Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: Zwfju5amHoPtVc4wWUOnK+Gfme3WAdDw9sGAsz8o4Vc=
Subject key identifier: AE:AC:0B:C0:7E:76:79:79:6C:5C:4B:49:18:D2:28:73:1C:A3:6A:0B
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 018F847E17F0D86F009BD5CDA081FAEF15C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 117F
Signing time: Fri 17 May 2024 03:00:07 +0000
Manifest this update: Fri 17 May 2024 03:00:07 +0000
Manifest next update: Sat 18 May 2024 03:00:07 +0000
Files and hashes: 1: L3lB1VMgrVTWB1ZUynJkhFdVKNA.roa (hash: 1YTNvaVrdlL91f+z2sVI7phmO4HyK06IozYkRzaada8=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: kV3g7Yg/VRt0fH1LfYxLcBu1BUVosr+3eg3r7rDmE1I=)
3: Y7VpyD9x7TfN3qn73OQos49neig.roa (hash: 7Kk0+JLAKU232rkt7LeSf49k+vZXOm9S8Qz5jEG4FlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:7e:17:f0:d8:6f:00:9b:d5:cd:a0:81:fa:ef:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: May 17 03:00:07 2024 GMT
Not After : May 18 03:00:07 2024 GMT
Subject: CN=aeac0bc07e7679796c5c4b4918d228731ca36a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:0a:b4:cc:8f:9e:bc:08:f6:f9:a1:66:84:
84:de:17:3f:f0:41:e2:22:54:ed:2b:93:6b:e7:c9:
a4:0d:ed:4f:93:30:ac:12:29:89:66:86:5f:4c:bd:
b8:be:25:df:8e:01:58:2c:04:b7:2d:66:b1:6e:58:
42:8f:70:23:eb:5b:76:bb:4f:60:2b:5a:ec:61:cb:
15:ef:25:28:28:29:38:b1:47:d8:f6:04:f3:5e:ae:
67:73:26:c4:4e:a4:19:0a:bc:d8:f6:98:48:89:1e:
4a:3a:a9:71:67:18:64:9c:8a:15:42:d2:21:8d:d8:
7c:15:64:b0:ef:c8:09:e2:f2:00:a3:cc:18:94:10:
79:aa:d0:3a:67:ef:23:89:3f:e6:d7:d7:a5:3a:93:
08:35:c2:7f:77:2f:38:50:aa:db:7d:c8:9e:0e:e1:
5d:e3:4b:31:a7:9a:a9:3e:5d:c3:b8:6f:51:8b:0d:
b4:e6:1f:e7:1a:21:95:df:75:d1:4b:e6:37:c8:73:
05:0f:18:b7:f1:bb:5a:c6:76:36:b9:1a:f0:44:13:
e3:65:be:23:a7:f0:76:ec:ef:66:f9:79:ca:e5:06:
08:44:19:c9:69:e6:91:ee:de:b3:4f:f8:8f:3d:5d:
e3:37:d7:19:bd:b5:67:42:db:ba:13:ff:e9:7e:68:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:0B:C0:7E:76:79:79:6C:5C:4B:49:18:D2:28:73:1C:A3:6A:0B
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:d8:3c:f7:fd:8d:a2:5d:00:18:47:8c:92:d9:ab:d8:1f:
36:38:28:70:22:16:ef:1a:84:a0:91:81:ac:97:aa:73:fd:03:
a8:9e:03:ab:c7:0b:44:f3:5f:70:6f:03:71:84:93:b8:82:be:
8d:a6:d6:93:fd:64:4f:7b:cf:b2:09:4d:46:38:38:0c:f8:c5:
80:f0:79:c8:db:f5:7b:ba:8c:f6:d6:d4:74:fb:3f:88:3a:9f:
38:bf:ce:b0:2c:e2:a7:a7:63:9e:13:dc:bc:55:f9:0c:9c:34:
63:76:37:a5:94:a8:69:ce:3b:b9:ed:42:44:0a:e6:b0:de:27:
0a:33:59:b7:1f:a3:ed:49:97:f9:55:85:f2:19:75:51:43:44:
6b:82:39:cb:81:14:81:c0:f2:6d:81:47:4c:bb:f2:77:0d:6f:
03:0b:92:b8:72:e0:e2:43:96:19:24:17:91:06:aa:42:cb:09:
2f:cb:76:a4:b9:1e:a7:2f:ba:5d:0e:4d:74:31:a5:a9:0a:ff:
3d:80:9b:a0:d8:46:b8:4d:e6:fc:eb:81:0b:f2:3d:4e:a2:ea:
62:18:82:e7:44:8d:c2:04:2c:7d:eb:21:06:c8:77:50:a3:8f:
ae:d2:f3:06:e5:fd:5f:60:c1:f9:18:f6:37:be:e8:ab:76:a5:
b8:bf:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:51:54 2024 by rpki-client on console-ams.rpki-client.org