Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier: o3L5kAbL/WQDzuraYTbIuf7n1lKTegwdak2Xn8Hs2k0=
Subject key identifier: 39:19:DB:7F:EA:B6:EC:1E:51:44:8B:30:B5:41:AC:66:DA:15:51:1D
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 019369D943DEFF238432B9A23F52FBBBED50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number: 0355
Signing time: Tue 26 Nov 2024 19:01:06 +0000
Manifest this update: Tue 26 Nov 2024 19:01:06 +0000
Manifest next update: Wed 27 Nov 2024 19:01:06 +0000
Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: VMg4tLvULmuR+A3xQtzWuxChTFr9mv050GcDaiwjrVM=)
2: beVDOrqdulrUX2OIrcTzSEv9Jo8.roa (hash: v87KF7tFiG1beNLbUQjcwfkg3Ww8xekChkbDUhK2CLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:43:de:ff:23:84:32:b9:a2:3f:52:fb:bb:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Nov 26 19:01:06 2024 GMT
Not After : Nov 27 19:01:06 2024 GMT
Subject: CN=3919db7feab6ec1e51448b30b541ac66da15511d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:3d:17:59:aa:70:0f:93:2b:f1:a3:4e:17:
ce:3c:a2:0c:0e:53:f5:7e:22:09:f8:03:f0:a6:16:
9f:92:77:e9:9f:ec:6a:32:76:99:c4:72:3d:ed:79:
e6:b8:c5:ee:94:8c:7c:2f:15:61:17:97:16:cc:ee:
84:c6:9a:e3:5a:f0:f7:e5:3f:be:70:30:d8:cb:6f:
4c:1e:00:9b:c9:f4:f1:7a:59:d1:1e:fd:f6:76:b6:
e5:da:29:67:56:66:d7:d8:76:9f:30:eb:70:bd:97:
3d:67:60:37:1e:73:7b:27:72:42:ab:ea:13:09:1d:
2a:6f:8a:d1:e3:39:af:6e:83:de:bb:2d:dc:6f:1d:
a8:f9:19:d7:fd:b7:3f:c1:ea:f2:29:5b:5e:91:bd:
5a:dc:1a:cd:81:18:e1:cf:b1:81:2f:5a:b3:6a:a4:
df:93:02:dc:11:7e:d3:d1:aa:d7:ad:61:9b:d1:d0:
50:47:e9:c8:8d:38:26:c4:f4:47:71:51:0e:cc:27:
66:24:5c:3c:09:f2:df:57:d9:e5:88:cc:2e:58:f7:
b7:96:ef:11:e6:cc:7c:2e:ee:08:69:3d:49:7b:6c:
af:69:c0:21:ca:2a:cd:64:59:1c:b9:e0:ad:8a:54:
59:f8:61:b3:3d:3b:96:27:53:89:a7:02:0f:f5:ef:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:DB:7F:EA:B6:EC:1E:51:44:8B:30:B5:41:AC:66:DA:15:51:1D
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:23:b0:a5:8d:9f:08:bc:d7:76:e3:a4:3f:fa:3a:a6:97:92:
8c:db:3b:58:39:47:e0:19:6b:cf:a3:41:79:08:a7:99:db:d2:
69:26:55:a9:91:f9:2f:2b:c7:86:00:f7:d9:1c:00:0a:0f:43:
3f:84:d1:fc:43:00:15:5f:6c:93:21:8b:09:e7:34:4b:2a:5b:
70:33:59:0d:b5:59:f7:5f:c4:cd:59:5c:73:05:14:17:15:d8:
2a:fe:38:fb:27:4d:95:09:18:b7:7e:c3:70:5a:c3:59:19:cd:
b2:a6:4c:ab:4c:30:fd:b1:13:55:95:05:83:f5:53:e8:32:21:
d3:7f:48:ae:01:9d:3f:5d:6c:c0:a7:25:ef:8f:5d:9b:89:17:
fb:c8:17:0e:f1:3f:c5:4f:81:a2:29:3b:c4:3a:79:6a:2c:d7:
af:6b:f4:f8:b3:c5:6d:b0:56:ab:60:b8:01:f7:d4:fe:db:18:
45:60:76:d2:2e:7d:6b:b0:36:30:57:b7:5b:e0:e2:4e:3f:9b:
29:84:b7:d6:54:5e:99:83:97:bf:f2:61:57:da:f3:79:d9:0e:
ff:cf:53:ef:10:a8:8d:2d:70:df:c4:fa:b1:24:3b:1f:26:07:
c2:37:e3:6f:f8:ef:33:c3:9c:28:ab:c3:93:45:1a:e4:68:fa:
9b:55:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:06 2024 by rpki-client on console-ams.rpki-client.org