Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: Q8uA8Vmv02mEJC1xliinpkGZMyrjkircSaKO4pnzhP4=
Subject key identifier: F8:A1:4E:01:7B:31:84:A2:ED:9D:D1:7B:13:AB:52:13:84:4E:F6:16
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0190456698EDE02D8CE89586348D8FDBB7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 11DC
Signing time: Sun 23 Jun 2024 14:01:09 +0000
Manifest this update: Sun 23 Jun 2024 14:01:09 +0000
Manifest next update: Mon 24 Jun 2024 14:01:09 +0000
Files and hashes: 1: 2QC-7R-TAnEHkaPbgnYjG2kzu68.roa (hash: tJ/OlgoOOfyHLsV27wptOkItBLZhUc1xBWukbz+/gvE=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: HhdvNOGXHRHwpiL3iAZawjETkEQDj6s/J1Qv6EqSzS8=)
3: sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa (hash: nCccQSHX5icIb1zXqz4uRKXNg2gbGbqTmUojpuGOrec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:98:ed:e0:2d:8c:e8:95:86:34:8d:8f:db:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jun 23 14:01:09 2024 GMT
Not After : Jun 24 14:01:09 2024 GMT
Subject: CN=f8a14e017b3184a2ed9dd17b13ab5213844ef616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:d3:3d:c5:b6:6e:23:67:9b:15:e1:32:10:
9e:6e:ab:03:44:ba:ee:34:6a:77:87:d9:20:fd:6c:
67:12:c7:8c:20:a2:28:05:9f:6f:1b:56:fa:94:1f:
c9:43:de:f2:38:1a:1f:55:c1:06:aa:37:d7:a1:6d:
a8:5d:c0:43:52:97:d9:55:32:67:44:d2:64:0d:be:
58:ac:23:4b:6c:23:d7:c7:82:71:2d:89:53:0d:09:
86:79:6f:f1:1a:8f:1c:a9:7f:e4:e8:1d:96:46:a3:
fd:b2:44:4e:99:2a:1a:44:bd:1f:f8:0a:d9:da:2d:
09:6a:5f:dc:3d:b7:c7:42:3c:67:bf:46:56:c1:d0:
7b:a3:7d:06:5f:2d:93:1f:8a:14:31:b5:9a:ca:5f:
8c:7d:83:e4:53:45:d8:a9:75:00:b4:92:01:0e:7d:
53:b4:42:13:22:9f:7c:e3:7e:88:31:d7:40:fc:8b:
b7:29:f7:8e:2c:bd:0c:e1:7f:23:99:61:08:a8:f4:
b4:18:12:22:de:40:57:5a:08:f0:4f:ca:16:e8:91:
c6:26:d0:f3:32:32:f2:b3:78:44:b9:f5:36:e7:9d:
4a:c7:9b:42:93:73:36:ef:91:b7:92:c5:9b:0f:64:
05:f0:66:17:c8:84:99:59:49:a4:e3:91:d1:f3:35:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:4E:01:7B:31:84:A2:ED:9D:D1:7B:13:AB:52:13:84:4E:F6:16
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:da:f3:96:7b:79:d3:54:55:4a:d4:a4:64:c5:28:37:af:
21:ab:d3:24:fc:da:8f:e6:06:4a:cc:ae:25:bf:51:66:00:5f:
5f:e6:88:40:79:43:06:9d:4c:43:cf:d0:f3:c6:eb:96:d2:bb:
70:30:24:ad:25:56:38:c2:5d:94:c6:0a:65:ae:35:92:bf:bf:
4d:96:fc:98:2e:7b:bb:6b:a9:14:57:8b:57:97:49:42:a5:6e:
98:9e:d9:07:9f:b4:85:6c:ec:6d:8d:64:b2:b9:72:24:35:4d:
7c:fa:75:e9:f8:38:5f:57:16:35:8b:ee:c9:96:f6:c4:e2:5c:
aa:61:ff:e5:07:fa:65:1a:80:f0:fb:2c:f4:56:a6:24:28:51:
67:10:9d:4b:e6:da:85:32:c9:cc:5b:e0:54:48:54:58:46:32:
2e:5f:67:cb:20:dc:be:4b:68:9d:fc:0d:db:2f:bd:39:cd:30:
dc:06:b6:8d:9d:9d:d3:4d:81:34:fd:24:cf:6d:93:55:a1:21:
50:0a:38:02:80:cf:82:b4:eb:d3:d4:29:f0:42:7d:cf:31:cc:
be:e6:83:09:1e:5d:1f:af:6c:2d:cd:18:25:80:32:28:bf:1e:
57:38:b9:ac:a7:d4:0f:59:8b:5e:38:4c:5f:e6:6b:dc:25:ed:
16:a2:25:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZpjt4C2M6JWGNI2P27epMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjEwMGUxZjZmM2ZmZTZlMzVlOTg3ZTBkMDE5NWI3OTkz
YThkMzMwHhcNMjQwNjIzMTQwMTA5WhcNMjQwNjI0MTQwMTA5WjAzMTEwLwYDVQQD
EyhmOGExNGUwMTdiMzE4NGEyZWQ5ZGQxN2IxM2FiNTIxMzg0NGVmNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG3TPcW2biNnmxXhMhCebqsDRLru
NGp3h9kg/WxnEseMIKIoBZ9vG1b6lB/JQ97yOBofVcEGqjfXoW2oXcBDUpfZVTJn
RNJkDb5YrCNLbCPXx4JxLYlTDQmGeW/xGo8cqX/k6B2WRqP9skROmSoaRL0f+ArZ
2i0Jal/cPbfHQjxnv0ZWwdB7o30GXy2TH4oUMbWayl+MfYPkU0XYqXUAtJIBDn1T
tEITIp98436IMddA/Iu3KfeOLL0M4X8jmWEIqPS0GBIi3kBXWgjwT8oW6JHGJtDz
MjLys3hEufU2551Kx5tCk3M275G3ksWbD2QF8GYXyISZWUmk45HR8zVOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPihTgF7MYSi7Z3RexOrUhOETvYWMB8GA1UdIwQY
MBaAFDaxAOH28//m416Yfg0BlbeZOo0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQt
ZTIyYzZlZDc4NDg1LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQtZTIyYzZlZDc4NDg1
LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavfa85Z7
edNUVUrUpGTFKDevIavTJPzaj+YGSsyuJb9RZgBfX+aIQHlDBp1MQ8/Q88brltK7
cDAkrSVWOMJdlMYKZa41kr+/TZb8mC57u2upFFeLV5dJQqVumJ7ZB5+0hWzsbY1k
srlyJDVNfPp16fg4X1cWNYvuyZb2xOJcqmH/5Qf6ZRqA8Pss9FamJChRZxCdS+ba
hTLJzFvgVEhUWEYyLl9nyyDcvktonfwN2y+9Oc0w3Aa2jZ2d002BNP0kz22TVaEh
UAo4AoDPgrTr09Qp8EJ9zzHMvuaDCR5dH69sLc0YJYAyKL8eVzi5rKfUD1mLXjhM
X+Zr3CXtFqIlXg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:10 2024 by rpki-client on console-ams.rpki-client.org