Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: 8xVXXLv/I0mBZ/PEQoX6xWfH+c8bNiTIlBcHZTTcvFU=
Subject key identifier: 09:CC:B3:67:DF:92:CF:BA:C6:C1:FA:E9:4E:A8:F0:C1:64:D4:BB:0E
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0194BB96C2D9047FD81CE583531D888B1163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0A7D
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: Xgf/3EVFRvDqSuy58+XwwfnaSULRsLIYmQBqQXIhtqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c2:d9:04:7f:d8:1c:e5:83:53:1d:88:8b:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=09ccb367df92cfbac6c1fae94ea8f0c164d4bb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:b3:6a:7e:2f:ef:0a:27:57:0e:5d:e1:84:
9c:46:a7:18:5d:4f:3c:dc:15:25:a9:ea:a5:8c:f1:
71:0b:ad:5b:cb:59:9b:1b:11:58:08:7b:61:45:ae:
55:e6:fa:c4:99:39:96:53:97:56:88:7a:70:ee:62:
ab:e6:0a:11:42:f9:97:1a:44:5c:4e:c2:e4:8c:3f:
f3:ef:a1:bb:cf:e5:18:9f:32:de:60:f8:63:36:c4:
4d:86:97:d5:e9:5b:21:55:7d:74:fa:f2:b2:82:b7:
e7:30:63:cd:e4:a6:7f:83:ec:50:7f:bd:6f:e4:29:
46:2b:4f:2f:fc:e6:5f:2a:d3:72:df:89:57:b5:d7:
2b:67:4e:1c:96:73:f5:4c:69:e2:03:de:fe:60:95:
bb:ad:b3:00:9f:a5:91:35:f3:34:39:d8:1b:fa:ae:
b9:62:10:28:d5:0d:94:94:f8:75:86:e8:ba:b1:52:
e3:a1:d2:19:39:2b:3b:b0:ab:e8:2b:d5:6c:14:df:
e1:f7:3b:2f:d0:1a:88:15:9e:91:54:d4:74:9d:a2:
d0:fe:fd:44:34:6e:58:83:ec:27:b2:69:3c:db:96:
40:17:3c:49:f3:c8:02:9c:2f:72:92:11:e5:48:2d:
25:64:f9:00:6b:a2:9d:05:39:c2:12:34:70:d1:46:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:B3:67:DF:92:CF:BA:C6:C1:FA:E9:4E:A8:F0:C1:64:D4:BB:0E
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:66:0e:06:bf:ef:73:67:54:5d:00:d0:87:d3:1b:73:04:
ea:43:2d:ef:22:be:8e:ed:dd:af:d2:d8:f9:04:64:fb:86:ba:
22:e9:a3:9d:e2:17:5f:d8:c4:3b:27:bf:b3:1b:fd:d9:c8:17:
1d:af:e6:18:bc:1a:44:1c:88:13:d3:4a:c2:11:59:67:9d:20:
be:ed:01:18:c5:76:80:c1:f1:cf:ae:65:37:1b:79:ea:67:80:
12:95:9a:c3:e0:da:8d:84:4a:bb:90:da:0d:59:ae:f1:37:48:
a2:5a:94:2a:a1:24:3a:23:64:8d:02:f3:84:d2:59:93:bb:80:
5f:1e:6a:67:8b:7d:1a:a9:80:19:80:ad:2b:0d:ef:f3:2b:ec:
1d:ef:9b:c8:be:8c:53:ea:0b:20:e7:30:9f:0f:be:b7:a7:cb:
80:1f:9b:2d:3e:a9:40:30:88:54:4e:3e:12:74:0e:55:f8:ad:
29:8f:77:20:d6:de:d3:c8:83:44:62:30:47:bb:7d:3a:0b:a3:
bf:29:ae:50:f0:0a:c0:68:95:fe:57:fb:43:db:0b:60:87:d7:
0d:09:49:cb:4a:10:32:2c:c1:0d:57:fb:a6:8c:87:06:6a:52:
5d:ce:d4:44:b4:d0:f6:1e:2b:71:92:24:e5:e4:7f:e7:72:be:
28:a1:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:03 2025 by rpki-client on console-fra.rpki-client.org