Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: 93KT06g7LB9Bb15mLZ2chzx1hyRceVPIlzyaCBNZ+Eo=
Subject key identifier: 82:03:02:3B:E9:6E:76:6E:95:E0:45:9D:42:2A:A7:59:C5:28:6F:DA
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 0190459D846A31472B674AD45E5CD71CA6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 0AF2
Signing time: Sun 23 Jun 2024 15:01:09 +0000
Manifest this update: Sun 23 Jun 2024 15:01:09 +0000
Manifest next update: Mon 24 Jun 2024 15:01:09 +0000
Files and hashes: 1: 9kx6QMIDIc-QQ0msakrNbc3LfAo.roa (hash: Mzfyu5ldhktrDaWZ6FOmQGde4gR1zR18XpHKaPn3914=)
2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: MsFPPDBX1Jyk8DZW2Cg63rIcFxILDvkYp8QJZBqOtXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:84:6a:31:47:2b:67:4a:d4:5e:5c:d7:1c:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jun 23 15:01:09 2024 GMT
Not After : Jun 24 15:01:09 2024 GMT
Subject: CN=8203023be96e766e95e0459d422aa759c5286fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:7d:67:5e:aa:63:d4:f0:5a:c9:e5:de:4d:
0a:d6:3d:88:23:26:38:02:03:d9:de:fd:f3:a5:13:
4a:9b:71:f4:1c:26:38:b6:17:26:0f:44:b3:4a:e9:
b2:af:30:93:62:8c:4a:20:5a:a9:35:df:be:05:06:
f0:1c:80:2a:f5:1d:eb:cf:02:8c:5b:e6:0e:d4:df:
dc:5a:6c:bb:7a:d9:c5:90:c7:58:0a:6e:b9:8b:80:
88:08:aa:68:cc:5c:e7:de:36:3f:d6:a2:d4:04:00:
18:c0:55:42:8b:a3:13:87:11:6a:73:8c:68:7d:3b:
77:8f:41:dd:b2:29:21:4e:ff:17:d6:d8:fc:45:00:
ba:75:fd:88:94:83:89:6b:69:4d:13:fb:06:bc:e5:
04:f5:4c:71:e0:61:fc:26:56:e8:42:23:ed:bd:ae:
d2:b1:be:a2:83:07:3c:8a:3c:b6:1b:54:8b:d5:0d:
24:bd:cf:23:c1:e9:da:35:4f:81:13:ad:59:a8:7a:
b6:bb:1a:c0:eb:fe:52:fe:43:41:a0:1c:f1:e1:be:
63:98:3e:31:81:4a:1a:98:e3:a8:be:bc:6e:a9:68:
fd:3d:9c:65:68:40:67:cb:9d:6f:39:7e:7e:80:9b:
d9:f4:2f:2e:5d:83:04:09:ea:18:dc:ff:a7:47:cd:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:02:3B:E9:6E:76:6E:95:E0:45:9D:42:2A:A7:59:C5:28:6F:DA
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:c6:e6:ba:ea:1a:0e:63:87:93:aa:3f:67:0f:20:4f:0a:
10:9e:0a:bd:8a:27:89:0d:94:fc:59:a7:82:44:a1:98:e6:57:
ce:d5:34:78:88:a0:85:0a:29:74:ff:c2:ab:cd:66:43:a9:b2:
62:e4:26:5f:57:25:13:2d:88:12:39:16:6b:6f:5f:48:fa:27:
ed:f7:39:a4:c2:98:32:c8:6e:a6:1f:58:ad:84:11:4a:02:57:
e1:e9:ea:d4:d1:d3:bd:b8:ac:7e:0c:d6:38:82:cb:2e:4c:0b:
7a:3b:08:d0:23:b3:14:5c:5a:cf:75:17:51:c2:8e:62:fc:b1:
31:be:f9:bb:fe:3e:4e:8b:68:5e:fd:07:ea:14:e5:62:8a:6d:
4a:f5:8e:38:17:5d:fe:a2:b9:f3:6c:36:f0:a7:94:9c:bc:f6:
d3:4f:12:74:93:f0:82:63:2e:b7:39:4d:24:b2:42:50:cc:4c:
ae:9e:3e:ce:c1:ec:4d:dc:67:66:74:13:21:21:a2:ea:01:68:
b4:d6:34:11:61:3b:12:1b:2f:1d:68:f8:4c:5f:e3:bc:75:ad:
88:35:50:e4:0b:8c:ab:fc:32:98:4b:48:0f:85:d3:5a:5b:80:
08:8d:1a:30:7f:aa:be:29:2a:bb:6c:92:35:96:52:84:ec:c4:
07:0b:a3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnYRqMUcrZ0rUXlzXHKarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy
OWY1ZTgwHhcNMjQwNjIzMTUwMTA5WhcNMjQwNjI0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg4MjAzMDIzYmU5NmU3NjZlOTVlMDQ1OWQ0MjJhYTc1OWM1Mjg2ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlJ9Z16qY9TwWsnl3k0K1j2IIyY4
AgPZ3v3zpRNKm3H0HCY4thcmD0SzSumyrzCTYoxKIFqpNd++BQbwHIAq9R3rzwKM
W+YO1N/cWmy7etnFkMdYCm65i4CICKpozFzn3jY/1qLUBAAYwFVCi6MThxFqc4xo
fTt3j0HdsikhTv8X1tj8RQC6df2IlIOJa2lNE/sGvOUE9Uxx4GH8JlboQiPtva7S
sb6igwc8ijy2G1SL1Q0kvc8jwenaNU+BE61ZqHq2uxrA6/5S/kNBoBzx4b5jmD4x
gUoamOOovrxuqWj9PZxlaEBny51vOX5+gJvZ9C8uXYMECeoY3P+nR82W5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIDAjvpbnZuleBFnUIqp1nFKG/aMB8GA1UdIwQY
MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt
ZmE1ZWY0ZjUzZmJiLzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi
LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCHG5rrq
Gg5jh5OqP2cPIE8KEJ4KvYoniQ2U/FmngkShmOZXztU0eIighQopdP/Cq81mQ6my
YuQmX1clEy2IEjkWa29fSPon7fc5pMKYMshuph9YrYQRSgJX4enq1NHTvbisfgzW
OILLLkwLejsI0COzFFxaz3UXUcKOYvyxMb75u/4+TotoXv0H6hTlYoptSvWOOBdd
/qK582w28KeUnLz2008SdJPwgmMutzlNJLJCUMxMrp4+zsHsTdxnZnQTISGi6gFo
tNY0EWE7EhsvHWj4TF/jvHWtiDVQ5AuMq/wymEtID4XTWluACI0aMH+qvikqu2yS
NZZShOzEBwujIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:31:52 2024 by rpki-client on console-fra.rpki-client.org