Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: npPFM6MW5cB4kw1EHk8LaJjeSNw67GoEmldpIyqMgsA=
Subject key identifier: B9:57:2D:F2:1D:18:A2:60:62:19:CF:AE:26:61:9A:83:48:A5:2B:ED
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01935508AE2B27423554C52F148B3EB97A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0B0C
Signing time: Fri 22 Nov 2024 18:00:52 +0000
Manifest this update: Fri 22 Nov 2024 18:00:52 +0000
Manifest next update: Sat 23 Nov 2024 18:00:52 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: Y6fUOyu0GqV3PNERUrpQyS5mElekT3T+iJyBWaj0lwo=)
2: aQ-qDCY1qeVbJJsBlOvZHxebQf8.roa (hash: 6nVxdqBTWKlPlm7FszEv225aVsSdVPTbs0KodfF4aic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:ae:2b:27:42:35:54:c5:2f:14:8b:3e:b9:7a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Nov 22 18:00:52 2024 GMT
Not After : Nov 23 18:00:52 2024 GMT
Subject: CN=b9572df21d18a2606219cfae26619a8348a52bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:80:73:d4:89:27:0d:4a:c0:10:d2:1f:22:
3b:ba:10:7c:ff:ed:0e:5c:9f:88:db:5e:0b:d7:d0:
ab:c1:30:1e:3f:1e:e2:7c:24:62:d1:9d:e3:4b:a2:
6b:ae:04:b3:19:89:59:c4:60:f5:f9:5f:6f:11:e4:
ee:90:90:3f:12:ea:09:c3:d2:d1:a7:87:e2:e0:64:
50:bc:f3:24:30:47:35:86:46:05:da:12:9d:ea:8f:
82:27:29:0b:01:ce:32:ef:4a:c2:53:4b:ad:17:83:
54:19:2b:83:e2:2a:3e:8e:e6:1e:39:30:37:28:01:
db:df:9a:93:2a:e6:f5:e0:65:65:52:27:9c:be:5e:
17:b1:d5:6f:e3:33:76:82:05:59:9f:cb:8b:83:d7:
2b:c6:dd:09:ce:07:4a:5a:5a:0d:a5:a9:41:f1:12:
7e:ba:64:95:ba:b3:61:c7:bf:0f:c8:f9:6e:48:11:
7e:57:63:09:d8:24:17:07:a5:49:e3:69:e2:a8:eb:
6c:74:da:35:07:d8:34:e1:12:8c:bf:81:f6:07:a4:
f1:4b:14:f6:bf:fc:f6:99:0d:2a:95:9c:2e:55:6b:
8a:e4:ca:45:74:60:37:78:d9:bb:d4:3c:99:18:7c:
e4:40:c3:93:3f:9a:e9:a1:f5:62:2e:27:ed:0f:5a:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:2D:F2:1D:18:A2:60:62:19:CF:AE:26:61:9A:83:48:A5:2B:ED
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:26:d2:3b:95:5a:ff:eb:e4:a3:19:6e:cf:ee:8a:ab:1d:
be:a2:76:b9:2d:cb:97:a8:66:d3:ea:cf:81:1e:34:0d:d2:8d:
26:d8:ae:3d:e9:e2:b9:e4:b1:e5:33:8e:ff:72:6a:4f:03:c6:
a0:b0:95:dd:85:59:72:2c:4e:17:82:f0:94:55:95:b9:cb:b4:
bd:51:0d:10:9c:8b:cf:3e:8b:67:1c:35:03:5a:d6:d4:b4:d6:
c3:ad:8b:b9:cb:ec:a9:86:8e:70:dd:9d:71:de:a6:49:4a:64:
56:1d:88:06:04:12:29:ec:b5:dd:a7:13:4a:0d:a4:6b:a5:4b:
c6:e4:f3:52:83:76:1a:36:5b:9b:e1:b4:9a:75:48:e8:84:26:
09:28:d7:0d:3a:fd:c7:28:9a:29:64:49:0c:44:9b:ff:e5:38:
e3:2f:9f:32:7e:8e:08:a6:b9:dc:1b:1c:af:1f:85:ad:1a:98:
a0:01:8f:fd:e2:ca:b6:c2:84:48:40:4d:d1:9b:ed:59:7e:0a:
52:87:1a:a5:49:4f:de:a9:80:5f:3d:7d:fb:02:2c:7e:b5:46:
a4:1c:aa:38:c9:72:10:66:94:16:40:2e:79:de:52:47:0f:57:
13:ed:69:2f:70:c9:2d:ac:c2:3c:d9:f0:53:b0:1f:64:e7:f8:
6b:a1:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:39 2024 by rpki-client on console-fra.rpki-client.org