Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
File: NREZcs9Nkki9sYjTtBmuD7flZGs.mft (raw, json)
Hash identifier: GP2KNIsI+BB1ExqSEhG09PCNavg4NUB8M2GFmD/KFCs=
Subject key identifier: EA:4A:30:18:05:0D:04:0F:71:79:07:E7:E2:AE:1D:C9:A0:22:FB:59
Authority key identifier: 35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B
Certificate issuer: /CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
Certificate serial: 0190486A1F263D4C5E708575B1112B49EC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
Manifest number: 09EA
Signing time: Mon 24 Jun 2024 04:03:52 +0000
Manifest this update: Mon 24 Jun 2024 04:03:52 +0000
Manifest next update: Tue 25 Jun 2024 04:03:52 +0000
Files and hashes: 1: NREZcs9Nkki9sYjTtBmuD7flZGs.crl (hash: 7g1NDww4AgKuStroStSPvzZ5mX4jGez4mMucTu3d7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:6a:1f:26:3d:4c:5e:70:85:75:b1:11:2b:49:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
Validity
Not Before: Jun 24 04:03:52 2024 GMT
Not After : Jun 25 04:03:52 2024 GMT
Subject: CN=ea4a3018050d040f717907e7e2ae1dc9a022fb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:83:20:33:6e:b6:f2:10:b0:5e:b0:02:e8:
23:16:b4:a0:d1:94:fe:d5:d4:43:9f:7d:a5:3e:b5:
b7:3d:02:2e:8d:c4:f9:8d:1e:d6:35:ed:26:a8:2e:
71:43:f4:fa:27:1f:d9:70:2b:b1:71:a1:08:9b:7e:
3b:39:a6:74:3f:19:2f:2d:be:30:94:3f:6a:6f:ba:
69:37:6d:d5:d8:15:3d:77:9b:a8:c2:fb:83:06:9f:
5c:65:8f:12:5d:d6:b3:0f:ca:8f:ea:52:01:b8:d3:
89:50:25:cb:84:7c:b2:16:4a:a4:30:b1:ad:dc:d3:
3d:a2:31:13:d8:5a:72:52:f7:6b:9c:f3:f5:a8:58:
87:bf:2e:78:83:90:62:5d:44:a2:a8:8e:2f:c5:2d:
c9:fc:e0:9b:cc:ee:ab:8b:80:9e:b2:07:b6:8e:2d:
a2:8b:d0:fc:f1:df:6e:4d:ad:e1:8c:5d:c4:93:f3:
6a:ba:97:cf:10:9a:e8:ed:d7:60:f9:c9:79:70:c8:
08:58:cb:a5:d0:10:72:92:f1:f6:7e:ac:a2:f9:41:
cf:c6:72:41:2d:07:b6:89:16:5d:29:7a:67:6b:f8:
9c:00:e4:4f:85:07:e6:ea:0b:cf:66:3d:1b:16:8d:
01:59:12:48:a2:32:bb:0d:f3:73:d8:f3:c4:3d:0f:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:30:18:05:0D:04:0F:71:79:07:E7:E2:AE:1D:C9:A0:22:FB:59
X509v3 Authority Key Identifier:
keyid:35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:50:a8:aa:32:a3:72:eb:67:87:10:d5:cb:41:6b:ee:5a:03:
71:63:d4:b7:fb:39:de:85:dd:d8:03:2c:10:49:8b:7e:70:69:
89:2f:b8:9b:e4:96:68:b5:05:f9:a9:a6:20:74:c8:cb:c8:41:
51:ba:e3:66:16:ee:b1:3d:c8:f0:72:a9:ef:75:e6:74:7a:f9:
84:8a:ce:91:e9:96:20:74:59:68:d3:aa:37:80:f4:47:b3:63:
2c:29:ec:f5:77:10:7b:fe:fe:bd:be:4b:36:05:63:44:f8:04:
1d:aa:06:20:6f:f7:f0:4f:41:00:77:1b:3a:a2:06:eb:41:58:
21:93:08:21:35:50:4e:88:0e:8f:19:42:9d:7e:6c:fd:82:db:
a9:f9:51:e1:a3:07:c8:e6:42:20:30:e1:dd:10:02:10:17:ea:
d8:ef:2f:3c:b9:4b:4d:0b:19:0d:c4:d8:bd:4f:3d:f4:48:c4:
b2:4c:b4:71:9f:3c:9c:1f:30:0e:0a:73:ab:20:62:ce:50:6b:
72:a9:00:50:95:3d:f1:7d:26:26:cd:12:73:f2:b7:df:c8:c4:
6e:38:a7:5e:42:cd:fc:72:77:49:02:27:00:25:bd:16:63:17:
34:7b:0f:bf:ee:03:88:9d:60:ed:2c:e3:00:ce:14:53:fb:70:
e3:11:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:14:37 2024 by rpki-client on console-fra.rpki-client.org