Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: rOrhwJy0hJCRcsctTYMOYkua1HEwQ6q2TC38FhtMPNw=
Subject key identifier: 5F:3A:E6:91:99:D5:B3:A0:67:54:18:F9:23:F9:56:FE:51:1E:FB:2F
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 018F874966810A63433BE377C3571E499CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0669
Signing time: Fri 17 May 2024 16:01:25 +0000
Manifest this update: Fri 17 May 2024 16:01:25 +0000
Manifest next update: Sat 18 May 2024 16:01:25 +0000
Files and hashes: 1: R_KxB2Z07D3Lxp4aSo7eqsDwQ_g.roa (hash: 4tU2ou12JSfTAhelVCgGPV4Ee7/k70e8DYdPF5QRNGg=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: uiHknAJw2H738EERLtY2ozBDmXV1oMcGkCubYIVaTtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:66:81:0a:63:43:3b:e3:77:c3:57:1e:49:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: May 17 16:01:25 2024 GMT
Not After : May 18 16:01:25 2024 GMT
Subject: CN=5f3ae69199d5b3a0675418f923f956fe511efb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:d1:4a:3d:fb:e4:e3:b9:dc:c6:9c:cc:93:
06:b3:18:c1:3d:4d:3c:d0:79:68:c2:98:e6:ca:c2:
14:ae:88:77:c8:7d:f5:63:59:60:58:d8:7b:a2:c9:
0e:3c:1a:4b:4b:01:05:e3:5e:13:a5:76:fb:14:81:
e8:bb:75:f0:7e:32:44:09:a3:ac:cc:f2:71:19:50:
84:fa:ec:12:58:3e:d3:ec:5e:21:c5:14:0c:7e:f9:
ff:60:23:df:e9:1a:b6:3a:df:12:de:ce:46:36:a1:
0d:97:76:b0:81:f3:87:af:c6:db:4d:7c:77:be:a0:
0d:97:d7:24:7f:60:ff:a7:44:ba:f7:84:f0:a2:43:
4f:b7:00:cc:0a:51:1e:af:05:1f:6f:d3:a4:a3:55:
8d:5b:67:fb:b1:01:3e:98:7b:02:f7:bf:f8:40:23:
4b:99:b0:88:fd:7a:44:45:85:4b:c5:df:ca:d4:ff:
49:03:d1:33:4b:ef:d9:ee:63:ff:4a:9a:76:71:b3:
8f:95:4e:5b:52:55:cd:38:18:01:41:d3:ff:ef:a6:
3e:73:52:ba:e8:9d:8f:0e:27:1e:59:c0:3f:0d:98:
25:1a:8b:a0:ba:63:dd:04:94:29:d9:66:77:65:67:
d3:d7:33:df:a8:1a:aa:5c:cc:6e:74:d5:54:28:aa:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:E6:91:99:D5:B3:A0:67:54:18:F9:23:F9:56:FE:51:1E:FB:2F
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:3f:f8:f3:cd:32:52:f8:b4:06:9b:20:4a:92:a5:b8:15:
c5:cb:e1:b4:bb:83:ed:c5:28:24:e9:0f:18:d7:2f:bd:49:38:
24:c5:b0:35:9c:55:60:af:a9:e4:fd:2f:82:fb:35:69:45:d5:
e6:21:50:b1:04:12:14:74:55:07:3f:46:3e:23:6d:02:7b:63:
1e:71:6b:e4:12:2d:ba:50:e1:b2:c3:a8:09:05:9f:a5:1f:85:
59:c7:43:69:a6:4d:1d:0f:7e:f4:14:d3:d1:09:9e:8f:07:36:
40:50:ff:de:56:88:aa:76:6f:94:ea:a0:fc:09:47:ca:6b:dc:
ba:07:cc:c7:aa:a8:51:8a:b2:76:8a:0a:e8:7a:7a:02:18:2b:
e0:99:ce:2a:14:17:ff:49:0b:67:6b:0b:0f:1a:33:83:8d:1b:
41:47:cc:e1:84:b1:9c:12:60:f8:16:24:e7:12:00:5a:d6:ba:
c0:94:62:39:d6:bf:c2:ec:00:53:2e:63:94:37:f3:6b:8a:c1:
4a:b8:42:55:a7:b3:a1:2b:da:15:4f:b3:28:73:99:03:0b:99:
b5:17:f7:60:eb:99:15:2a:84:84:e1:2f:b5:f8:bd:8e:aa:26:
54:a4:e5:12:3e:e9:4f:cd:48:c6:0c:a0:0c:be:ad:a1:13:e3:
a9:09:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:19 2024 by rpki-client on console-ams.rpki-client.org