Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: joQxxsU2f44EjYu4cnM17j+gqpGpM8dqX/3A+VEEdLM=
Subject key identifier: 33:0C:22:6B:FB:A2:76:A4:FE:A9:F8:65:75:CE:37:98:18:51:31:34
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019044F85B3971BD28729B364CEDD37A3013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 12:00:45 +0000
Manifest this update: Sun 23 Jun 2024 12:00:45 +0000
Manifest next update: Mon 24 Jun 2024 12:00:45 +0000
Files and hashes: 1: PHJKgO4o8IuLhsxmlrLuoYPO9hc.roa (hash: bO5SRscpjRrj7OO+RNXW77QeY5CfEApJTvftA2pfmZg=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: GXnfs4uU8gHjVrdlddMB6+IFJP8PtXQDoVKqgi3TuF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:5b:39:71:bd:28:72:9b:36:4c:ed:d3:7a:30:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Jun 23 12:00:45 2024 GMT
Not After : Jun 24 12:00:45 2024 GMT
Subject: CN=330c226bfba276a4fea9f86575ce379818513134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:47:cf:4f:8e:3f:26:f8:c9:d2:85:fd:24:
3c:4d:c5:64:9c:bd:23:11:79:7a:4d:ed:fd:68:09:
5b:78:57:f7:86:d7:69:5d:67:c0:84:52:71:26:40:
b8:31:9d:5c:8c:79:5d:cc:cd:fe:3b:4b:e8:0d:55:
9c:80:15:9e:7f:19:3d:ff:3d:03:96:5c:14:ae:b7:
59:31:ca:06:f7:ba:0a:8c:7e:cc:42:7c:4e:3e:07:
17:0e:8f:d7:b3:a0:74:59:f6:3e:30:e3:0a:d8:ff:
48:83:7e:b1:67:e8:e2:d8:37:71:72:f5:c0:f0:e0:
df:e2:85:40:b7:b5:02:57:63:dd:e9:b2:c4:2d:51:
8c:c1:1c:e0:32:87:70:c2:e3:77:7f:86:5e:84:5a:
4e:11:14:63:3f:4f:d8:b7:fe:bd:f2:d9:d5:fd:df:
d6:71:1a:3b:44:1f:12:bb:74:7f:19:bd:a9:f6:bb:
d6:94:bc:1b:f1:5d:26:b5:b5:3b:90:ff:ba:6d:86:
1c:6e:7f:18:f0:d0:fd:92:41:30:b4:78:f6:a0:bd:
d8:e1:7c:a8:29:0f:3e:55:a1:1d:67:1b:ef:c0:ef:
79:41:1a:76:a4:ad:3e:e8:25:07:5f:1c:84:29:55:
7f:da:07:f0:46:ed:e8:3e:f2:97:1d:a7:39:81:43:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:22:6B:FB:A2:76:A4:FE:A9:F8:65:75:CE:37:98:18:51:31:34
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:d9:e3:58:f1:e8:d6:aa:e9:a6:8b:23:4e:de:3b:16:12:
58:ac:64:56:fa:16:bd:4d:0d:05:6a:be:cd:84:8d:c1:7c:f3:
6d:98:b8:41:81:67:66:95:76:fe:50:5d:52:ad:ba:ca:58:ca:
5c:99:54:c8:47:b2:fe:f6:a2:74:76:34:15:06:8b:bb:78:9e:
3b:bf:aa:0e:81:52:f4:b7:b9:30:18:0d:1d:01:fe:dc:c3:58:
bf:f4:02:12:7d:f1:8d:77:e4:8a:93:69:2a:49:21:53:3d:be:
ef:af:95:85:1b:45:b8:93:6f:38:86:37:9e:e8:55:81:17:f0:
43:25:9d:0a:e1:ba:9c:40:22:4c:92:88:e0:76:c0:f8:00:db:
dc:76:13:af:fc:40:02:85:fc:52:7a:09:ad:cf:dd:cc:67:f8:
71:58:d3:00:1f:17:ac:89:b7:bc:e3:d0:31:5d:a0:45:82:56:
ed:09:8b:21:51:3f:bb:1b:cc:68:54:e4:1d:bf:61:41:ea:dc:
d8:81:86:6a:bb:e0:da:de:cc:90:cd:0b:be:2f:19:ab:d8:1b:
da:32:bc:ee:83:15:2b:11:46:70:e4:b2:09:0b:0c:da:9f:42:
a9:7a:d3:67:b7:1e:42:cb:d9:41:78:22:db:69:f8:ce:b9:3c:
4f:b4:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:27 2024 by rpki-client on console-fra.rpki-client.org