Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: Qis8lRVTirtgmoieSmxUTAMcJ4u1qsqxzSnSernYI1M=
Subject key identifier: 40:7A:5F:E0:30:76:B2:D7:4D:0E:C7:F7:E7:50:B1:2D:16:49:C3:D5
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 0194BA84C305AF5A43D819CBABFCD6213B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 13FE
Signing time: Fri 31 Jan 2025 04:00:50 +0000
Manifest this update: Fri 31 Jan 2025 04:00:50 +0000
Manifest next update: Sat 01 Feb 2025 04:00:50 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: 9IEE8wy0YIzzorYNSUmRs9KNxK41xbM7swhwnbplAPs=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:c3:05:af:5a:43:d8:19:cb:ab:fc:d6:21:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Jan 31 04:00:50 2025 GMT
Not After : Feb 1 04:00:50 2025 GMT
Subject: CN=407a5fe03076b2d74d0ec7f7e750b12d1649c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:c0:a9:cd:12:84:bf:d6:49:97:bb:f6:f1:
b4:b2:21:9b:eb:b8:c8:d3:bc:88:a0:35:f6:9a:e2:
79:8c:57:f5:5f:82:77:8a:f5:d0:6c:71:9b:1d:d0:
e3:15:e0:d2:d5:bf:6f:79:e3:53:75:9a:7d:bf:6d:
0b:3f:0d:4d:4b:66:e0:f1:9a:a7:3b:66:dd:d7:ea:
48:29:61:19:c4:61:ac:3f:53:42:48:9d:9f:d8:7a:
72:7f:73:90:ba:f3:75:ce:20:ff:df:0b:88:62:91:
44:fe:12:cf:fe:fc:11:0d:01:b1:be:3c:c5:10:26:
ad:f2:90:36:f4:b0:4e:aa:2d:75:5d:cf:f5:5d:69:
1b:22:fe:16:0f:b0:2b:ac:22:4d:1f:0a:69:ef:aa:
38:87:f2:fa:ce:9c:9b:bb:78:e0:f8:48:e7:3e:84:
95:cb:d9:4f:16:30:1b:74:7f:ed:e2:70:c1:e6:4a:
e6:3e:81:83:1d:56:57:0a:f1:51:7d:a6:de:1c:83:
71:1d:1d:38:46:ec:90:93:09:ba:a0:4b:8d:dc:c1:
0b:0d:c9:f9:85:03:f7:3d:e6:24:f6:8b:f6:12:32:
19:7e:2f:7b:dc:24:25:26:60:62:bd:10:96:01:83:
f6:6a:14:56:0b:ab:08:b6:28:be:01:24:c7:36:51:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:5F:E0:30:76:B2:D7:4D:0E:C7:F7:E7:50:B1:2D:16:49:C3:D5
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c1:b7:f2:99:01:c5:be:18:b6:22:21:e0:0a:55:98:05:9e:
f6:10:a9:4e:a4:be:d3:94:1b:70:14:ac:13:2f:b6:b2:26:6a:
e0:8c:a3:bc:7e:c1:94:9d:55:48:dc:4e:e9:28:b2:a3:51:47:
de:03:56:90:2d:d5:cd:f2:23:a8:77:0d:a9:85:3b:2d:e9:14:
2c:97:98:69:b1:be:ac:f1:a2:45:45:d7:2e:32:c8:cb:15:ea:
6b:a0:77:65:d4:91:4d:bc:56:43:b4:df:2d:3d:2f:82:04:4c:
57:b4:fc:bc:26:d3:a7:98:8a:22:dd:2d:da:ff:72:64:2e:50:
36:91:45:a0:b9:b7:73:46:9a:72:09:96:8d:d9:1f:18:d1:31:
46:e9:1f:cf:e1:71:5a:f8:82:84:d3:a1:1b:0d:21:1a:89:56:
bc:a8:ed:ed:74:61:54:ad:7f:bf:f0:f0:9e:53:c0:08:d8:32:
6a:b1:f2:e0:81:84:ba:fa:f9:bc:0f:5a:11:e9:17:9c:b3:b8:
b9:47:f6:eb:6d:06:90:2c:c3:4b:94:a5:6e:1a:8e:a0:66:f5:
34:75:fb:a4:44:e2:eb:41:ff:a2:e5:91:29:4c:a1:cc:7d:67:
59:38:31:92:0c:d2:e0:b1:9f:28:4a:87:26:f9:31:e3:44:e0:
d6:c2:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:20 2025 by rpki-client on console-fra.rpki-client.org