Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: rmX4V7vqa+/V/kn/8BGagSS8r2r5W0f7Ng8//VSxE/E=
Subject key identifier: 6C:33:C3:AD:0B:3B:18:0A:63:0F:FF:B8:67:A8:17:DD:92:F7:CC:BD
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01901D4684576358F6F0E96B08D72E9644D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 19:01:18 +0000
Manifest this update: Sat 15 Jun 2024 19:01:18 +0000
Manifest next update: Sun 16 Jun 2024 19:01:18 +0000
Files and hashes: 1: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: oWWOGnfSYMl1ICSza+RXENqKodVljlFFGXzzB94GsQs=)
2: Tfbz4XRqO9N8l5fqVzAm31f2004.roa (hash: i9m9fA86UpDXkafd35BO763NMxyHtr/odwJ1Rv9yrLY=)
3: xmjbxR5UBTaXlW0VK9l1Bef8G4I.roa (hash: gDq3uCz+6RZ0PvCqK0cWYQkCxdlHWR4LiNXz9ucNilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:84:57:63:58:f6:f0:e9:6b:08:d7:2e:96:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jun 15 19:01:18 2024 GMT
Not After : Jun 16 19:01:18 2024 GMT
Subject: CN=6c33c3ad0b3b180a630fffb867a817dd92f7ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:cf:64:4f:1a:4e:15:a6:8e:6a:72:14:d1:
af:1e:55:f8:84:5b:63:7a:6a:81:ad:9d:c9:a8:fb:
06:ae:4e:69:f0:1f:c2:f2:9e:8e:1d:4a:7a:38:96:
e5:06:dc:53:00:5a:1b:ef:26:97:1a:a3:ce:2b:18:
a6:d4:b6:6c:06:83:05:e7:71:e1:37:8a:be:c3:e9:
43:71:ca:dc:dc:4e:72:f8:8e:a2:13:27:4e:be:81:
79:53:e2:73:78:7f:ad:cb:77:d8:97:77:0a:2e:f1:
e6:47:cc:f8:38:ba:34:42:d3:f6:ff:e6:ca:53:01:
89:e0:5d:0d:f8:22:9a:d5:2a:63:cc:b8:b8:c1:2a:
a8:05:3f:ce:fb:26:74:70:d3:2c:e1:a2:89:e7:46:
17:39:ba:17:6e:fd:53:9c:7d:12:40:3e:71:f1:35:
94:00:82:f9:0f:61:03:db:31:05:d2:d0:3c:cf:58:
d9:4c:98:17:b2:03:83:a0:e2:49:bd:1b:ad:75:c9:
e9:19:b7:04:41:fd:81:24:4a:ea:f0:c2:ec:2b:4e:
73:8c:82:7d:4d:06:5f:3e:70:87:f0:09:4f:9c:96:
05:8a:63:1e:c5:b8:ee:29:07:25:99:bd:ca:4b:a0:
0e:5f:55:4c:43:a5:2a:09:5a:3b:97:b2:78:14:91:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:C3:AD:0B:3B:18:0A:63:0F:FF:B8:67:A8:17:DD:92:F7:CC:BD
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:f7:0a:a7:00:77:85:01:ae:f6:88:04:91:bc:e7:49:1d:
75:c5:b4:db:b0:c0:c9:aa:92:75:45:81:55:6e:56:17:ab:72:
0c:0c:9c:be:2c:80:68:28:cc:df:95:b8:bd:e7:a2:98:ba:7e:
42:ea:8f:cd:96:3b:e9:72:02:a1:ae:28:e9:f5:29:c4:7b:80:
70:d2:0a:76:35:4c:57:b2:24:e8:38:ad:c6:19:40:5d:a8:8e:
23:a9:07:46:c7:20:39:62:eb:d1:ec:23:4e:39:4a:c0:45:2e:
a0:24:6f:74:24:01:91:81:b8:95:81:a0:89:d6:2a:40:b5:34:
15:84:92:ce:76:84:2b:a9:52:ac:d6:69:a3:35:ee:41:af:e5:
48:4f:a4:56:14:3d:19:bb:b7:f3:92:50:f3:bb:fc:80:ef:2f:
b3:5d:d6:82:c8:bc:73:64:6c:bb:83:c6:ee:21:c8:ae:c7:fe:
ba:ca:55:0a:d1:f9:dd:26:0d:21:6c:6a:ba:89:1e:26:2f:af:
d5:90:87:fd:74:2e:d3:28:70:ab:74:59:e0:1c:90:db:8d:0e:
4c:c7:1b:82:bf:cb:38:a8:83:3c:86:a3:d7:36:e9:1e:c5:4d:
58:40:61:47:be:3f:93:72:51:9b:a8:a9:e5:c8:6c:9f:a6:10:
b3:ae:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:01:49 2024 by rpki-client on console-ams.rpki-client.org