Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: v7ZefLQZzdlUcuoUc7Uqq6KryYFXRIfeprVvjVnSSpg=
Subject key identifier: AB:83:59:D7:37:96:D0:1A:D2:54:3B:D9:1B:5B:9C:23:46:E6:08:3C
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0194BABB4ECB027B18C645F664BABCAD1973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0D41
Signing time: Fri 31 Jan 2025 05:00:24 +0000
Manifest this update: Fri 31 Jan 2025 05:00:24 +0000
Manifest next update: Sat 01 Feb 2025 05:00:24 +0000
Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: RNb/x0m3HL6aPbLiW0IzxCnNxNkvfkjIDVZk/XkXH8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4e:cb:02:7b:18:c6:45:f6:64:ba:bc:ad:19:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jan 31 05:00:24 2025 GMT
Not After : Feb 1 05:00:24 2025 GMT
Subject: CN=ab8359d73796d01ad2543bd91b5b9c2346e6083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:c3:dc:32:f6:42:d1:14:b8:0c:41:4a:78:
46:7e:52:4e:f3:6a:f3:d8:23:52:0d:95:ee:e6:1b:
7e:a9:a3:dd:ba:94:73:5d:06:96:bd:5b:ba:f3:11:
6c:48:91:e4:27:34:2c:e5:7b:89:47:01:ca:d9:23:
d2:ac:ec:b8:ce:a0:90:43:52:47:48:a4:0a:2c:e6:
df:e3:09:f6:66:69:76:5d:59:90:73:ad:1f:d2:55:
54:3d:33:69:92:bd:df:49:3e:f4:ee:b8:d9:3e:f0:
33:5a:15:0e:30:94:51:76:36:62:48:52:f9:aa:11:
ce:6d:5f:10:cc:7f:9b:e9:2f:3d:73:47:93:21:24:
4c:15:85:78:98:3c:30:e2:36:64:0e:82:f0:4b:87:
2d:7f:76:30:48:70:14:d5:7d:ca:e7:a6:1a:87:9e:
e4:8c:dd:e0:9e:d8:df:57:f9:d6:f6:64:47:bf:46:
0d:4f:c3:82:c5:58:21:de:5b:02:b7:c9:9e:5a:3e:
d8:57:87:30:d9:ca:59:ae:f1:a3:5a:94:ab:31:e7:
06:8d:c4:30:6c:a5:d6:3b:8c:a6:09:4a:db:b4:cc:
32:e4:e6:e6:a8:d8:52:c2:8c:6d:c4:e8:7c:1c:7b:
58:2c:93:ff:8a:08:97:93:d4:fa:e5:02:72:3e:6c:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:59:D7:37:96:D0:1A:D2:54:3B:D9:1B:5B:9C:23:46:E6:08:3C
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f9:6d:e7:14:91:b2:fa:49:81:00:94:65:b1:91:5d:64:65:
43:ee:c6:d6:6f:1b:14:cc:9f:16:5d:9a:bb:50:35:a9:ea:b6:
52:2d:fb:a7:ef:7d:ae:99:90:1a:57:4d:29:af:f0:45:b3:19:
50:3b:f8:69:c7:f0:d5:4d:c2:f5:73:82:84:6b:23:60:9d:b2:
83:a5:ed:15:73:f6:dd:b7:fe:3b:fc:dc:e1:7a:9e:1d:df:b5:
51:e3:0c:1e:28:70:bd:79:f2:e7:f3:9f:92:5b:48:1e:45:69:
e5:c9:dd:4c:de:9a:da:3f:92:2e:d1:19:56:1d:25:1b:7b:70:
1e:93:cf:33:ad:a6:24:0d:f7:9e:5d:95:1a:62:e2:ee:1b:0f:
bb:eb:13:85:7a:22:8d:a7:64:9e:62:3a:3c:82:6d:ba:cb:36:
10:13:48:ec:ed:23:e3:e2:c2:e5:f8:bd:4c:3b:60:cb:62:7b:
7d:6f:4c:ca:fc:bf:b9:48:79:d3:69:83:a7:b0:39:56:e0:51:
6c:83:02:8c:97:34:a7:a7:a3:2f:f9:50:28:ff:2d:fa:9f:32:
c3:a4:bd:04:5d:4d:a5:58:b3:c1:c5:a8:2f:40:c5:3d:cf:82:
6b:4c:40:71:ed:ac:ce:77:da:a6:56:c1:4f:a6:8f:18:db:d6:
98:28:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:28 2025 by rpki-client on console-fra.rpki-client.org