Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: +sXLTczNrAPCNDOtE8zYSbbIv2S9qi56KdTcQXcdvNE=
Subject key identifier: EF:7F:08:2B:15:58:AE:A1:F6:E8:77:72:50:34:62:E4:B0:61:14:AE
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019353882FFF7BDE423AAF97A821FE7AE8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 11:00:54 +0000
Manifest this update: Fri 22 Nov 2024 11:00:54 +0000
Manifest next update: Sat 23 Nov 2024 11:00:54 +0000
Files and hashes: 1: 6aPj84O_XRT7QLm_N4SKBBU3fVE.roa (hash: uFL/n4F4/ANq4fCQ401D7erQJKxUXmBJK802Bs9mmRQ=)
2: 89bassPj2ijYviFX3ma2Hx4odWE.roa (hash: wAxhZV9efJefckLPIvrh0TWYFEieAhSz2c+XP3AVKCw=)
3: G6lrjXCvNRgyYogYBiQruIGVxe8.roa (hash: vOVjJz/m9iLFiCy8sgZBBBlfsMNRvuS92RaiVfKDMBE=)
4: OKxTBazuyTvtvzUkdkB0ywGh0DY.roa (hash: 4FDxnUb2um/JGHqhk50AhMHAdetqJGO3anZnm43s3yk=)
5: k1_qr_M5qoi2cYn67yTFXLBVIrY.roa (hash: 5quDZDMCQxcFlTdVdXP/GCEATD8C1IswKC1NM0pROOY=)
6: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 7mquqIlni5AhINt9552ztQbg+K+saIl71qh6zTTMy/U=)
7: pOJ8TENBhHUvXNElSwI4dP8UU6c.roa (hash: f6hjgYRiuJHikBeLg1d3/o03anemRCvrS7UgvQkgRA0=)
8: qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa (hash: YgSfaCc90LeQ/xe6jYKkISR0ekDlExDB1OVIV+QDHnQ=)
9: r-P9SRQaLjCAqODdRPJHFZbQFyY.roa (hash: yiYRKYsvrcXeOhvVDmc7hGjWjv/AwxIf0u1kutAtevE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:88:2f:ff:7b:de:42:3a:af:97:a8:21:fe:7a:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 22 11:00:54 2024 GMT
Not After : Nov 23 11:00:54 2024 GMT
Subject: CN=ef7f082b1558aea1f6e87772503462e4b06114ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:7d:ef:31:8c:95:e6:0c:76:63:4e:fd:c6:
16:ef:74:8e:d5:34:35:ce:54:cc:73:0d:56:b1:91:
e3:07:72:1c:43:46:63:92:5a:7e:12:3f:3d:50:43:
cb:06:f7:b2:80:d5:b3:a4:01:91:7b:bb:63:22:27:
eb:63:fb:d8:c9:8d:9e:35:ae:5b:95:37:91:56:f8:
a1:88:29:46:34:59:a7:39:f2:6a:27:34:ee:de:7d:
40:25:bc:2a:63:7d:db:50:c2:f2:7d:8c:93:42:54:
d6:9c:61:7e:71:06:9b:60:c3:5a:d0:1a:8b:10:38:
7f:f6:5f:7a:30:b2:a9:3b:2d:5a:ed:b3:54:ee:80:
cc:fd:d5:11:6e:70:c3:2e:3c:3d:24:67:77:8b:77:
d1:8c:b6:7d:39:11:86:81:fa:98:de:3a:d9:bf:63:
4d:ef:1e:6b:64:ad:79:66:26:df:c2:9f:3a:9a:11:
4a:ea:5c:80:ef:fd:a0:c5:5f:62:17:5f:00:f1:13:
25:de:52:41:4c:1a:27:ee:cb:99:5a:e0:d8:92:a7:
7d:91:9f:11:b3:c6:5a:c4:55:42:b2:6b:23:49:5a:
17:5c:72:fd:da:ad:09:71:86:df:1b:5e:b4:d3:de:
0c:d0:ac:c9:9d:f1:66:ed:b8:56:64:f1:29:69:ac:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:08:2B:15:58:AE:A1:F6:E8:77:72:50:34:62:E4:B0:61:14:AE
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:50:de:4c:68:41:04:14:68:d8:65:db:68:76:eb:7f:f7:
db:f1:22:b5:7e:2f:7c:10:c4:cb:a9:ce:dc:ba:c3:9d:0b:49:
bd:a9:e8:0f:80:2a:eb:22:34:34:35:8e:e1:e0:9a:c2:05:84:
ad:30:e9:86:29:e5:5f:b1:c9:cb:e5:0c:d0:a3:37:e3:16:3a:
81:ca:3a:c3:bc:f4:4a:2b:12:07:fd:8c:48:f4:09:5f:6f:53:
e4:bd:5a:64:7c:01:72:58:0e:48:d6:f1:73:b5:66:a3:bb:8f:
3a:6a:67:3a:79:59:0c:46:2b:2a:24:96:b5:c2:f7:69:37:37:
6f:33:7d:72:55:72:89:2f:64:68:87:00:38:58:f1:b8:be:28:
78:17:5f:c3:92:60:4a:00:e8:0c:b5:41:e1:0a:cc:6a:d2:15:
88:a6:63:fd:23:ea:3d:20:1c:cf:ec:17:2f:6a:23:ac:8c:2e:
8c:21:5d:17:80:62:8d:08:4b:70:53:e2:58:ae:60:64:7d:2d:
02:a9:5d:30:04:25:f0:e6:b9:33:99:b0:01:70:fe:f1:fd:ac:
c7:89:2c:d8:18:fd:45:b3:10:d3:bd:04:47:5f:13:1d:16:46:
5a:75:99:98:5f:c8:25:9e:8d:0f:40:2a:5b:0d:39:24:f6:b7:
de:ac:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:42 2024 by rpki-client on console-fra.rpki-client.org