Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: kuX21eGV9jjd+TInH+2N6d4Kd2RGPiNFsMuMB1DxnjM=
Subject key identifier: 7D:2B:DF:76:9D:47:93:32:38:60:8A:55:3D:98:72:4B:F1:23:D0:EF
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 0194BABB5A916EA062A94BDEBBCC6BF409EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0D0F
Signing time: Fri 31 Jan 2025 05:00:27 +0000
Manifest this update: Fri 31 Jan 2025 05:00:27 +0000
Manifest next update: Sat 01 Feb 2025 05:00:27 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: L2ReOkV+3kFJEX8uKU3C1zhzogkXMQr0n2dc+ySWrio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5a:91:6e:a0:62:a9:4b:de:bb:cc:6b:f4:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jan 31 05:00:27 2025 GMT
Not After : Feb 1 05:00:27 2025 GMT
Subject: CN=7d2bdf769d47933238608a553d98724bf123d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:72:6f:72:d2:36:e6:c0:a1:ff:9d:aa:8a:
ea:d4:16:71:95:eb:e9:16:b7:08:82:2d:fc:88:cc:
44:32:49:70:4f:0c:67:84:d1:e3:f4:cc:c9:55:45:
06:a5:33:06:bc:7d:d1:f2:5b:e2:65:b6:78:74:e6:
05:7a:34:26:03:e9:11:9b:0a:9c:7d:e5:d3:20:62:
a0:0c:6c:0e:50:ed:8e:57:06:b6:29:fd:2f:eb:a0:
94:9a:71:47:31:7b:f8:d4:5c:af:a1:13:68:81:58:
2b:8a:99:eb:bb:a3:7d:79:2f:c4:5d:e7:d1:86:d2:
ba:05:7d:b3:a5:6f:0f:a8:5a:e5:71:f7:fd:06:7f:
bb:d0:7d:a2:f6:00:e9:0d:5c:6a:55:28:9a:6b:3e:
9a:4b:dc:6a:ae:5b:41:51:45:c3:c4:e6:8e:cc:e9:
dc:cd:c9:e3:2e:17:fa:01:05:59:14:06:39:f4:3a:
b9:03:fe:fd:d0:00:4b:8b:ea:64:e7:f3:21:a7:28:
50:d1:de:b1:83:b8:6f:e6:db:ca:f4:0b:16:e6:1f:
7e:93:46:1e:c8:11:27:8c:ee:19:c5:dc:c0:d0:53:
05:15:1f:b0:8b:7c:1d:09:0c:d4:c6:2d:55:83:83:
0f:82:86:3e:4f:5b:62:b2:5c:e8:7a:a7:a6:14:c2:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:DF:76:9D:47:93:32:38:60:8A:55:3D:98:72:4B:F1:23:D0:EF
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:53:55:0b:0c:ec:dd:4d:2b:2e:d9:f5:f0:45:0e:40:b5:
3d:0a:0e:3c:77:df:d3:b4:03:64:53:25:31:bc:1a:b0:b8:83:
ab:53:20:4d:03:05:d5:40:d9:ab:7d:bf:a1:d2:7d:88:0e:88:
8d:cf:5d:43:89:14:aa:4c:00:b4:cf:86:00:6b:8b:3f:23:ee:
42:f2:e9:38:57:86:98:f1:c7:a6:08:eb:58:ec:e0:16:17:f5:
eb:8d:e3:de:d3:22:62:34:23:9f:5d:14:d3:d1:5d:a7:f1:45:
f5:42:3b:57:13:72:f2:62:9e:21:17:ff:3c:9b:67:1a:b5:6f:
c5:60:81:80:7e:a6:65:da:19:55:20:b3:b8:3c:ad:13:aa:24:
f9:5d:54:98:1e:04:ea:9b:40:e6:ef:28:c0:7a:a3:be:6d:52:
36:7e:a8:f7:f1:6a:a0:cf:9b:e0:e1:be:9b:be:1a:ea:7d:fc:
67:3c:ee:27:ea:8d:c3:69:29:0b:0f:35:84:ba:e3:ab:81:52:
91:e6:58:ea:68:32:68:79:09:1d:ae:d9:f5:41:9a:b3:e4:a1:
fa:00:93:8f:48:03:c8:51:fe:23:d6:1f:6d:ca:ce:4f:59:13:
e9:ed:e7:b7:cd:fa:9e:71:99:d6:99:e4:1e:3f:39:44:93:ae:
2f:e7:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:20 2025 by rpki-client on console-fra.rpki-client.org