Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: SDcSxhxVnBQUS9nqxd31kdpraxODODv+ri5I/Je41Jg=
Subject key identifier: FF:DB:E4:D3:8B:EA:BF:5C:1B:93:67:15:0A:B0:C5:79:13:CD:1D:59
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019353883AA96330FC1FA48D9AD272AA7F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 11:00:57 +0000
Manifest this update: Fri 22 Nov 2024 11:00:57 +0000
Manifest next update: Sat 23 Nov 2024 11:00:57 +0000
Files and hashes: 1: nGn2FPpq8n0XeVLxlxXia9QnoAE.roa (hash: Npwtadzm+qIOZSYXNs7I7fVqnG6XP8OxoRLoNYvVY28=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: e55iAiwHyh51duY1cw9zHueIZETMl7UIVN8O0UOJzyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:88:3a:a9:63:30:fc:1f:a4:8d:9a:d2:72:aa:7f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Nov 22 11:00:57 2024 GMT
Not After : Nov 23 11:00:57 2024 GMT
Subject: CN=ffdbe4d38beabf5c1b9367150ab0c57913cd1d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:11:6c:ed:fb:85:e7:e4:e5:ef:04:8f:80:
d0:2c:8a:c9:2f:c7:46:26:fa:5e:aa:33:a1:3f:70:
a7:c3:4c:c6:c6:d0:ba:ef:d7:00:86:3a:bb:78:80:
78:81:56:66:8e:65:64:d6:9a:e1:a3:3e:23:d2:23:
35:74:58:bd:b6:77:15:cc:09:87:f3:8c:f4:05:2e:
72:fe:8b:4b:a7:75:ac:d6:fb:39:32:43:ea:35:e1:
17:ab:3b:0a:3f:4f:15:87:7d:eb:26:62:ea:c0:40:
f7:82:dd:27:4b:ca:b9:72:18:7d:e8:6e:93:7d:77:
3a:63:9c:9c:31:09:40:50:e2:2d:84:53:09:f1:24:
db:11:21:5c:37:1d:94:89:c5:71:68:55:f6:c6:c3:
dc:28:d1:2a:a8:8d:c5:f2:50:65:f6:b2:80:19:a6:
b5:c5:d5:2f:94:a4:9f:85:a1:c5:c6:5f:7f:56:90:
56:24:7f:13:0b:98:26:f5:0d:45:73:8b:0b:7e:3e:
8a:5f:91:59:d4:8c:8f:58:ac:29:5b:4a:a5:15:5c:
b4:76:0e:43:c3:f5:71:0a:25:7b:1e:54:c3:a5:d6:
6f:13:32:23:a4:b2:68:60:b9:bf:ea:e6:a9:21:84:
17:7a:c4:86:61:87:93:7c:c9:61:fc:f2:9f:99:5a:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:E4:D3:8B:EA:BF:5C:1B:93:67:15:0A:B0:C5:79:13:CD:1D:59
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:d5:5e:8f:1b:0c:25:77:41:3c:29:76:ff:d3:1f:78:93:
6a:41:18:77:bc:e3:6e:8b:07:db:83:39:94:97:7e:3a:e7:8c:
f1:70:9f:cb:25:32:d4:01:d4:6f:79:61:65:7e:0e:7f:31:11:
a6:37:ed:83:c3:9b:46:c4:ac:41:96:29:53:f7:74:5a:0f:38:
c2:47:0e:79:29:07:78:2d:61:ab:c0:1d:53:db:0d:47:d5:d3:
f5:ab:2f:f0:dd:c6:01:b3:c4:af:b1:8a:77:f0:03:ae:96:0a:
fc:5b:b5:b4:5a:af:6e:a7:70:db:59:d7:6d:5a:bb:94:f8:ae:
a6:01:b2:cb:27:a2:e5:6a:1e:55:f1:cf:73:41:74:72:63:45:
72:d3:e7:f2:a0:1d:fc:c1:9b:06:78:64:e4:4b:0b:5e:a3:66:
e0:5b:12:c8:56:c8:6c:78:aa:4d:5d:8b:33:61:9c:5c:e2:d1:
73:62:5e:10:86:fe:06:b7:c0:3a:36:08:ed:9b:81:6c:62:7f:
93:95:12:8b:4d:0c:f8:55:01:c3:fd:29:bd:94:37:47:85:d7:
a6:ec:37:ef:25:fa:8c:11:bc:6f:29:d5:31:f0:85:40:ba:51:
b5:a5:3a:1e:c4:e1:b6:58:4e:1d:e3:18:d4:5b:66:f9:34:e5:
af:d5:26:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTiDqpYzD8H6SNmtJyqn+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjQxMTIyMTEwMDU3WhcNMjQxMTIzMTEwMDU3WjAzMTEwLwYDVQQD
EyhmZmRiZTRkMzhiZWFiZjVjMWI5MzY3MTUwYWIwYzU3OTEzY2QxZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0sRbO37hefk5e8Ej4DQLIrJL8dG
JvpeqjOhP3Cnw0zGxtC679cAhjq7eIB4gVZmjmVk1prhoz4j0iM1dFi9tncVzAmH
84z0BS5y/otLp3Ws1vs5MkPqNeEXqzsKP08Vh33rJmLqwED3gt0nS8q5chh96G6T
fXc6Y5ycMQlAUOIthFMJ8STbESFcNx2UicVxaFX2xsPcKNEqqI3F8lBl9rKAGaa1
xdUvlKSfhaHFxl9/VpBWJH8TC5gm9Q1Fc4sLfj6KX5FZ1IyPWKwpW0qlFVy0dg5D
w/VxCiV7HlTDpdZvEzIjpLJoYLm/6uapIYQXesSGYYeTfMlh/PKfmVrmuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/b5NOL6r9cG5NnFQqwxXkTzR1ZMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsbVXo8b
DCV3QTwpdv/TH3iTakEYd7zjbosH24M5lJd+OueM8XCfyyUy1AHUb3lhZX4OfzER
pjftg8ObRsSsQZYpU/d0Wg84wkcOeSkHeC1hq8AdU9sNR9XT9asv8N3GAbPEr7GK
d/ADrpYK/Fu1tFqvbqdw21nXbVq7lPiupgGyyyei5WoeVfHPc0F0cmNFctPn8qAd
/MGbBnhk5EsLXqNm4FsSyFbIbHiqTV2LM2GcXOLRc2JeEIb+BrfAOjYI7ZuBbGJ/
k5USi00M+FUBw/0pvZQ3R4XXpuw37yX6jBG8bynVMfCFQLpRtaU6HsThtlhOHeMY
1Ftm+TTlr9Umfw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:51 2024 by rpki-client on console-fra.rpki-client.org