Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: Z6D90+9oasCr7MbkmKUYO+F2p49rDF6y/bmvM8z9+kU=
Subject key identifier: D2:B0:66:6F:DC:33:80:42:80:A5:2A:6C:CE:1D:58:1E:11:4B:74:54
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 0192384A762ED797139225B63B3578983B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 028E
Signing time: Sat 28 Sep 2024 11:00:56 +0000
Manifest this update: Sat 28 Sep 2024 11:00:56 +0000
Manifest next update: Sun 29 Sep 2024 11:00:56 +0000
Files and hashes: 1: 1-tzBf-Wr3oKV0iv3bsRKuDgYGdA.roa (hash: 5JSPTdWpNRdccxfShq3u2dljPvCcARVXkF0fKieXVC8=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: Eyr8rYqDfPue0UC43F09SxHxfXnABswb9EMqx6VB0xI=)
3: NSHEaaCBXTNz8CpvUtelrzzw0dw.roa (hash: J3vuWkEa9l3hsKKpcMLH9LuIPxogUD1PlFZMGFFJidg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:4a:76:2e:d7:97:13:92:25:b6:3b:35:78:98:3b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Sep 28 11:00:56 2024 GMT
Not After : Sep 29 11:00:56 2024 GMT
Subject: CN=d2b0666fdc33804280a52a6cce1d581e114b7454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:08:4e:b7:f2:0e:ac:61:9a:34:64:b8:2e:
da:22:68:9f:05:55:53:f9:5d:71:7c:20:92:b5:67:
6f:4c:7a:17:51:16:cc:ac:c4:5a:f1:55:54:1c:4e:
2f:1b:2e:ee:96:03:e8:7e:19:51:fe:eb:63:6f:c7:
1d:15:17:21:ad:58:fe:1b:14:a8:1b:7d:c2:05:60:
ab:6a:37:b1:c0:a4:26:85:09:b5:07:e4:e0:72:f3:
2e:73:05:31:0c:fe:15:b2:f0:24:de:31:bc:ad:fe:
5a:db:7e:00:00:66:d8:17:88:be:6e:5e:6b:f4:7c:
e4:91:f6:4c:72:a4:01:3d:01:a6:6e:40:d3:d4:7c:
89:01:9a:d2:f5:bc:dc:2e:a1:96:a2:68:a6:77:90:
7e:79:4c:de:0e:58:b9:df:95:75:bd:b0:f1:29:5e:
33:35:0c:be:22:f3:f6:1f:f3:65:f8:90:b8:66:1b:
7c:49:f9:71:d4:39:e4:bc:f3:07:54:fd:5b:76:75:
65:16:d1:8f:42:7b:61:e5:d4:6a:5b:a9:5d:a1:f6:
e5:8f:f1:35:e9:e9:c3:bf:47:6c:5c:87:35:43:35:
38:87:cc:43:d1:33:11:56:f6:4b:cf:04:7c:08:d3:
23:99:28:c2:76:39:04:ec:fb:a1:ae:0a:b1:37:5a:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:66:6F:DC:33:80:42:80:A5:2A:6C:CE:1D:58:1E:11:4B:74:54
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:af:b4:fc:c0:c3:8e:b0:20:19:9b:03:8d:b5:3c:8e:2d:
84:b8:c0:ff:fe:dc:49:c0:4e:62:32:26:be:6e:76:57:8d:3d:
cb:5d:4a:d7:cb:6d:8a:18:d6:e9:8a:a2:65:98:cc:21:ba:b4:
ee:5a:ca:70:30:ac:af:76:14:2a:93:dd:50:79:11:ea:43:71:
af:d7:9a:db:0a:67:a8:28:1d:fa:86:fe:68:88:92:3d:ac:dc:
de:e9:1c:4d:42:05:ab:dd:e2:f6:93:2f:55:d6:2e:3f:64:e1:
af:a5:18:d4:d2:96:64:80:87:eb:6e:56:46:ef:eb:86:89:bd:
bf:6f:a3:bd:89:0b:e6:ea:95:c8:c3:50:55:72:08:06:38:9b:
0d:51:7a:1a:9b:bc:0c:54:fb:3b:8e:21:8f:dc:05:2b:43:ff:
2e:48:89:b1:ff:97:77:fa:4f:2b:5e:8b:20:48:33:3e:62:ca:
1c:5a:e4:12:01:2f:bb:50:e8:1f:48:08:7f:0b:3c:c0:09:6c:
a7:d2:f4:10:69:c9:06:41:a0:d0:98:a4:b1:37:f8:83:01:c8:
28:68:d6:93:17:db:4c:99:1d:f8:20:4c:e6:ff:bd:f7:66:7c:
c8:a3:a8:e4:1d:71:f6:6f:a6:23:6f:8e:b7:99:6b:3a:5b:53:
ac:f6:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:17:10 2024 by rpki-client on console-ams.rpki-client.org