3:3f:d0:5b:0a:18:7c:95:f7:19:
d8:79:f2:fd:fe:ac:60:e6:3b:9d:59:cb:dc:d8:50:8b:19:b9:
c0:df:6b:fa:45:88:65:9b:d3:a4:9f:e3:de:f8:0c:63:10:be:
88:48:58:42:23:aa:7c:95:73:7a:a6:3a:3c:ba:5a:9f:ed:19:
da:06:19:d4:1c:fc:c9:2c:68:82:7f:88:33:2f:ca:b3:44:c1:
57:53:1f:17:52:ab:2b:5a:d4:6e:71:21:ea:2e:b8:c6:a1:a4:
b8:1b:d6:d6:2f:4b:e7:62:87:ba:73:90:99:41:2b:5e:90:44:
d6:76:53:b4:a6:42:30:af:6c:ae:88:2e:a2:7c:47:06:d5:21:
51:a6:59:ab:2b:2e:24:c8:cd:1b:b5:75:f9:4c:32:ab:4d:69:
4b:03:3e:6d:95:b7:b4:19:29:4d:00:50:da:07:0c:79:a9:fb:
48:71:6b:d3:de:5a:b5:cc:16:47:96:be:f1:df:3f:44:dd:8d:
65:10:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:51 2025 by rpki-client on console-fra.rpki-client.org