Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: zlGuT/DJLg3VXsJ/pZ317AjbeLzULVdhfoPSGyI78as=
Subject key identifier: CE:5C:CD:A5:D0:F1:C4:7E:A4:09:79:FD:9A:63:6E:5B:EE:ED:4E:01
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 0190448CBA66904768E8395DF44EB547B521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 10:03:11 +0000
Manifest this update: Sun 23 Jun 2024 10:03:11 +0000
Manifest next update: Mon 24 Jun 2024 10:03:11 +0000
Files and hashes: 1: D1eR3_i3vTxs9UYK0NxF1GM2O4g.roa (hash: nK+8ZNRXHBWodHmqMaYBDyJmp2MVVr+JpC+aVhB5YFc=)
2: Hy5XhvOpa-CdHRMZUNTe2r-iqLI.roa (hash: FbTa6/5XBGzcgPs1X3jABifU50jbvaTPa5C8jl9DAcU=)
3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: wx+QYTkMnRWPj6B4nvvIDq44lZZ/WXttQkmRw9Uz6HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:ba:66:90:47:68:e8:39:5d:f4:4e:b5:47:b5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jun 23 10:03:11 2024 GMT
Not After : Jun 24 10:03:11 2024 GMT
Subject: CN=ce5ccda5d0f1c47ea40979fd9a636e5beeed4e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:e9:31:2a:ab:f7:e1:14:9c:c7:4c:9c:02:
59:56:61:dc:60:eb:43:a6:59:61:72:92:60:2b:f9:
ca:7a:4e:0f:7d:d9:0d:08:bf:28:9c:39:52:1c:a0:
03:f5:6b:1d:9c:88:c0:fb:51:d1:cd:49:78:ec:d6:
b2:7a:3b:85:7a:ae:9c:78:c7:3a:32:4f:b5:0b:05:
11:ca:f5:26:a3:5c:08:1c:68:ef:67:59:b6:f9:28:
84:2b:72:86:5f:18:82:a7:f5:8a:99:d6:66:92:9b:
ea:f8:e5:8b:0b:5e:0b:48:e9:39:46:e8:b1:be:80:
e1:62:9e:de:08:d8:0f:02:ea:25:28:81:88:a5:fb:
9c:73:bf:cd:81:4b:71:86:be:d6:a5:11:74:89:aa:
7b:9e:6d:88:29:eb:b0:52:de:e3:f6:83:a6:66:b2:
c7:a8:ce:8f:07:05:6f:4c:a2:fe:b2:c8:2d:79:e5:
da:f8:30:31:da:9b:eb:41:a4:22:cb:8a:37:be:6c:
36:47:17:17:fd:3d:53:ed:54:a7:1e:a7:f4:0e:a4:
92:e3:3b:21:cd:29:63:a4:17:38:94:9c:1f:c1:8c:
3a:e2:13:1a:84:78:f7:91:aa:56:68:87:f8:5a:e1:
05:07:a0:64:f5:9f:96:d8:6a:e3:45:2b:77:17:ed:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:CD:A5:D0:F1:C4:7E:A4:09:79:FD:9A:63:6E:5B:EE:ED:4E:01
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e2:0a:0f:d9:3e:29:95:e9:65:70:1e:ef:20:59:23:b5:3d:
43:a7:ca:fc:18:41:43:38:4f:aa:6d:85:77:84:01:e9:85:c4:
0e:d9:1e:2c:09:64:40:f1:d1:e5:c4:38:05:00:c1:9a:9b:ff:
ed:7a:33:7a:7d:f9:2e:e9:9d:76:76:de:63:22:95:3e:f8:ca:
47:31:0d:a8:85:37:bd:7b:2e:51:6b:ef:26:76:fb:c2:50:89:
19:b6:21:1f:de:c0:a0:42:24:68:d7:e7:94:f8:83:dc:4e:62:
24:8a:a1:55:31:4a:42:01:56:aa:0b:d1:36:4e:25:e0:8a:f6:
40:60:85:a5:d7:90:89:9f:aa:f5:ce:54:c0:db:ff:01:68:37:
15:03:3f:1a:e0:b8:c6:64:87:f8:1c:b4:1e:81:96:eb:df:db:
40:ba:3a:8b:15:a8:5b:bb:22:0d:17:bf:02:fe:4e:ce:97:b5:
a7:71:0e:bd:5a:3a:74:cc:0d:96:78:e1:5b:81:c5:3a:36:ae:
13:c3:da:2c:a0:63:5b:a5:79:1f:fb:d8:e4:c5:62:2d:c6:ff:
d5:12:47:f9:2c:16:01:d4:a7:20:93:f7:3a:05:a9:2a:87:0e:
d5:69:5b:cf:86:27:be:75:b8:b9:49:96:cc:e0:74:19:a0:38:
ae:ee:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:21:51 2024 by rpki-client on console-fra.rpki-client.org