Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: 3NXHYoFFH5IjGhEYwy6wrRXlCieArpJkHGmFBZ5MmTA=
Subject key identifier: 1A:0B:6E:57:C9:D9:FE:11:A5:B7:08:C5:4F:F2:12:1F:71:37:64:BB
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019041C06E05A59BD333C768571996D123C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 11D9
Signing time: Sat 22 Jun 2024 21:00:48 +0000
Manifest this update: Sat 22 Jun 2024 21:00:48 +0000
Manifest next update: Sun 23 Jun 2024 21:00:48 +0000
Files and hashes: 1: nFBZNvW7OPh1QK2akKTX0EGehSE.roa (hash: u8Wht/uFNIcHlKZkXB6ULlZmIKRglqOPJMg8pslxRDE=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: aEZ+u454WW9+vKGYqT2RvENjFiOAWtl6z7k27IwKlDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:c0:6e:05:a5:9b:d3:33:c7:68:57:19:96:d1:23:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jun 22 21:00:48 2024 GMT
Not After : Jun 23 21:00:48 2024 GMT
Subject: CN=1a0b6e57c9d9fe11a5b708c54ff2121f713764bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:e2:c9:1e:4b:6d:2b:50:46:20:38:1f:c7:
33:f0:13:93:76:6f:d9:ef:75:bf:4b:f0:42:a9:d8:
55:4e:31:80:7b:8b:07:8e:e6:56:e6:43:73:b7:90:
07:2d:8c:b8:58:81:58:82:74:00:1e:62:5a:52:b7:
3a:87:7b:73:e4:77:ce:c5:e9:fa:a1:16:2b:44:62:
8d:a4:83:d9:d7:a3:03:3f:f0:9a:f3:00:24:73:a3:
48:38:a0:25:d8:41:b9:7a:8e:42:78:16:17:5d:4a:
de:2b:5c:b1:e7:1d:fb:4e:69:c0:8c:fd:53:33:74:
8a:eb:af:56:1b:43:34:5e:ef:44:9b:1c:b7:f9:d9:
22:bf:a3:eb:3f:9f:b6:dd:48:12:31:75:a2:d1:d5:
80:74:fd:de:e3:6f:6c:e9:2b:b4:26:02:3e:b0:7a:
c0:aa:df:3e:23:14:2e:a6:2b:20:81:f6:81:dd:8c:
6c:5c:df:4a:eb:d5:66:80:71:2e:8a:b8:2d:11:0c:
87:ea:5c:9f:7b:3c:a9:c2:43:6b:63:ce:d9:3e:bf:
73:cb:14:9c:62:2c:62:d8:4d:7e:ad:8c:29:5a:77:
44:21:7c:e5:b6:72:2c:96:23:92:58:34:18:b9:7e:
6b:1f:d4:2d:8a:d5:78:21:c6:37:06:f6:fc:bb:64:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:6E:57:C9:D9:FE:11:A5:B7:08:C5:4F:F2:12:1F:71:37:64:BB
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:fc:08:74:49:a3:62:d6:41:52:ef:97:4b:a7:21:b8:bc:
09:8d:60:8c:6c:e8:2c:5b:16:b8:69:32:0b:54:8f:91:75:d0:
76:27:25:4e:a5:89:1d:73:f0:7c:82:c5:02:33:bb:dc:f5:f6:
7a:db:6d:cd:42:08:dc:76:78:b1:81:ab:cf:31:e8:34:45:64:
53:3a:fa:28:45:58:8e:76:14:ea:ff:60:01:ce:a6:00:05:2b:
d2:45:8d:fe:ab:26:3f:b1:17:fd:11:d9:8e:7e:44:6b:59:27:
d7:48:ef:9f:0d:9d:5a:f8:93:12:f5:65:8f:25:0b:29:bb:59:
81:cd:06:3f:94:46:83:94:b9:5c:b0:cc:74:ee:31:ff:81:92:
70:b2:8a:86:cb:9c:b6:56:78:8c:34:d9:e7:ca:88:b1:e5:33:
64:c0:bf:ba:9e:e2:f7:dd:ce:09:67:8a:a0:c1:48:3f:5b:2e:
df:61:31:9c:08:25:97:b7:8b:a8:8f:26:a0:13:f3:bf:9b:5b:
f8:fd:94:8a:8f:d7:af:c0:49:b5:fd:20:81:3c:8f:36:77:5e:
ff:ed:71:31:53:6b:f5:4e:ba:b7:aa:f5:2b:45:1d:34:83:7e:
10:7b:78:98:c3:45:51:bb:33:4c:59:a1:15:ce:38:db:9d:32:
9d:75:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:42 2024 by rpki-client on console-fra.rpki-client.org