Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
File: NTcZltxVWphATH7nEu4pP_YEU4M.mft (raw, json)
Hash identifier: b3fSr1d11cS4hi2eaOLx06B214Yw406I9JnKSMiTW/E=
Subject key identifier: B0:F2:FA:AD:4F:4F:97:20:84:1C:67:C0:33:AE:AF:1A:B1:0D:F1:32
Authority key identifier: 35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
Certificate issuer: /CN=35371996dc555a98404c7ee712ee293ff6045383
Certificate serial: 0190490C3B614FD9336CA21CA72D388B20CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
Manifest number: 0EDC
Signing time: Mon 24 Jun 2024 07:00:56 +0000
Manifest this update: Mon 24 Jun 2024 07:00:56 +0000
Manifest next update: Tue 25 Jun 2024 07:00:56 +0000
Files and hashes: 1: NTcZltxVWphATH7nEu4pP_YEU4M.crl (hash: 59/IgA2tvdRYgQqJyQopJH7OG5y0IwiugNR6Uzoq5+8=)
2: kF7j53zNQa0IJw6u_2sizpqFCRY.roa (hash: RHk/rCmLKZGoNXjvf7LSkqs21Q8ovx/Nalh8TpS/fH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:0c:3b:61:4f:d9:33:6c:a2:1c:a7:2d:38:8b:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35371996dc555a98404c7ee712ee293ff6045383
Validity
Not Before: Jun 24 07:00:56 2024 GMT
Not After : Jun 25 07:00:56 2024 GMT
Subject: CN=b0f2faad4f4f9720841c67c033aeaf1ab10df132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:aa:1a:a9:76:f6:9a:df:d0:c3:4e:44:80:
99:f4:42:e0:1b:6a:57:d6:c1:f0:34:b5:ec:ff:86:
eb:cf:bc:83:74:74:d1:b9:59:87:1d:b3:60:71:7f:
92:c4:ad:fe:37:f1:7a:70:62:2a:15:5c:ac:e7:02:
79:56:30:8e:88:89:1c:de:80:39:b8:37:54:3e:04:
29:70:f4:7e:12:a6:e5:75:be:85:2c:64:8d:1a:05:
1b:1b:66:3d:1f:d5:2f:05:c0:45:48:28:9a:3a:c5:
5b:20:04:b5:ad:64:7c:39:94:03:07:c6:a1:02:d3:
2f:4e:33:4b:bf:ba:04:0e:ae:b6:32:c9:e1:20:11:
95:73:c7:e1:03:dc:d4:92:00:23:d8:8d:1f:69:c4:
d9:93:5e:f9:58:13:06:6f:c8:76:97:33:64:e5:5f:
c5:d1:dc:80:96:6d:07:9b:e3:4f:fe:89:4b:73:6d:
4b:a3:fc:bd:19:3f:b5:aa:54:3c:0c:75:19:a4:74:
86:65:75:d8:03:56:3f:08:2e:71:26:4a:98:df:ae:
ad:08:d4:37:43:ad:05:0f:a3:0c:8a:b3:6e:53:f7:
6f:0d:8f:b2:22:ce:ca:ea:9e:4f:f5:6e:3c:ce:db:
49:78:f1:b7:35:dd:e5:fc:10:cc:f6:11:e3:19:ef:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:FA:AD:4F:4F:97:20:84:1C:67:C0:33:AE:AF:1A:B1:0D:F1:32
X509v3 Authority Key Identifier:
keyid:35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:3a:a9:66:93:5b:87:c9:1e:62:c1:b3:1a:45:19:76:fe:
53:ac:f1:db:05:3b:4c:34:d1:95:a5:82:93:43:eb:14:9c:11:
fb:dd:ad:7d:50:3d:ab:09:52:f8:33:7c:17:21:f8:1c:ca:1b:
84:c0:2d:5a:1d:e0:7e:30:2a:a0:2d:e8:2e:67:4e:02:9b:35:
40:5e:51:11:e1:5b:4d:7d:56:01:e6:9c:63:34:b0:45:a6:db:
33:39:5c:93:25:e5:36:f0:ee:97:d4:a6:1d:71:f5:63:25:c9:
a7:d2:c4:41:73:65:ad:11:30:fd:e3:41:77:51:ca:f5:bb:ba:
27:18:32:e7:2b:65:a7:fe:b1:cf:f1:ee:96:3e:49:94:aa:a3:
be:4f:0f:78:a9:42:f6:b0:cd:94:1c:72:41:6a:5e:0a:c9:bd:
b3:b8:30:86:36:fb:30:0a:9f:d4:af:9f:58:45:32:1c:5c:9b:
fe:2c:ea:78:bd:65:1d:07:80:e3:d5:47:42:24:84:bb:2e:cf:
ee:ed:54:09:95:96:cb:03:4a:df:26:5e:1e:d7:00:92:94:f4:
b8:4d:55:0d:88:89:82:b3:20:5c:c6:a3:39:c0:17:d4:d8:be:
e5:68:9d:fc:be:30:9d:64:8c:bb:5e:64:af:86:3b:47:d7:78:
12:13:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:08:37 2024 by rpki-client on console-fra.rpki-client.org