Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
File: 3o29_ntfwsHflmKJSlS-nmvKXcs.mft (raw, json)
Hash identifier: JEmsXNnYN9HpVepLNquW3fQSSHjVySY933uloumvG0k=
Subject key identifier: 23:89:B4:BD:C0:74:57:39:6B:B5:67:BE:0A:07:48:AF:6A:F7:01:62
Authority key identifier: DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
Certificate issuer: /CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Certificate serial: 01901EC68849C86196152587952C8E92C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
Manifest number: 01CC
Signing time: Sun 16 Jun 2024 02:00:45 +0000
Manifest this update: Sun 16 Jun 2024 02:00:45 +0000
Manifest next update: Mon 17 Jun 2024 02:00:45 +0000
Files and hashes: 1: 3o29_ntfwsHflmKJSlS-nmvKXcs.crl (hash: eldt74xTiQZo7m67/iNA80TN/4OtlHjS6en9O98jbR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:88:49:c8:61:96:15:25:87:95:2c:8e:92:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Validity
Not Before: Jun 16 02:00:45 2024 GMT
Not After : Jun 17 02:00:45 2024 GMT
Subject: CN=2389b4bdc07457396bb567be0a0748af6af70162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fd:b4:38:58:ea:91:6d:91:c9:c0:cf:97:76:
ef:7f:67:cc:f9:27:8e:66:e1:e1:4f:fc:0a:a0:38:
c6:ba:0e:4c:21:5a:0d:a1:df:c8:2c:a1:6e:cc:93:
96:83:8b:2a:41:fe:a5:61:a8:dd:8d:78:6c:89:26:
96:6a:b9:d1:eb:f0:fc:7b:da:d6:59:06:bd:74:8a:
37:b1:82:ae:ce:23:6c:5a:6e:4f:c9:98:0c:7e:d2:
42:2a:30:95:fe:e5:53:41:8a:45:31:23:bf:c2:ce:
e6:c8:d5:2d:be:a7:31:17:f5:58:45:17:36:5a:b5:
86:78:c8:8f:46:a1:4b:cc:ed:d0:59:f7:6d:dd:0d:
c4:70:57:e1:ae:cc:e8:80:e6:8b:db:83:55:7a:a7:
7b:fb:bf:f2:3d:1b:98:32:61:05:09:f3:9a:d6:24:
07:e3:09:1b:38:02:cd:d8:51:15:48:de:5d:5e:e5:
17:c0:ce:06:77:3e:33:2b:f4:94:ef:99:fc:f6:8c:
55:9c:b3:80:d6:11:07:94:60:bd:8b:89:c1:d7:53:
80:a1:6e:d8:68:7c:1a:dc:ab:33:bb:78:43:6b:c5:
b7:a1:29:57:f4:6a:e8:bd:65:45:7e:c8:83:12:0c:
74:b8:b1:3a:bb:6e:d2:f9:54:20:90:bb:06:2f:97:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:B4:BD:C0:74:57:39:6B:B5:67:BE:0A:07:48:AF:6A:F7:01:62
X509v3 Authority Key Identifier:
keyid:DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:fb:27:85:79:21:2a:a5:72:ab:de:34:97:a7:9c:85:27:
2f:43:14:a1:49:c1:be:f0:f3:a0:34:45:7a:f9:eb:79:b2:85:
16:0f:d3:8e:1f:e2:e3:91:96:33:e0:7f:c4:3e:49:aa:48:f6:
99:83:ed:91:10:84:f4:19:58:cf:c7:d0:fa:4d:30:f4:7c:f4:
33:68:ff:33:4f:93:92:1e:27:93:35:1e:96:08:b9:25:7f:bd:
fb:d8:f7:22:71:b6:fb:60:c9:3d:bf:95:88:55:07:d2:eb:84:
d9:c1:27:40:9f:d6:0d:48:af:94:8f:fb:a3:c9:45:8f:31:ae:
e6:dc:bf:df:8e:27:96:a3:81:f4:07:30:09:96:22:5a:ba:40:
19:5f:11:84:53:dc:0b:e6:9f:16:cf:48:60:dc:8e:93:9e:b1:
63:39:56:bd:88:32:9e:1f:76:9a:af:9c:da:3a:14:84:d9:36:
34:31:11:e2:a4:59:06:b9:9c:e5:02:c0:55:32:b1:75:28:ea:
1a:4e:67:6e:f2:8f:21:f0:0d:61:2f:e3:ba:97:c8:09:ac:bb:
ee:3d:17:e2:f8:22:76:40:e7:5c:c9:b1:a5:16:cb:4a:79:86:
c1:98:fc:1b:52:cd:4a:8f:fb:09:aa:45:83:0a:fc:9d:ba:f7:
f6:33:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:33 2024 by rpki-client on console-fra.rpki-client.org