Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: efGsoxzpEHFd02/aL9kRpkgZzFTYkv6Dr1p/0w+nZzI=
Subject key identifier: 1B:EB:B2:EC:8D:6B:3B:B9:FC:59:6E:2F:50:0F:3E:17:65:C4:56:7F
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019357D2B330B817E88192AA2C4C13B3A8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:46 +0000
Manifest this update: Sat 23 Nov 2024 07:00:46 +0000
Manifest next update: Sun 24 Nov 2024 07:00:46 +0000
Files and hashes: 1: 1ge24mR_TVb7zcIxHzdx-BIhFag.roa (hash: /BfMNv7RiNI+LL5/3PlRpg9duDlKUF1+UFFYdpiqBCk=)
2: 5r2DKXWFOzJ3O47HmmS-om3sJTU.roa (hash: TdIu0ZqCO/dE5pDnNxxo02P4Y3BL2QuXw0/2/8P4Dlg=)
3: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: MHsYYAfe9E4iIxo1sc0TILNeyT8yDM52dfmA4N4nSFE=)
4: yd0u-uOfH6f0RaT8HMwSM4tkmKs.roa (hash: I9foJDumJEWM7IXephE7pL2jqclsitkMkKwoV3auuPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:b3:30:b8:17:e8:81:92:aa:2c:4c:13:b3:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Nov 23 07:00:46 2024 GMT
Not After : Nov 24 07:00:46 2024 GMT
Subject: CN=1bebb2ec8d6b3bb9fc596e2f500f3e1765c4567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:84:e8:92:79:83:a8:f1:37:8a:e1:52:72:
31:c5:15:0d:d0:14:5b:42:2f:0f:4e:8d:e2:4f:2c:
3e:b8:b8:54:6d:46:f3:31:1d:96:be:10:5d:d0:8f:
9f:48:7b:1e:d3:20:1b:2e:03:31:93:41:5b:84:97:
d8:5a:4c:56:90:45:b8:9b:d7:9a:24:9b:b2:bd:d6:
78:b9:45:63:a3:34:2b:0f:f6:08:78:dd:f2:b0:d2:
50:a0:a5:fa:e9:e1:34:7d:07:49:84:e2:d9:a1:47:
36:b8:8f:7a:45:c0:b1:f5:f7:b6:a8:3a:60:95:a2:
97:ac:cf:95:01:de:8e:43:1c:d5:76:90:b4:b4:9c:
ff:42:a0:55:1b:e1:07:f2:fc:1c:ce:ee:e1:f4:d6:
c8:9f:89:03:8e:a3:71:09:43:0a:b2:e4:8c:80:25:
a4:3e:47:04:38:15:2b:0c:05:a0:60:d6:ce:63:4c:
d4:02:ec:b2:f6:11:76:fc:a8:c5:3e:78:08:fe:99:
8c:b4:29:c6:2c:5d:9f:fb:bd:5b:0b:90:f7:4e:ad:
a7:c9:a4:fd:33:f1:0b:30:1b:7c:8f:8f:1e:4a:41:
01:9f:2e:1b:aa:55:40:b7:f6:a0:73:7b:fe:b5:4f:
4a:b9:99:38:19:a7:cb:bc:61:4f:70:5f:3d:db:c1:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:B2:EC:8D:6B:3B:B9:FC:59:6E:2F:50:0F:3E:17:65:C4:56:7F
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:84:d9:6c:d0:cb:b5:40:c5:b7:a2:90:ee:ed:71:5b:3e:
85:29:f3:02:56:66:d5:7f:44:97:c2:f1:25:25:31:99:8d:00:
00:76:7a:e5:1a:ad:81:28:2b:a8:b9:63:09:12:c1:d8:ea:92:
74:29:09:e9:5b:c8:14:d2:04:df:cb:4b:3a:3a:12:f1:4c:19:
70:0e:26:2e:76:c6:67:95:d9:69:11:bb:19:8c:53:99:f6:5f:
ad:84:a4:fb:52:6c:6e:2b:b8:dd:03:c1:32:59:a5:12:a1:22:
49:19:30:fb:c3:97:25:3c:3b:dc:1c:11:e9:cc:e4:fe:87:47:
11:d2:9e:02:08:ee:ce:89:96:45:d4:01:73:e2:50:79:37:24:
d6:29:9e:b8:54:ff:9b:43:f4:a4:fa:b5:0a:7b:01:13:ef:fd:
7a:d6:55:44:36:ef:5c:10:42:75:c3:26:a1:c0:8d:c0:14:f1:
22:94:43:21:a3:e6:87:1d:18:95:ef:62:01:23:15:9e:6c:c8:
7f:6f:e5:9e:56:94:11:3b:c4:1a:98:5d:c3:d4:c5:63:c9:e3:
ae:12:63:f2:7f:db:97:82:15:49:d7:72:78:49:95:51:90:fb:
3f:ea:bb:58:e3:31:e9:3f:52:71:e5:eb:b9:bb:6a:36:2f:60:
b8:fc:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:45:22 2024 by rpki-client on console-fra.rpki-client.org