Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File: NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier: Q/r6AyJfjUdR/O5g4/exvnvOBcFe+hAJhkqmsOwp0Y4=
Subject key identifier: 89:88:C9:42:09:7A:DB:35:47:62:26:B7:9B:D0:BA:15:C4:1C:4F:2A
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer: /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial: 01901DEC04E4FC8948437842CF5AAE1AEF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number: 0EE6
Signing time: Sat 15 Jun 2024 22:02:05 +0000
Manifest this update: Sat 15 Jun 2024 22:02:05 +0000
Manifest next update: Sun 16 Jun 2024 22:02:05 +0000
Files and hashes: 1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: /ivH72oJ73FsvWJpDdkPKwOFxxrv0NoFqNeAR68SaI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:04:e4:fc:89:48:43:78:42:cf:5a:ae:1a:ef:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Validity
Not Before: Jun 15 22:02:05 2024 GMT
Not After : Jun 16 22:02:05 2024 GMT
Subject: CN=8988c942097adb35476226b79bd0ba15c41c4f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:df:54:0b:08:b5:89:b7:fd:a9:25:42:7f:
f7:96:27:39:e8:ff:2c:7a:77:e8:2d:5a:fa:1f:3d:
ed:2d:71:31:5a:9b:40:66:ae:64:64:2d:72:e7:9d:
bb:65:b4:58:6b:35:c0:1d:25:28:cc:16:58:51:49:
54:0c:07:a1:16:d3:ab:b2:f5:3f:b9:f2:da:e1:c5:
d6:ab:eb:fe:e9:ca:2b:0b:50:c6:07:e3:ea:3e:75:
3c:33:46:e5:b6:9e:fe:95:b6:ec:60:a6:41:a8:cd:
8c:23:e2:b6:36:75:9e:32:57:ff:ca:b1:ac:36:ce:
ba:f0:f3:0d:bf:2b:e3:d7:f3:36:7a:c3:6c:ed:f0:
df:f8:da:44:d5:39:fe:d9:42:01:0e:b2:5e:14:d5:
4a:98:41:b0:41:40:f7:2e:16:f4:ab:34:d7:3f:42:
81:a1:e6:1b:54:90:79:e3:bc:e8:b4:57:63:2b:11:
6d:5d:93:d9:c9:3b:89:14:1e:76:e0:ea:a9:4e:c6:
1e:78:bd:98:02:e5:8d:c5:9e:e3:58:4f:b6:9f:f7:
38:41:6b:cd:33:f0:1a:1c:33:63:59:ac:6f:96:42:
b7:9e:d3:bf:74:5b:e7:21:57:09:f4:a4:67:a9:05:
0e:0d:e7:16:65:80:a0:11:57:f8:df:d3:98:af:96:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:C9:42:09:7A:DB:35:47:62:26:B7:9B:D0:BA:15:C4:1C:4F:2A
X509v3 Authority Key Identifier:
keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:12:b3:a2:ae:19:74:00:2a:a1:9e:32:b1:41:fe:a2:ee:
1d:b4:43:f7:91:0b:ea:e8:b9:9a:56:29:be:37:bd:58:15:2e:
9f:8a:2f:67:db:57:68:a5:dd:0b:58:c3:ca:5a:5a:a0:e2:d2:
7f:aa:50:e2:6e:88:11:18:d9:b3:5a:2b:d4:66:ed:dc:94:79:
a4:b0:a9:ea:9c:07:16:06:87:bd:13:6b:7b:85:3a:03:e0:d1:
6f:b2:34:78:38:e4:8b:e6:94:71:c5:8a:f5:be:35:9b:b9:5d:
93:9a:80:f7:c7:c4:ff:5f:b1:f2:b4:dd:f9:03:bd:27:80:b1:
19:3f:3a:c7:d6:b1:a4:24:0a:d2:91:00:d5:3e:b4:db:ab:a9:
47:5d:1e:da:5f:24:a8:e0:a1:3a:43:fa:c4:24:0b:b6:65:1d:
6c:f8:53:0a:a6:ba:27:3f:2d:1e:c1:a5:30:3f:38:64:92:39:
b5:73:41:89:20:cb:07:8e:f4:05:a6:a4:ce:dd:f6:a6:59:cb:
c4:45:db:21:6d:23:0e:1b:54:b8:1d:3f:d1:03:67:54:da:44:
ba:32:07:ef:74:d0:73:c4:c9:55:9f:55:28:a9:84:ef:03:f2:
23:ac:6f:0d:1a:a7:71:eb:d4:e7:29:b4:a7:2c:85:fb:c5:ad:
fd:e7:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:08 2024 by rpki-client on console-ams.rpki-client.org