Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: 2RsoggD1UCsPdFhyBnYpw1Fzo8fhVa9yTDfkiNYetc4=
Subject key identifier: BA:90:6D:D2:FD:67:B0:23:EF:E6:B0:8E:14:9C:31:49:2F:82:6D:97
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0190448C27089518C94435FD5827B6323D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 04F3
Signing time: Sun 23 Jun 2024 10:02:33 +0000
Manifest this update: Sun 23 Jun 2024 10:02:33 +0000
Manifest next update: Mon 24 Jun 2024 10:02:33 +0000
Files and hashes: 1: 189SBiDiQmkkYB7PsaGish2aMXg.roa (hash: 6nM83JyY4NVKOGXZhs88d0F8UgPrOopxyc6NSok6zA0=)
2: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: 0JDGNjm6sSjoVQXSvi4I4UYWg64qdr3SmyzTGXxCF8g=)
3: qvGLp0H_EijjouOgk-b1feUfccA.roa (hash: qc5VuGVAcEkYd8huv58Weu0+ginrtq6C5VpR6nghSq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:27:08:95:18:c9:44:35:fd:58:27:b6:32:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jun 23 10:02:33 2024 GMT
Not After : Jun 24 10:02:33 2024 GMT
Subject: CN=ba906dd2fd67b023efe6b08e149c31492f826d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:05:72:b6:fc:26:98:b2:da:40:da:82:1a:
cc:60:81:80:0c:b6:6f:4d:08:c5:b6:9c:e9:c9:94:
05:97:68:9b:eb:f0:00:b4:87:78:be:1b:d7:80:9c:
d7:a2:98:97:cf:16:1e:30:86:03:99:e4:ce:7f:b3:
9b:a3:23:a9:66:09:78:e2:70:fb:00:26:d9:f8:06:
ae:bc:30:e3:a2:f8:a5:21:f4:4a:05:7f:81:92:52:
8d:94:b1:7b:eb:0f:2c:40:78:14:7f:6e:69:49:6a:
91:7b:56:23:d8:7c:3b:72:2d:a7:3f:15:37:3d:5f:
ab:a4:c0:d1:de:6a:12:1f:8a:55:09:e0:c4:bd:6e:
4d:44:98:c1:cd:cd:2f:5c:27:51:59:c8:3a:f1:99:
61:7c:c7:df:4b:4a:fe:17:6e:02:8f:61:25:94:f7:
eb:42:7e:9c:49:44:14:9b:b3:64:ec:82:50:84:3b:
bf:fa:fc:54:72:07:69:80:fa:36:3c:3a:20:1d:00:
8e:2e:0d:4b:11:6e:53:ee:e5:02:dd:07:47:e3:6c:
25:16:d6:b1:48:27:39:fb:eb:11:a6:fa:89:9f:54:
8e:ce:5e:58:f9:7f:dd:87:45:60:26:07:a4:21:ff:
63:c1:68:99:a9:0b:6b:12:b7:fc:2a:53:90:d8:e7:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:6D:D2:FD:67:B0:23:EF:E6:B0:8E:14:9C:31:49:2F:82:6D:97
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:52:dc:b9:f7:2d:c6:c2:85:24:d2:da:dc:46:45:8c:ba:
5f:11:86:8f:5f:8f:bc:cf:c9:a7:71:33:f0:da:b8:91:9d:7b:
bd:16:77:58:e1:6d:bf:5b:dc:ef:65:80:d3:7d:22:da:99:e8:
22:61:9c:d9:2d:66:40:09:a5:18:93:5b:95:83:7e:ec:d1:a8:
9b:31:9e:49:ee:4e:de:e3:5b:69:1d:a3:84:4e:db:1f:4d:81:
d1:ae:d4:36:a0:96:46:ed:be:d0:b5:3a:5b:e9:41:0b:48:58:
48:8d:e6:42:dc:29:33:bc:71:09:ea:4f:87:3f:ef:12:e8:ba:
30:16:58:dc:7f:c0:a9:cd:d3:1d:e8:a7:0c:4c:5b:5b:93:03:
a1:22:6c:b0:a4:5e:1f:76:65:ac:d7:9b:62:57:52:ef:7e:97:
32:e5:ad:28:c8:0e:02:c1:92:30:68:75:2c:02:29:79:70:b9:
f3:46:5d:02:cd:25:a6:62:3f:29:c4:ac:69:b9:41:63:71:c1:
04:91:f2:26:8f:e5:fe:2d:2b:dc:7d:e2:29:54:03:78:fd:62:
9e:5a:9b:7b:32:36:81:d9:7b:3c:8b:af:31:6d:23:ba:51:c3:
71:7b:80:f5:7c:39:92:14:ae:2c:cc:e2:90:6b:61:c9:e6:2e:
85:47:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:20:43 2024 by rpki-client on console-fra.rpki-client.org