Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: SguyzvX0zy+Z15fDU/laGuNS2IenUAn17i9S/R0TiNo=
Subject key identifier: A0:7E:1C:5E:21:C6:73:0A:AD:DF:CC:86:EB:22:06:C1:8B:B3:D8:57
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 01904189D54B0DFF781E2FBCBA74CC93BABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0BE4
Signing time: Sat 22 Jun 2024 20:01:10 +0000
Manifest this update: Sat 22 Jun 2024 20:01:10 +0000
Manifest next update: Sun 23 Jun 2024 20:01:10 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: 04lc2nwNzn3QMpvWBVOiHIZrdyTQ0Op/DOUSCFCUO34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:d5:4b:0d:ff:78:1e:2f:bc:ba:74:cc:93:ba:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Jun 22 20:01:10 2024 GMT
Not After : Jun 23 20:01:10 2024 GMT
Subject: CN=a07e1c5e21c6730aaddfcc86eb2206c18bb3d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:b9:a6:00:63:62:d0:81:bf:02:8e:7c:c8:
1b:94:d6:af:43:a6:37:3a:2e:50:2a:e7:52:7f:0f:
35:4e:40:b7:1d:17:0b:08:9c:9c:2e:aa:71:6b:b5:
0b:d5:97:a8:50:18:70:cf:d4:e8:a0:97:53:91:5d:
9d:4a:37:07:c1:62:31:01:e9:fd:c7:a6:f2:65:22:
58:7e:bf:77:da:23:2e:34:16:e1:d9:00:3a:1f:ad:
57:ee:34:9f:a5:36:de:b6:12:1c:2c:94:ba:f8:45:
7f:0c:5d:70:03:cc:8a:a5:50:f0:c4:98:bf:a1:9b:
36:77:29:30:2f:a5:10:5d:d4:94:95:56:88:0d:7d:
25:60:cd:ed:87:5f:a3:5d:33:c6:e1:47:a8:aa:60:
26:ca:47:51:60:11:eb:3d:48:4f:43:51:70:cf:75:
68:2d:74:c1:88:dd:68:46:4c:a5:8f:76:e0:d3:b5:
1a:f1:63:c2:a0:91:5a:05:6c:57:e7:04:4b:6a:40:
93:00:d6:88:9f:f1:12:86:4f:a2:f0:f1:76:bb:68:
c5:7c:93:a7:40:80:e3:51:f8:a4:e4:b0:de:e5:eb:
5f:83:29:e3:94:79:50:17:a7:4d:6a:f5:36:27:d7:
e4:bf:8b:36:13:2c:88:63:bf:43:c8:18:1b:17:7a:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:1C:5E:21:C6:73:0A:AD:DF:CC:86:EB:22:06:C1:8B:B3:D8:57
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fa:52:1d:9a:ea:32:2d:b0:b1:8a:d5:eb:33:f1:b8:7b:8e:
88:13:09:24:20:54:d7:bb:63:76:75:38:80:cf:81:73:71:32:
64:9f:e0:5b:88:d6:ea:fd:9b:3a:5a:a0:79:02:2b:1a:88:cd:
4e:bc:7a:e2:17:92:00:b7:31:5e:1d:53:87:c0:67:c4:17:f5:
c4:0d:b2:f7:32:ca:e9:85:0c:34:b5:36:22:f6:4b:f0:d0:46:
b3:1e:cc:66:3e:20:c6:f4:bc:ce:dc:9b:6f:69:9a:e5:ee:06:
e2:ca:a1:86:01:cc:1b:38:48:02:3d:74:1c:f5:77:e1:4d:de:
e9:88:fe:a9:97:3f:a1:c5:49:3d:23:d4:44:a5:81:58:92:39:
fc:be:41:fb:15:31:7a:86:49:6d:6a:63:20:fe:fc:ef:11:ea:
ee:0a:95:0f:ff:88:cb:6d:e2:23:d8:e5:c8:b5:88:13:7f:25:
cd:8e:79:9f:9c:ec:1d:31:4b:8a:7d:46:b1:05:52:e5:20:be:
59:61:8e:0e:78:8a:25:93:ac:00:21:b8:b0:b0:16:73:22:22:
24:26:c5:21:7a:5a:08:bc:12:ca:1c:0e:ac:14:a4:26:7e:39:
b4:6f:77:41:e7:97:52:97:0d:d7:b8:5a:3f:de:13:60:96:d2:
73:41:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:57:04 2024 by rpki-client on console-fra.rpki-client.org