Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: 8yONIsocJUsU8Bf4IvEh1a7vhsNG+/msBYG78jgi8zY=
Subject key identifier: DD:F9:19:EA:1D:DE:AB:20:5B:12:4B:D9:55:0C:1E:C3:F8:A3:03:1D
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019365FE128E8914E963A6EE91609925F66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0AFF
Signing time: Tue 26 Nov 2024 01:02:49 +0000
Manifest this update: Tue 26 Nov 2024 01:02:49 +0000
Manifest next update: Wed 27 Nov 2024 01:02:49 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: HF84jcydoZyYuzLdwRwV4clGfzvau6aeUtTSE5tkt0w=)
2: ljlqd-8jLbA5HiZI7dZcFJWzgtw.roa (hash: gwDTwp9DDuuwYyomuU3qLqrPxOuEBxzrnm7AS5NsUW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fe:12:8e:89:14:e9:63:a6:ee:91:60:99:25:f6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Nov 26 01:02:49 2024 GMT
Not After : Nov 27 01:02:49 2024 GMT
Subject: CN=ddf919ea1ddeab205b124bd9550c1ec3f8a3031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:e0:45:28:e2:65:8b:49:e5:2c:f1:de:fa:
f1:ec:2e:e9:cf:af:ff:4a:0d:2e:39:75:28:86:18:
c9:f6:96:60:cf:16:00:94:c4:4f:28:76:b9:c1:76:
69:9d:aa:77:64:58:fb:01:bb:dd:d9:42:23:bb:f5:
a8:58:69:ba:8f:76:55:0a:09:93:a6:cc:c4:c3:54:
2c:b1:9b:88:26:d2:4e:d7:c8:3a:f1:f4:b5:8c:e9:
b3:56:fa:90:e0:07:8b:f3:2e:bc:02:92:60:81:0b:
20:e5:9d:1d:eb:8f:40:0f:f1:51:3f:cd:ca:99:e1:
e6:45:54:49:fb:f6:64:16:53:58:7d:9d:bf:48:51:
ca:d9:3a:5c:04:54:e4:b6:4e:47:8a:98:53:d7:48:
1f:c3:14:62:06:9b:4a:de:6c:b8:bf:67:f1:44:b7:
b5:4a:0a:d9:81:02:b2:be:c8:7d:cc:49:79:b9:50:
06:d2:d2:c2:3b:14:b6:e5:39:8e:b0:ee:37:5a:51:
53:24:b1:4b:d5:89:ce:d7:71:6d:6d:33:47:ff:b9:
94:2a:82:d8:fa:91:9a:a1:c3:76:b8:94:67:69:14:
eb:4c:fe:b5:21:d9:55:01:1f:d2:a2:eb:db:7e:74:
75:af:d2:3f:a4:22:ee:08:95:0a:34:e0:0f:cd:5c:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:19:EA:1D:DE:AB:20:5B:12:4B:D9:55:0C:1E:C3:F8:A3:03:1D
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:2b:e6:58:9e:2e:b7:05:90:49:d7:4f:a2:1f:d7:e7:a7:
1f:92:cc:98:17:d6:a7:84:6a:c0:38:6d:0a:db:6c:2d:1d:c2:
d3:45:2b:c0:02:62:4d:d2:a0:cf:1f:36:21:83:07:32:6e:9a:
b1:79:0b:49:eb:6e:83:13:1d:2f:1b:a1:c0:4c:79:aa:22:e5:
1c:7d:43:bc:bd:52:69:a7:b9:c4:f0:03:4e:ee:cf:d1:83:84:
e9:d7:e2:e2:36:55:bd:a4:66:19:2a:9b:e4:62:9c:ac:dc:9b:
1c:94:30:59:61:9a:36:90:23:b2:20:a9:42:6f:6c:be:09:d9:
f8:2c:45:0c:55:82:59:66:f3:0a:3e:ed:50:01:2c:3e:23:74:
22:19:29:6f:32:e2:59:79:cc:17:bd:d2:d6:d8:58:d6:01:74:
b0:e5:f7:9b:e4:4f:b3:57:04:5c:e9:75:d0:94:35:79:b1:29:
27:d5:45:78:bf:b7:8d:99:0f:b3:0d:39:12:b4:9c:ec:a2:ff:
ea:f5:ce:fd:21:78:5d:47:5d:c9:3b:e0:28:01:ce:00:53:ee:
de:0d:fd:98:f4:67:8e:18:61:97:47:b4:fd:69:3a:81:f2:9b:
9b:c9:e8:b4:85:f4:c9:2f:82:27:b9:e9:06:57:28:d5:f3:5e:
dd:44:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:06:01 2024 by rpki-client on console-ams.rpki-client.org