Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
File: nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft (raw, json)
Hash identifier: KZ95GHedtAFUWJjlilkQWRRUYDaNxIvQvQr6VV+U9QE=
Subject key identifier: 39:87:9A:DF:36:FA:1A:D1:A4:32:AA:1E:8E:F7:72:6C:7B:37:9B:6A
Authority key identifier: 9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF
Certificate issuer: /CN=9df69f0be62576805741b73008b5f50ebe96cfff
Certificate serial: 0190448B31671E0E9D966EFF27C14299E6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
Manifest number: 078D
Signing time: Sun 23 Jun 2024 10:01:30 +0000
Manifest this update: Sun 23 Jun 2024 10:01:30 +0000
Manifest next update: Mon 24 Jun 2024 10:01:30 +0000
Files and hashes: 1: nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl (hash: I1DaDh0RUTxNJ8T98iNuqyTMeahdcOzTgcepgVC6748=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:31:67:1e:0e:9d:96:6e:ff:27:c1:42:99:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df69f0be62576805741b73008b5f50ebe96cfff
Validity
Not Before: Jun 23 10:01:30 2024 GMT
Not After : Jun 24 10:01:30 2024 GMT
Subject: CN=39879adf36fa1ad1a432aa1e8ef7726c7b379b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:76:c6:d0:65:a7:a7:50:3e:ca:d0:e5:bd:
8e:b4:e9:9e:e0:02:72:de:80:53:1f:57:cf:ed:3c:
50:cc:b3:dc:e6:b3:56:aa:f8:68:df:2c:ba:27:d6:
16:6d:99:01:f3:3a:6b:ba:bc:79:7b:3b:93:98:5b:
ef:67:11:af:3c:15:80:97:df:2c:30:77:67:2a:d1:
8c:94:85:d1:e8:61:59:d0:71:e6:ed:bb:36:33:0f:
21:7a:1a:d5:f5:9e:06:ee:3a:e9:cd:ca:89:97:cc:
9e:f6:d1:2e:6a:d6:11:8a:0c:d2:fd:71:b8:9f:f5:
de:fb:f1:95:7a:88:bd:95:3e:be:4d:bd:d1:84:d2:
57:31:a0:f6:ed:5b:42:9e:05:67:ad:bd:4d:4e:f1:
69:9d:7c:fc:b7:92:61:21:fd:3b:d6:cd:90:8d:3a:
10:ec:ba:c7:da:b3:5a:33:a5:7a:12:e8:0f:60:57:
14:75:07:21:12:e6:29:e5:97:ad:d1:5a:f8:fb:35:
f3:dd:84:f3:be:f5:a6:c3:f4:b2:ce:a3:0c:88:a4:
3f:33:2f:ac:ee:f7:23:20:0c:d6:f8:e8:ba:91:df:
11:21:e3:f0:df:f8:91:a3:46:e9:80:f7:39:52:ad:
1f:c1:77:90:40:ee:1c:4c:89:68:ac:a3:2b:3e:96:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:9A:DF:36:FA:1A:D1:A4:32:AA:1E:8E:F7:72:6C:7B:37:9B:6A
X509v3 Authority Key Identifier:
keyid:9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:61:fe:66:f0:28:9b:fe:a1:ee:d4:09:e8:fb:85:95:66:49:
e7:a1:c7:5d:2f:15:41:de:ac:08:dd:cb:14:39:15:7d:a1:4e:
6e:a8:9a:3a:49:51:2c:ea:72:ff:79:0d:ba:02:bc:c5:2c:5a:
