Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier: KoMVLiDVz4p/bx9HmPpBGOFcG8ocz91ygM7YcseKNsA=
Subject key identifier: A1:C7:F7:6B:56:05:80:52:9A:7E:CC:B8:9E:16:E3:16:37:8E:45:81
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 0193553F3C914645E4CF5795B7450A77481C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number: 0DCE
Signing time: Fri 22 Nov 2024 19:00:27 +0000
Manifest this update: Fri 22 Nov 2024 19:00:27 +0000
Manifest next update: Sat 23 Nov 2024 19:00:27 +0000
Files and hashes: 1: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: 6g4uzaxjNFTifDSQ2zDmQDGbx+JxQNJV6wCPsSZLZPA=)
2: xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa (hash: 9JG3pPvPBYygnYLbTnPf/f+OLozmpzod6814l5/AJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:3c:91:46:45:e4:cf:57:95:b7:45:0a:77:48:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Nov 22 19:00:27 2024 GMT
Not After : Nov 23 19:00:27 2024 GMT
Subject: CN=a1c7f76b560580529a7eccb89e16e316378e4581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:df:60:7c:aa:3d:a5:83:b4:a9:48:ae:4c:
c3:6c:20:46:b4:51:6d:19:76:21:b1:43:b9:e0:07:
32:d5:f6:3e:ff:18:19:27:01:9b:17:a6:d2:60:01:
1a:2e:35:dd:95:14:da:f6:dd:bb:30:11:0c:26:f0:
b4:39:96:a6:ec:b3:07:54:f7:67:68:0b:ec:64:02:
63:eb:4b:69:e6:11:1b:09:45:c0:78:12:1e:c8:4f:
eb:0f:d7:ea:c0:82:8b:85:69:88:04:d8:14:bb:f8:
9b:95:5f:f4:5c:8b:2b:2a:9c:ac:54:ad:8a:4d:e8:
7f:86:e3:95:35:2e:47:29:87:1d:95:9b:35:f6:05:
5e:6b:8a:dd:39:fc:b4:fb:ab:57:76:c0:6f:d8:a7:
df:a2:b2:6d:af:a7:3a:19:0f:83:37:df:84:fa:cf:
c2:af:00:b4:94:b9:1f:6b:bf:d9:bc:90:e4:86:0a:
4e:6d:2a:94:5a:27:1b:dd:2b:2f:46:24:8e:fc:1a:
ea:56:47:91:18:87:fd:de:a0:58:b8:59:85:da:17:
09:ef:b8:0d:0b:ca:b7:aa:f2:21:fd:5b:69:86:0e:
36:59:83:9d:2d:6b:70:d5:ac:f2:2a:5a:29:2f:b4:
67:c3:e9:97:7b:ed:40:51:53:0b:54:9c:7b:da:12:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:F7:6B:56:05:80:52:9A:7E:CC:B8:9E:16:E3:16:37:8E:45:81
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:00:31:9c:d1:d8:32:89:62:b5:90:66:ef:1e:5c:5c:57:dd:
36:9a:9e:78:43:c1:2f:20:14:ca:75:b3:f8:7c:d6:2e:68:58:
00:db:b4:51:cb:75:9a:c4:f4:7f:be:42:2a:04:60:cc:23:a0:
9b:8e:2c:68:c5:10:b0:60:2c:0a:c6:51:b7:f6:6b:e7:78:2e:
60:a5:14:c3:82:c2:07:49:b4:08:53:34:84:a7:94:d3:9f:83:
45:82:16:04:81:5c:5f:d3:1c:33:2e:1a:de:83:7c:1a:87:d6:
8d:34:da:28:f6:76:97:cf:b7:85:c5:6a:47:3d:dd:3b:5e:ad:
fb:36:fb:3e:c0:4a:63:48:59:3b:16:39:15:da:a5:a3:90:b4:
05:ab:38:cb:18:f2:96:b2:fe:72:7f:c4:cd:17:ec:37:d1:52:
c6:5e:f6:40:42:6a:ab:ab:6a:17:95:03:a2:c0:ba:6a:15:11:
f6:d1:28:df:5c:02:17:5b:8b:fb:0f:3b:2b:e0:2d:84:44:ef:
b6:72:37:1a:d5:b3:1c:e2:86:b4:3d:80:83:76:f2:3e:6d:29:
2d:44:03:c7:2e:12:ac:65:e6:68:57:03:06:eb:c1:86:f5:e2:
63:7c:3c:e4:ef:a3:98:1a:85:ab:29:31:93:b0:aa:a3:c4:99:
67:7c:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:28 2024 by rpki-client on console-ams.rpki-client.org