Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 7UqrdSe/r6N/KjzBx9QFLPPdS0GO1cVKHsz2iYP8NBw=
Subject key identifier: FC:C7:28:58:A5:18:95:50:49:B1:A2:92:AA:D4:F7:55:CE:46:BE:58
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 0193579BB258306596E65D91928413174C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 137A
Signing time: Sat 23 Nov 2024 06:00:41 +0000
Manifest this update: Sat 23 Nov 2024 06:00:41 +0000
Manifest next update: Sun 24 Nov 2024 06:00:41 +0000
Files and hashes: 1: L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa (hash: 1YTNvaVrdlL91f+z2sVI7phmO4HyK06IozYkRzaada8=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: gQ0jZDs9R22pT9PyVXe32lYkcVgLgQkxJJyVt4P7KHU=)
3: Y7VpyD9x7TfN3qn73OQos49neig.roa (hash: 7Kk0+JLAKU232rkt7LeSf49k+vZXOm9S8Qz5jEG4FlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b2:58:30:65:96:e6:5d:91:92:84:13:17:4c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Nov 23 06:00:41 2024 GMT
Not After : Nov 24 06:00:41 2024 GMT
Subject: CN=fcc72858a518955049b1a292aad4f755ce46be58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:19:c0:81:9b:30:2a:9a:a2:72:ea:e5:7f:41:
c4:35:72:c6:5d:09:c3:0c:2f:7a:61:03:ed:80:3c:
ca:66:39:a4:ad:96:b9:1b:68:66:d5:43:89:95:bb:
36:9a:4d:2c:fa:95:9f:cb:ee:b5:d0:bd:e7:65:e4:
93:df:70:02:b8:e3:ee:df:2f:f7:f2:c3:07:8c:83:
45:23:64:da:47:30:f0:55:cb:7a:ec:60:fd:ee:5c:
e5:90:03:79:72:31:e6:c6:06:5c:61:43:db:40:ad:
48:83:7f:c3:c5:ca:29:63:0a:13:63:be:b7:8f:38:
8b:8f:72:8e:79:17:cc:79:65:28:fc:8c:2c:53:ea:
f2:f3:30:b3:d8:1a:6a:c0:1a:60:4b:f5:a3:d2:89:
0e:6a:e9:94:5c:19:40:da:8a:d0:50:ab:fc:13:60:
56:41:0d:93:1e:47:e1:d9:8c:fd:e2:6f:34:b7:52:
35:fd:a3:47:a4:54:df:d1:d0:89:5c:0f:b9:b4:ec:
0a:ce:eb:ed:d8:d5:32:1f:6c:f2:65:b0:5c:48:d3:
6a:f7:b1:5f:24:8b:d6:57:c6:cd:95:51:32:bb:6d:
1f:95:1c:87:48:22:14:ff:2a:5f:0b:cb:4d:35:61:
bb:4a:32:be:a3:db:82:84:da:23:61:d8:9e:b8:7a:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:28:58:A5:18:95:50:49:B1:A2:92:AA:D4:F7:55:CE:46:BE:58
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:14:79:d4:f9:f0:37:59:21:9d:8a:5f:6f:db:a7:6c:e9:
c2:8f:83:58:39:89:02:85:00:74:c0:42:59:5b:7d:7b:9a:dc:
ea:de:40:e0:d5:8c:b5:61:1e:24:54:0b:80:dc:c3:5a:48:b4:
02:53:fa:48:0f:3d:92:76:a2:f2:43:f3:ec:d9:aa:e6:d7:8d:
c8:7f:68:53:82:5f:3c:b8:93:3c:51:44:56:bb:43:0b:34:c3:
6f:8d:56:b0:81:bf:36:0d:1f:e9:a7:fa:30:bc:eb:48:a9:c5:
78:92:d1:36:2b:38:5b:de:da:15:83:e9:55:78:8e:3b:6a:54:
35:69:7a:47:30:55:25:15:a9:cd:1b:cf:08:d7:90:61:8c:ba:
e0:20:13:66:b9:7a:69:c7:47:49:ef:7e:4e:5f:33:d2:40:95:
a6:9b:78:2d:3b:60:4e:1b:b9:92:64:12:3b:6d:f9:f8:0d:fe:
5d:00:5f:3c:82:63:f9:e6:b8:81:72:c1:69:48:eb:fc:15:14:
d7:4a:73:f3:8c:60:87:f1:2e:cf:7d:b8:84:b1:d4:a5:d0:b3:
34:0f:78:e9:68:26:0c:c2:32:f4:f7:ca:75:68:85:0b:d8:b4:
44:55:30:75:4c:7f:54:84:e6:02:8d:de:4d:e3:4a:8c:72:12:
0c:ca:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:50 2024 by rpki-client on console-fra.rpki-client.org