Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: jC9WMuTuxUWO7PFw2han3auDc4qhJTXHfNvUCfdQXPU=
Subject key identifier: D2:AF:2B:45:08:57:5C:D5:F6:E4:21:02:47:3D:5F:CB:C8:39:96:77
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01901D0F276211188760F6C55367B4584243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 11CE
Signing time: Sat 15 Jun 2024 18:00:50 +0000
Manifest this update: Sat 15 Jun 2024 18:00:50 +0000
Manifest next update: Sun 16 Jun 2024 18:00:50 +0000
Files and hashes: 1: 7PNTtszwQw_vTtaorEKLuJRgbMk.roa (hash: jrhPjkMGA/h5q71S01ozpQf9Y3rMZrh4Ad+CTz2Ds7w=)
2: YfnqqpQxd0sVF1nYw5J-Dm4c5rE.roa (hash: oLF4fcqQSXz4+YsKmC1WGt/AZHnnhMfyH7ZM4kSwF+Y=)
3: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: ek3gx6qU52MGSalGDsQRXFqUpTqDqMKx97naUQXN7NM=)
4: tCgTknJsUGIZk18TWezCXzHQU5I.roa (hash: tR17Yc+N/XzXhgVXqLpf8c9z0uZa3zE6Xhfnn0ohCic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:27:62:11:18:87:60:f6:c5:53:67:b4:58:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jun 15 18:00:50 2024 GMT
Not After : Jun 16 18:00:50 2024 GMT
Subject: CN=d2af2b4508575cd5f6e42102473d5fcbc8399677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:90:e6:21:27:8d:27:28:0d:a5:d8:c9:db:
ad:e4:3b:2a:4c:cd:8e:09:f7:4d:51:33:44:e9:e4:
6e:76:25:6f:12:66:83:a9:4e:96:8d:e9:3f:0b:d6:
5e:73:4e:d8:6a:7f:bc:55:b9:e2:d8:b6:16:d8:45:
b7:59:6d:ce:6e:48:68:d7:1e:5c:77:c3:ef:d9:e9:
f3:db:e3:d2:6b:f7:41:d9:60:c0:cd:2c:f7:78:8c:
26:be:76:90:72:a2:b9:90:c0:ea:5f:e9:97:fe:42:
05:32:bc:6d:dc:57:96:de:ec:5e:b5:2a:41:5e:3c:
a1:4c:ac:2f:d4:da:9e:b4:40:77:bd:90:d7:ce:77:
45:7b:29:6b:87:53:5a:bd:b6:aa:7c:8a:88:05:98:
0f:b9:7c:36:98:ac:d3:75:c2:65:89:6c:f3:b6:cb:
38:ee:c5:b2:0a:c7:b3:07:aa:2a:b3:fd:5c:3e:e1:
7b:64:d8:03:c8:bc:8f:a2:c8:fc:d5:57:b6:9d:3d:
76:ed:87:76:70:16:d0:6d:a7:78:65:b1:2b:6b:31:
07:18:61:7f:90:93:09:0f:e4:b6:bd:c5:04:71:81:
e2:a4:03:df:35:90:50:73:fd:64:c9:15:9f:96:75:
d2:08:08:88:a5:2e:70:dd:3c:dd:93:a8:f7:8a:ad:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:2B:45:08:57:5C:D5:F6:E4:21:02:47:3D:5F:CB:C8:39:96:77
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:af:af:1a:ae:4b:12:5a:86:07:87:b8:10:57:83:9a:f0:fa:
5f:92:48:ed:94:4f:87:1b:8c:66:6a:df:b4:ca:4a:14:5f:b6:
ef:3b:31:7a:75:66:99:af:90:50:e5:01:d2:5a:18:33:de:82:
71:81:07:ec:aa:6a:af:44:d9:a4:14:bc:3a:60:1e:f1:11:c5:
08:15:65:79:da:b0:80:0d:01:79:7e:69:e8:f9:6f:cd:92:32:
18:56:81:14:ca:9a:9e:2e:aa:aa:0f:39:f4:54:1f:99:6e:77:
90:b3:ba:4a:23:c6:48:ef:6f:a7:e2:c5:c1:04:5c:e9:b0:49:
cb:bd:38:17:0a:e0:16:1d:5f:c3:d0:00:bd:8a:47:ca:96:61:
3c:45:0f:7d:26:f4:c0:1b:ff:91:a1:1a:7c:2c:67:61:dd:55:
66:c8:6c:99:eb:39:2a:db:09:28:70:44:9c:1b:98:55:92:a2:
e5:ed:c9:f9:b6:79:c5:77:3c:2c:9d:3f:41:69:50:1c:97:ba:
0c:cd:32:1a:21:33:06:b6:e8:f9:cb:d9:10:9f:9f:f5:6a:a1:
cd:27:b1:01:53:61:20:a4:d1:0d:58:4a:76:cf:1a:eb:87:b4:
05:3f:fb:9d:31:66:95:2c:fc:69:c1:02:56:5a:d2:da:2a:ea:
49:cc:f9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDydiERiHYPbFU2e0WEJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjQwNjE1MTgwMDUwWhcNMjQwNjE2MTgwMDUwWjAzMTEwLwYDVQQD
EyhkMmFmMmI0NTA4NTc1Y2Q1ZjZlNDIxMDI0NzNkNWZjYmM4Mzk5Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz+Q5iEnjScoDaXYydut5DsqTM2O
CfdNUTNE6eRudiVvEmaDqU6Wjek/C9Zec07Yan+8Vbni2LYW2EW3WW3Obkho1x5c
d8Pv2enz2+PSa/dB2WDAzSz3eIwmvnaQcqK5kMDqX+mX/kIFMrxt3FeW3uxetSpB
XjyhTKwv1NqetEB3vZDXzndFeylrh1NavbaqfIqIBZgPuXw2mKzTdcJliWzztss4
7sWyCsezB6oqs/1cPuF7ZNgDyLyPosj81Ve2nT127Yd2cBbQbad4ZbErazEHGGF/
kJMJD+S2vcUEcYHipAPfNZBQc/1kyRWflnXSCAiIpS5w3Tzdk6j3iq3AswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKvK0UIV1zV9uQhAkc9X8vIOZZ3MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq+vGq5L
ElqGB4e4EFeDmvD6X5JI7ZRPhxuMZmrftMpKFF+27zsxenVmma+QUOUB0loYM96C
cYEH7Kpqr0TZpBS8OmAe8RHFCBVledqwgA0BeX5p6PlvzZIyGFaBFMqani6qqg85
9FQfmW53kLO6SiPGSO9vp+LFwQRc6bBJy704FwrgFh1fw9AAvYpHypZhPEUPfSb0
wBv/kaEafCxnYd1VZshsmes5KtsJKHBEnBuYVZKi5e3J+bZ5xXc8LJ0/QWlQHJe6
DM0yGiEzBrbo+cvZEJ+f9WqhzSexAVNhIKTRDVhKds8a64e0BT/7nTFmlSz8acEC
VlrS2irqScz5mQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:03 2024 by rpki-client on console-ams.rpki-client.org