Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: dPsagNi5TEJvQEbnAh6NU9J72S5wc/HQliiJ7XJIeNs=
Subject key identifier: AA:31:E4:70:24:6B:A2:85:10:EE:93:89:A4:E1:E1:BD:04:F9:8B:D1
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 0194BBCE157D4D09C1677371C4A609B761E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 096E
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: fPsYRtwz/ZqikwdiATj+R8xprMwx2LO5awiNrW3Pe1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:7d:4d:09:c1:67:73:71:c4:a6:09:b7:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=aa31e470246ba28510ee9389a4e1e1bd04f98bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:8e:d5:f3:99:20:94:46:43:b7:8b:7f:5a:
f5:9b:96:5c:fa:44:2a:9c:60:ad:8d:3f:da:11:7c:
0e:8e:5c:7e:50:b9:a9:27:b1:79:94:66:1d:c9:67:
83:0f:4c:f4:18:94:22:41:f9:ee:cc:6f:16:0c:b1:
d5:69:04:a9:a0:67:5e:41:93:4a:81:f1:cc:70:f4:
13:6c:3c:ae:1e:3b:1d:f8:cc:c3:27:7f:78:e6:68:
44:9d:e5:95:1c:ea:c9:ae:d2:6b:c2:ca:48:69:d0:
02:d8:53:ee:94:c4:d4:66:0a:5a:44:7e:f0:14:d3:
ca:b0:4d:51:d8:d7:d9:cb:b5:f0:aa:3d:91:dd:ee:
00:28:82:ce:ac:e1:ce:38:20:b0:47:ed:28:2a:8b:
ae:be:c9:c4:f6:69:1f:16:87:28:d5:20:1d:db:0d:
71:61:03:34:bc:4c:dc:fb:81:60:12:2e:a5:e5:76:
af:28:af:c2:89:04:bd:59:74:da:73:cd:39:14:d3:
1f:e6:7d:9d:f1:79:01:d7:43:ec:f0:33:ef:e9:0b:
0d:4b:70:cc:c9:ce:a0:c3:9c:a3:50:19:2a:ed:54:
f5:29:bf:01:10:69:d6:eb:4e:d2:56:4b:94:3d:1c:
1c:16:9a:db:23:39:9c:4f:17:e9:c0:9f:38:34:b6:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:E4:70:24:6B:A2:85:10:EE:93:89:A4:E1:E1:BD:04:F9:8B:D1
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1c:85:5f:8b:79:7e:34:c3:83:e6:c8:07:48:8d:a6:17:00:
7b:b4:52:9a:df:e1:92:55:86:e0:66:6e:7f:73:42:98:bd:b8:
94:6f:69:f1:aa:4c:7f:a6:a6:d8:3d:37:ad:7b:fb:48:e2:9c:
ca:2b:14:e3:88:d0:32:ff:c7:44:e6:85:79:1c:d1:69:e5:c8:
48:fd:24:48:db:a5:be:a7:2e:0e:84:bc:c7:0c:1f:b7:82:9f:
64:dd:e6:bb:80:1b:47:40:9c:d3:39:87:1f:76:da:b6:b3:e6:
c1:5d:c5:c1:0c:ba:a7:0a:7b:bf:fa:28:f4:57:3d:9d:07:27:
8b:95:f0:8b:99:21:e3:08:07:e4:a9:3d:4e:a1:86:55:c2:46:
32:72:cf:75:38:e0:2f:7a:71:69:c3:49:8f:9c:f5:24:17:52:
c9:a5:6c:fd:19:02:8a:9a:72:e0:5d:6b:1e:d7:50:a5:f4:9b:
a6:b3:0e:18:5f:16:89:3c:c6:54:04:d7:7d:1c:46:38:26:e4:
4a:e5:9f:82:6b:c2:03:eb:1c:38:b6:4d:a4:34:ce:8d:b3:05:
f0:58:e4:9c:d5:2c:ed:f1:87:cc:e0:a1:fc:62:56:e6:9c:89:
c0:60:50:44:3d:7e:93:a7:bf:dd:ba:34:11:60:7d:b7:d0:26:
64:0f:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:39 2025 by rpki-client on console-fra.rpki-client.org