Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
File: nebkJy4s44e0zASxQ_czCdcTYps.mft (raw, json)
Hash identifier: A0IF5G8FoA2kZwM3eyVnc1lKkI7ypW+odBmuWW3+2ow=
Subject key identifier: F4:09:9B:1A:C2:EE:AF:44:37:36:83:23:05:EB:76:43:61:0E:11:90
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 01935840476D234B9A7C75721A8FB5FC9149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 09:00:27 +0000
Manifest this update: Sat 23 Nov 2024 09:00:27 +0000
Manifest next update: Sun 24 Nov 2024 09:00:27 +0000
Files and hashes: 1: 1--_Pra55j5vU4AW5fs8K_BXLtm4.roa (hash: Ded8iBiyEkn9Sz0Ngh8CNZL7SKS7jfdmY+71s8swWs0=)
2: nebkJy4s44e0zASxQ_czCdcTYps.crl (hash: K9tjVdg1HffpxmiLnzhUescZF2yEDC8wTQnnijwwcTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:47:6d:23:4b:9a:7c:75:72:1a:8f:b5:fc:91:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Nov 23 09:00:27 2024 GMT
Not After : Nov 24 09:00:27 2024 GMT
Subject: CN=f4099b1ac2eeaf443736832305eb7643610e1190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:e0:44:e9:b7:18:77:de:a1:ac:7b:a3:fc:
8a:3e:20:27:cb:ae:c7:a0:e2:ac:be:9b:1a:f9:41:
6a:0e:b1:de:93:11:e1:22:4d:c3:11:7a:6f:40:01:
e9:e3:97:5d:a6:59:a2:3b:10:37:40:49:66:d9:2e:
eb:59:9b:31:a1:e8:62:30:12:42:d4:ce:78:36:a8:
9c:aa:39:cd:08:98:8b:63:54:b6:d0:06:51:a8:7a:
43:00:af:5a:2a:5b:24:a4:69:7c:6d:84:e7:f1:3b:
15:ff:e4:5c:44:05:02:b1:1a:82:9f:d9:2a:b8:4c:
e4:48:4a:29:45:93:a8:f4:df:0e:f2:2e:6d:8b:f5:
6b:6a:62:88:5c:2a:03:72:48:01:79:f3:e8:f7:af:
19:12:7c:12:57:2a:e3:13:ed:75:47:bf:79:af:40:
9e:15:1b:32:24:1d:b6:5a:3d:8f:76:2b:b5:bc:73:
7c:6b:57:d3:14:48:62:7e:7e:1d:4e:05:f7:04:69:
a5:9c:51:5d:38:78:83:11:16:1c:ce:5a:30:5a:d9:
34:e9:6b:7c:69:99:76:8f:8e:95:05:65:af:29:10:
36:a8:56:3d:00:a0:28:7e:bb:01:77:a1:6e:6e:aa:
df:dd:65:13:72:59:ab:2a:bb:1a:32:58:e8:12:08:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:9B:1A:C2:EE:AF:44:37:36:83:23:05:EB:76:43:61:0E:11:90
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e0:07:87:db:4c:1b:6f:6c:ac:08:42:b9:31:39:9b:e2:dd:
af:34:28:6b:96:91:cc:65:0a:a0:07:26:d2:97:53:7b:7e:d5:
b6:eb:cb:7e:c5:04:d4:85:e5:b0:2b:1e:5a:96:00:5a:75:6e:
e1:e8:1d:06:c7:5f:20:cb:b5:4d:65:07:7d:b6:ed:99:c4:d1:
3d:bf:86:d3:dd:85:b2:65:ea:09:e6:ae:5a:af:5b:a7:08:a8:
09:3a:33:cc:39:4b:67:fa:76:69:03:74:f8:f7:62:5c:72:03:
72:af:2b:91:80:a4:0b:61:01:e3:1c:c6:44:19:77:2d:ae:e8:
06:63:3a:ae:92:1f:ed:8e:af:35:19:fc:a4:a1:05:ad:cf:e2:
ab:c9:bb:dc:35:f5:0c:ee:8d:c9:5e:a1:7a:e5:35:56:f2:20:
91:0b:2c:2d:09:d8:46:09:62:d6:f4:29:ae:0f:3e:1d:18:05:
c2:6d:5f:37:87:1e:31:84:44:26:b3:36:9f:34:0c:99:9a:c9:
b8:28:08:3f:fb:84:dd:42:80:fe:75:d0:85:79:ee:81:00:8d:
a9:38:1e:b3:fe:c3:bf:83:33:a6:71:0a:03:33:82:d8:8f:dc:
fb:f2:e2:d3:21:7d:1b:9f:5b:8b:d2:8d:90:bf:bb:26:a4:ac:
86:aa:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:29 2024 by rpki-client on console-fra.rpki-client.org