45:5b:3d:91:f3:47:0e:23:57:15:0a:25:3e:94:67:1c:78:b4:
b0:cd:66:72:e9:ef:53:58:ca:0e:41:90:d6:b0:82:1d:bb:1e:
ec:8a:75:0d:0d:d3:ac:ff:6e:77:fd:b4:a3:21:04:5c:ff:73:
72:bb:1c:b8:ed:8c:84:d9:1d:2b:44:ea:75:bd:2c:13:62:16:
b2:c5:a0:fe:98:45:f5:9c:bb:02:39:f8:84:1e:1b:9e:51:f1:
a6:17:4c:a9:39:fd:dc:b8:92:5a:b7:95:63:50:e6:f8:04:5a:
b9:f9:91:dd:1e:5a:dc:30:43:86:26:60:5b:1d:e4:42:70:76:
df:19:b3:b9:d4:15:bf:19:68:ad:c5:b5:65:86:48:2a:e0:56:
2a:bd:c8:12:fa:2f:e4:fa:b4:5e:84:c8:06:a0:28:8b:e3:09:
ff:6b:6d:11:ce:7b:35:dc:7b:df:28:56:cc:d0:62:1d:37:1c:
af:e7:e3:60:b9:ec:27:9c:ee:a4:26:62:58:31:05:d0:3c:fa:
6c:ba:d6:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEizFnHg6dlm7/J8FCmebTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjY5ZjBiZTYyNTc2ODA1NzQxYjczMDA4YjVmNTBlYmU5
NmNmZmYwHhcNMjQwNjIzMTAwMTMwWhcNMjQwNjI0MTAwMTMwWjAzMTEwLwYDVQQD
EygzOTg3OWFkZjM2ZmExYWQxYTQzMmFhMWU4ZWY3NzI2YzdiMzc5YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu712xtBlp6dQPsrQ5b2OtOme4AJy
3oBTH1fP7TxQzLPc5rNWqvho3yy6J9YWbZkB8zprurx5ezuTmFvvZxGvPBWAl98s
MHdnKtGMlIXR6GFZ0HHm7bs2Mw8hehrV9Z4G7jrpzcqJl8ye9tEuatYRigzS/XG4
n/Xe+/GVeoi9lT6+Tb3RhNJXMaD27VtCngVnrb1NTvFpnXz8t5JhIf071s2QjToQ
7LrH2rNaM6V6EugPYFcUdQchEuYp5Zet0Vr4+zXz3YTzvvWmw/SyzqMMiKQ/My+s
7vcjIAzW+Oi6kd8RIePw3/iRo0bpgPc5Uq0fwXeQQO4cTIlorKMrPpZmPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmHmt82+hrRpDKqHo73cmx7N5tqMB8GA1UdIwQY
MBaAFJ32nwvmJXaAV0G3MAi19Q6+ls//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZhZkMtWWxkb0JYUWJjd0NMWDFEcjZXel84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zNmQ2OWQtNDBmMi00YmRkLThjZDct
OTk5ODRiY2E5MjM1LzEvbmZhZkMtWWxkb0JYUWJjd0NMWDFEcjZXel84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zNmQ2OWQtNDBmMi00YmRkLThjZDctOTk5ODRiY2E5MjM1
LzEvbmZhZkMtWWxkb0JYUWJjd0NMWDFEcjZXel84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmH+ZvAo
m/6h7tQJ6PuFlWZJ56HHXS8VQd6sCN3LFDkVfaFObqiaOklRLOpy/3kNugK8xSxa
RVs9kfNHDiNXFQolPpRnHHi0sM1mcunvU1jKDkGQ1rCCHbse7Ip1DQ3TrP9ud/20
oyEEXP9zcrscuO2MhNkdK0Tqdb0sE2IWssWg/phF9Zy7Ajn4hB4bnlHxphdMqTn9
3LiSWreVY1Dm+ARaufmR3R5a3DBDhiZgWx3kQnB23xmzudQVvxlorcW1ZYZIKuBW
Kr3IEvov5Pq0XoTIBqAoi+MJ/2ttEc57Ndx73yhWzNBiHTccr+fjYLnsJ5zupCZi
WDEF0Dz6bLrWvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:22 2024 by rpki-client on console-ams.rpki-client.org