Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
File: NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft (raw, json)
Hash identifier: apGeaaJFL1HLVvUIFv5yh6P2cuZYzGe2zs7NG4fpxJw=
Subject key identifier: AF:64:D8:C8:81:C1:A4:31:DF:27:F8:43:6C:46:66:8D:DE:87:51:86
Authority key identifier: 35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79
Certificate issuer: /CN=3541e9d600daab653543725cf1f9cf988b50d879
Certificate serial: 01901E58BA6A5D292CD984FA6B5292512EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
Manifest number: 0628
Signing time: Sun 16 Jun 2024 00:00:49 +0000
Manifest this update: Sun 16 Jun 2024 00:00:49 +0000
Manifest next update: Mon 17 Jun 2024 00:00:49 +0000
Files and hashes: 1: NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl (hash: U7JsVaRiKgj0SdyI0284ZEskZa4SX7uBkY7UVuT6V00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:ba:6a:5d:29:2c:d9:84:fa:6b:52:92:51:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3541e9d600daab653543725cf1f9cf988b50d879
Validity
Not Before: Jun 16 00:00:49 2024 GMT
Not After : Jun 17 00:00:49 2024 GMT
Subject: CN=af64d8c881c1a431df27f8436c46668dde875186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:ac:69:45:24:47:56:42:09:44:83:49:6f:
65:04:7f:60:aa:56:50:02:de:51:0f:9d:e3:f5:8e:
18:21:f4:38:d2:77:88:24:e7:d5:06:b0:83:b6:e0:
5b:09:7e:34:19:7a:75:1b:db:d9:eb:7d:c6:2f:93:
85:8a:db:93:52:49:e2:94:87:67:4d:54:a3:de:ad:
09:c8:a2:7e:5e:5f:b3:ee:0c:f9:30:43:7d:8a:ce:
03:13:c0:25:d8:e4:64:ee:49:1d:a3:42:f2:8b:3b:
b8:79:b1:bd:8f:d7:d3:41:14:7f:74:63:c0:1d:ec:
a1:bc:d2:51:89:8d:64:ec:45:01:5b:ea:6f:a9:1e:
15:df:8f:fa:d2:6a:02:56:58:90:bd:93:a2:f5:af:
c1:fc:73:23:3e:9a:00:a1:be:ab:47:30:7b:b1:12:
1e:33:0a:da:44:3f:0f:4e:ee:97:55:80:9c:4d:ca:
76:b4:39:8e:80:d4:7c:86:62:65:d3:29:7f:7c:39:
f0:aa:3d:95:24:3b:40:ea:7f:29:20:e2:52:d8:23:
3e:ef:ac:aa:37:1a:5a:ac:5c:d9:b0:f9:4c:64:cb:
47:0b:79:33:5f:09:0d:27:1d:e8:45:ea:07:34:a1:
9c:da:d2:52:85:b0:e2:c3:5d:0d:c7:de:49:67:48:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:D8:C8:81:C1:A4:31:DF:27:F8:43:6C:46:66:8D:DE:87:51:86
X509v3 Authority Key Identifier:
keyid:35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:1c:c2:1e:1c:22:8a:62:29:1e:72:99:fb:87:32:0d:ed:
37:5c:fb:e6:f0:d0:19:f4:b8:18:9f:85:2e:09:ce:c7:68:fe:
45:cb:fb:53:80:98:aa:df:7a:2a:63:ac:77:e0:30:18:32:c7:
e7:2b:63:7e:5a:57:24:4f:d7:19:ad:7b:e6:fc:c4:93:30:67:
34:e6:15:8e:fe:4a:c7:07:79:b6:0c:19:6a:81:47:d3:b0:7b:
01:81:9d:57:75:e8:ea:85:1a:6c:e8:91:f2:4f:2c:f0:a0:44:
be:93:84:23:1b:c0:04:43:67:b0:e6:ea:9f:b9:44:03:e9:d2:
5b:0d:57:54:52:f5:a4:79:be:55:3f:33:7c:47:be:3b:59:42:
26:c6:16:57:26:b6:d5:ca:02:79:2d:73:8c:d4:1d:34:b3:2d:
b0:40:1f:4f:35:ae:e9:97:06:52:df:de:f3:ab:12:5a:dd:0f:
b6:08:e4:c6:9f:50:00:02:74:d4:6a:d8:2d:72:5f:15:bb:d7:
e2:d3:24:2f:c2:4e:9b:c6:82:5c:77:ae:9f:32:08:63:40:6d:
82:aa:54:30:e1:2a:29:2c:b7:d7:40:82:5f:b5:27:88:62:71:
7f:73:3e:15:c5:a7:40:f8:43:60:02:66:42:a4:70:4d:b5:0c:
b3:c0:23:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWLpqXSks2YT6a1KSUS70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDFlOWQ2MDBkYWFiNjUzNTQzNzI1Y2YxZjljZjk4OGI1
MGQ4NzkwHhcNMjQwNjE2MDAwMDQ5WhcNMjQwNjE3MDAwMDQ5WjAzMTEwLwYDVQQD
EyhhZjY0ZDhjODgxYzFhNDMxZGYyN2Y4NDM2YzQ2NjY4ZGRlODc1MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YysaUUkR1ZCCUSDSW9lBH9gqlZQ
At5RD53j9Y4YIfQ40neIJOfVBrCDtuBbCX40GXp1G9vZ633GL5OFituTUknilIdn
TVSj3q0JyKJ+Xl+z7gz5MEN9is4DE8Al2ORk7kkdo0Lyizu4ebG9j9fTQRR/dGPA
HeyhvNJRiY1k7EUBW+pvqR4V34/60moCVliQvZOi9a/B/HMjPpoAob6rRzB7sRIe
MwraRD8PTu6XVYCcTcp2tDmOgNR8hmJl0yl/fDnwqj2VJDtA6n8pIOJS2CM+76yq
NxparFzZsPlMZMtHC3kzXwkNJx3oReoHNKGc2tJShbDiw10Nx95JZ0jAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9k2MiBwaQx3yf4Q2xGZo3eh1GGMB8GA1UdIwQY
MBaAFDVB6dYA2qtlNUNyXPH5z5iLUNh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjRiN2QtNjg2Yy00ODdiLWFiMDMt
ZDE0ODM4ZGUxNjAyLzEvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZjRiN2QtNjg2Yy00ODdiLWFiMDMtZDE0ODM4ZGUxNjAy
LzEvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLscwh4c
IopiKR5ymfuHMg3tN1z75vDQGfS4GJ+FLgnOx2j+Rcv7U4CYqt96KmOsd+AwGDLH
5ytjflpXJE/XGa175vzEkzBnNOYVjv5Kxwd5tgwZaoFH07B7AYGdV3Xo6oUabOiR
8k8s8KBEvpOEIxvABENnsObqn7lEA+nSWw1XVFL1pHm+VT8zfEe+O1lCJsYWVya2
1coCeS1zjNQdNLMtsEAfTzWu6ZcGUt/e86sSWt0Ptgjkxp9QAAJ01GrYLXJfFbvX
4tMkL8JOm8aCXHeunzIIY0BtgqpUMOEqKSy310CCX7UniGJxf3M+FcWnQPhDYAJm
QqRwTbUMs8AjWg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:36 2024 by rpki-client on console-ams.rpki-client.org