Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: 2eUPPuiXgHmZpvHDCCf6ccBIRYE9zDT+Jt/+OrDTr1c=
Subject key identifier: A6:95:C0:88:64:BB:DB:34:3B:4F:B1:D8:49:12:FA:8A:20:25:FC:55
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 01901DEC91DF376382152F6737486BAF2F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 0474
Signing time: Sat 15 Jun 2024 22:02:41 +0000
Manifest this update: Sat 15 Jun 2024 22:02:41 +0000
Manifest next update: Sun 16 Jun 2024 22:02:41 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: keT1TID3IbYMoEHcU595MxymdNK5CQpzJX6vkHJG9iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:91:df:37:63:82:15:2f:67:37:48:6b:af:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Jun 15 22:02:41 2024 GMT
Not After : Jun 16 22:02:41 2024 GMT
Subject: CN=a695c08864bbdb343b4fb1d84912fa8a2025fc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:08:1f:0e:0e:0b:7e:33:b4:a5:37:a9:cc:
64:28:ee:42:39:28:b0:cb:3e:c8:dd:9a:bb:8c:a8:
a4:ad:b8:2a:ed:ea:96:b0:55:07:6d:1d:22:1f:c7:
72:be:c0:1f:a9:e9:26:77:42:c9:e2:e0:40:a8:52:
d2:af:fa:6f:de:fa:25:cc:9a:f5:5c:7b:a6:4d:54:
c1:d2:ba:d2:f9:e1:18:80:7e:11:a0:2c:ce:b7:d4:
95:91:15:ad:62:08:7c:ac:7c:1c:51:b6:01:02:80:
10:65:18:7d:fb:96:b2:e5:d1:a8:77:a5:f7:50:21:
87:8d:b6:4f:ac:35:a5:b4:74:1d:aa:c5:4e:8a:af:
f7:85:39:9d:9d:25:c9:33:54:d0:1b:6f:aa:90:b1:
b7:f9:51:c3:b2:be:cf:59:0a:22:8e:f9:a6:da:7d:
40:c4:b6:fa:0c:c9:1c:09:f0:62:ae:42:79:d6:0b:
96:ed:51:2c:31:63:aa:54:30:aa:07:14:5b:21:69:
e8:1f:93:84:5a:20:a5:38:3b:09:2c:a8:2b:ad:a9:
48:1a:11:52:36:64:6e:63:8f:14:fe:ff:48:7a:45:
45:15:1f:a3:7c:a8:aa:a5:d3:7d:de:7d:5b:22:cd:
a8:6e:58:48:b8:f0:63:2c:c9:b1:f8:5e:31:e6:98:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:C0:88:64:BB:DB:34:3B:4F:B1:D8:49:12:FA:8A:20:25:FC:55
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:9e:28:d5:58:38:79:d8:ba:fc:20:41:da:8a:af:73:7c:
bd:fc:18:ef:d5:a5:c2:50:85:d7:52:86:7e:bc:a4:a9:7d:29:
0a:44:41:90:e4:75:f3:89:f6:92:b4:5b:19:ce:f0:2f:a5:79:
d6:d8:28:76:44:ed:a4:1c:45:f9:6f:d5:d0:36:33:de:60:04:
ef:fe:d5:75:a7:e4:93:50:a6:cc:69:ac:92:a5:b4:be:d3:9b:
f3:44:e7:f7:5f:7c:36:6d:5b:22:99:bd:11:7b:ae:a4:14:83:
0e:92:da:90:47:21:94:b7:64:40:3b:eb:ae:39:7e:cc:8d:14:
e5:15:da:b9:9c:5a:bd:1d:08:76:71:f3:7d:fe:34:db:b4:97:
ae:7c:1e:a7:0a:67:a4:a7:38:75:b3:76:47:65:2e:87:cb:7f:
25:1c:e8:00:a5:bc:05:db:1d:db:44:ca:e4:75:ea:d4:e2:a5:
e8:f4:a7:1e:49:01:f4:01:e9:32:a8:98:bf:6d:d4:15:fd:ae:
50:a7:3b:42:55:b0:1b:96:5a:28:08:e5:96:22:c8:9d:b2:d3:
d3:c7:06:ed:3b:f6:44:1d:d0:98:01:7e:cf:f2:9b:d1:19:8e:
f7:53:69:8e:19:52:41:2e:97:26:e3:b9:ee:72:1f:09:d3:c0:
ed:17:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:33 2024 by rpki-client on console-ams.rpki-client.org