Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: bX8Is2tYlDYMaDFyJ+1o/vG15E3DzTVvPnld+xCNUuM=
Subject key identifier: BF:86:B0:90:01:E5:D4:42:14:49:9A:23:8F:1D:3D:C0:4F:79:7B:01
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 019227C4F0A1962F40553C4B9214F66586D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 03BB
Signing time: Wed 25 Sep 2024 06:01:10 +0000
Manifest this update: Wed 25 Sep 2024 06:01:10 +0000
Manifest next update: Thu 26 Sep 2024 06:01:10 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: /2ATouQVPn1todqtUCmkYVYrxmy69tJVIy5xzQ2uLgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Sep 2024 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:c4:f0:a1:96:2f:40:55:3c:4b:92:14:f6:65:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Sep 25 06:01:10 2024 GMT
Not After : Sep 26 06:01:10 2024 GMT
Subject: CN=bf86b09001e5d44214499a238f1d3dc04f797b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:db:d0:df:62:ac:42:31:19:58:e5:4a:ea:
9e:10:9a:91:5e:23:4f:1a:f7:93:d2:d8:85:64:99:
4a:81:a2:40:06:b3:79:78:70:1c:8d:6f:19:3b:ea:
cf:4b:b2:d9:96:98:49:06:ab:47:2f:ba:02:f3:d2:
4c:58:01:a2:c2:79:2b:71:b9:22:f1:a2:8d:15:f1:
8b:a9:4d:ff:c6:9d:e2:3a:49:2e:45:ff:43:fa:66:
33:87:8b:29:10:43:b8:cd:90:a0:50:3d:fb:ae:3f:
10:3e:a6:70:5d:3f:86:9a:8e:8e:1c:84:c3:3b:08:
b4:d0:92:07:4b:86:4d:a6:6d:8c:9c:a6:00:08:5f:
b4:b3:b0:74:16:88:93:60:6e:45:cd:48:6e:95:e0:
aa:57:54:0b:48:9c:3d:64:d7:06:a1:cd:40:21:a6:
c0:8c:7f:41:42:f5:53:96:dd:5e:ce:00:f4:57:f8:
25:3f:29:75:26:2c:8a:7d:2a:29:10:d3:f0:dc:29:
42:b4:ed:53:af:b1:4a:f1:ab:c9:7c:a0:4a:a4:73:
59:f0:6b:8f:c1:dc:bc:b4:78:01:c6:92:09:71:31:
3b:b3:70:dc:af:0a:74:6e:84:81:81:40:ce:39:f9:
c6:5c:d2:ba:69:9c:a9:41:7d:ba:26:c6:86:f6:cb:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:B0:90:01:E5:D4:42:14:49:9A:23:8F:1D:3D:C0:4F:79:7B:01
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:36:a4:6d:82:f2:19:7e:e9:a5:a1:02:db:25:0b:61:77:
e6:e7:63:73:f6:17:2c:82:7c:de:7a:a5:f8:5c:fa:2d:cd:d1:
30:99:33:05:56:46:e0:8a:2f:ec:e4:cb:63:cc:b6:d8:92:14:
30:42:d4:fc:a0:34:e9:9d:9a:ef:ae:66:e1:79:ef:10:0b:b8:
d4:92:1f:57:a8:56:17:2e:a2:68:d0:dc:d8:65:23:e4:be:64:
e8:50:97:b8:1a:2d:d5:d6:1f:47:e7:d6:29:e1:70:be:6f:98:
23:1d:1b:e1:23:40:eb:04:01:af:b9:17:0d:e9:a6:82:a6:a5:
c7:fb:02:a7:92:5a:96:af:64:86:7e:61:c1:d3:02:2b:61:51:
94:29:eb:c7:39:34:06:3f:42:0a:06:e0:69:2d:47:b7:a0:b5:
b2:93:81:3c:dd:aa:6d:64:ba:e4:15:57:5e:da:75:ce:f5:f2:
f5:51:cd:85:69:70:f6:00:5a:dd:15:b0:7f:5b:ec:fe:9d:e9:
e2:bf:c1:47:f0:f1:b6:cd:6c:c5:51:14:f2:86:e9:9f:05:c6:
b2:c8:f1:c4:83:32:5e:17:41:25:87:b0:79:c5:2f:8d:b9:6f:
fd:41:a2:b9:1d:ee:49:b5:19:c0:d2:66:0e:82:08:33:02:38:
51:b6:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 11:30:18 2024 by rpki-client on console-fra.rpki-client.org