Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: 20FJBIpwVGndIo+AHgaOevaHRxoB5a5Ob7myv3NBctA=
Subject key identifier: 7B:B3:F6:6F:E8:26:60:69:40:1C:E6:7A:9E:29:C5:30:FD:2D:8B:92
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0194BB971377773F8EA052D35E921B5BBB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0CD8
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: 3QD5G75W0kfK7QoeRhWxN1deQRnA2yH9gyXqPR3/9W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:13:77:77:3f:8e:a0:52:d3:5e:92:1b:5b:bb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=7bb3f66fe8266069401ce67a9e29c530fd2d8b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:b1:3d:b3:cf:96:02:4e:8b:9d:0a:88:68:
ea:0a:69:f5:4a:81:6c:78:5d:8b:43:be:7d:11:51:
c5:72:be:cd:69:15:2c:e1:0b:4c:73:2e:c5:28:0c:
4a:d4:54:38:1d:82:fc:f8:90:54:d8:37:6e:18:ce:
fa:90:a8:51:09:bb:2b:72:96:6c:30:d9:fa:f1:08:
ff:0f:a0:71:0a:8b:c8:68:cc:11:93:43:0f:41:12:
46:a1:62:be:aa:22:6e:38:72:3e:0e:af:0b:ee:94:
ab:30:e9:bb:87:c1:25:65:3c:e6:db:66:65:79:60:
b3:5b:09:39:8a:9e:d0:07:ab:23:c5:ee:2a:39:72:
12:b1:ee:da:ad:fd:73:09:7c:5c:28:a5:2c:e1:88:
36:ae:bd:94:7d:f8:9c:fb:83:cf:8a:35:4a:68:17:
e4:5e:f1:7b:81:e7:1c:b2:4a:71:56:d8:84:4a:f3:
1c:5a:61:9a:02:8a:ee:c7:75:02:93:86:03:a6:38:
03:23:ea:11:52:69:d2:b9:04:7e:90:37:58:11:74:
87:fc:c3:12:95:d2:8b:98:53:c8:9b:97:80:ae:5e:
82:e2:89:3b:bd:e6:b1:d4:7a:bc:64:47:ac:35:06:
91:b9:ae:d2:f7:4c:43:0e:df:ae:35:9f:35:19:e6:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:F6:6F:E8:26:60:69:40:1C:E6:7A:9E:29:C5:30:FD:2D:8B:92
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:20:3c:03:d2:3c:07:c4:2c:7c:c8:02:41:d9:ee:7e:5b:22:
48:6f:6c:be:b4:46:6e:cb:8e:48:7c:b3:ec:78:6b:ae:d4:10:
34:6b:4f:7b:3c:c6:dc:69:43:d8:23:ca:8c:16:43:1f:65:53:
d0:b9:c8:03:6b:e7:34:fc:8a:a6:03:f7:a6:26:7c:5a:4a:02:
67:d4:41:70:de:33:84:cc:bf:ca:97:26:c6:4d:ad:eb:d4:f8:
68:b0:96:48:c0:3a:d5:bc:ad:14:1b:0b:cf:b7:a9:b4:d0:43:
73:d8:3e:b4:eb:f9:65:6e:2f:dd:9c:59:ab:e2:03:50:43:0f:
cb:9e:1f:46:3a:d6:94:c3:97:f8:6b:18:3d:8c:0c:25:1d:7d:
ba:e8:84:ef:c2:94:34:b5:3c:6a:cf:f6:eb:ac:ea:fd:79:71:
55:29:e1:b4:15:9d:c7:ca:ac:e4:7e:f1:7e:95:b6:19:ef:16:
64:51:1a:db:50:3d:a3:bb:b8:b6:dd:73:ac:d5:4c:29:b1:63:
14:a0:3e:07:d4:f9:7c:b6:3b:46:ae:c4:3f:af:21:b7:2c:26:
b0:8a:16:92:25:10:6e:0e:31:7a:d6:49:f9:23:04:1b:be:db:
eb:54:a0:aa:92:a7:ab:24:95:4e:28:24:fd:c8:aa:59:ef:50:
9a:32:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:27 2025 by rpki-client on console-fra.rpki-client.org