Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
File: NaG0hYfEMM89i_11mMWVvaHGaHQ.mft (raw, json)
Hash identifier: wOHJngEjgN7JkmcgGgiFEkRyCl93UglaxM2jHxJB7lU=
Subject key identifier: 93:8A:4D:6B:C2:3C:98:A3:82:F3:55:B3:34:AD:1B:16:0B:D8:01:36
Authority key identifier: 35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
Certificate issuer: /CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Certificate serial: 019359531B6C51B6E38B2EDDAB0D97F99F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
Manifest number: 0CFF
Signing time: Sat 23 Nov 2024 14:00:38 +0000
Manifest this update: Sat 23 Nov 2024 14:00:38 +0000
Manifest next update: Sun 24 Nov 2024 14:00:38 +0000
Files and hashes: 1: NaG0hYfEMM89i_11mMWVvaHGaHQ.crl (hash: 0UzP6DFokCpIzsvxIYnIP82Eobky9O82Jdx/Ypm3umo=)
2: oSYYTFE_ciuAXRx05_kpE1LbINA.roa (hash: MQx4MLs/kGB9CF6WYARhftVFgERCXyuxQEkZQuYbc24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:1b:6c:51:b6:e3:8b:2e:dd:ab:0d:97:f9:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Validity
Not Before: Nov 23 14:00:38 2024 GMT
Not After : Nov 24 14:00:38 2024 GMT
Subject: CN=938a4d6bc23c98a382f355b334ad1b160bd80136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:23:6c:5f:ac:44:33:ee:55:14:9b:1f:30:
51:9c:29:68:4e:b6:36:db:2c:3e:a9:8f:69:c8:f7:
da:7c:a7:d6:66:cb:54:ef:c2:0c:16:4d:08:8e:35:
38:de:7e:49:e3:37:73:8f:f4:e9:f3:82:d9:6a:04:
c7:92:9e:92:ab:ce:37:c1:c4:bc:1e:6a:4e:e6:62:
f6:42:b1:a5:9a:ac:6c:fd:f8:16:d9:1c:b4:af:bf:
b0:72:ac:04:91:95:ef:af:57:b3:5c:78:39:f4:78:
5c:60:a7:26:8b:1d:2e:4e:56:47:de:e8:0c:ea:dc:
52:40:f4:32:f5:b5:c3:95:d1:90:b9:51:30:35:39:
27:8a:a5:73:be:ff:08:9d:7a:be:aa:b7:25:22:d6:
33:a0:f0:69:3b:3f:61:4e:6b:00:bc:b6:bb:31:a6:
41:1b:8d:0c:e7:4c:62:7f:e9:7c:a6:e9:d5:af:3c:
f2:ad:7c:95:18:0b:c0:13:70:91:bc:8d:5e:27:7d:
9d:3b:51:5b:31:9d:f3:b1:df:e1:1b:df:c2:9f:66:
31:07:c2:85:c5:f8:a9:0c:a2:1a:5b:7d:7f:08:ea:
6d:a1:ca:e1:49:56:5a:00:1a:31:8f:70:f4:f9:ef:
91:3f:d0:36:cf:21:be:34:3b:d6:20:eb:0d:86:d6:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:4D:6B:C2:3C:98:A3:82:F3:55:B3:34:AD:1B:16:0B:D8:01:36
X509v3 Authority Key Identifier:
keyid:35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:3e:50:38:33:c7:73:11:3f:38:8a:9c:14:b9:1b:ad:e1:
de:5d:97:37:0e:a2:74:31:dc:db:7d:70:a1:23:83:4e:04:e1:
c9:f6:e8:3f:a4:e8:2c:d9:bd:df:39:b5:af:ef:d7:63:b3:38:
c8:cb:a9:1a:dc:13:fe:ec:d1:98:5f:54:af:4b:8c:9e:a5:87:
95:13:fc:02:c8:20:72:63:58:fa:12:a1:fa:ce:96:d2:a7:aa:
b1:67:6e:54:34:c7:7a:05:82:23:75:8a:28:b5:a3:d9:20:19:
ff:d7:18:33:be:58:47:0f:26:79:14:6b:a7:c2:c4:c3:22:e4:
0e:2e:99:29:8b:4d:a4:5f:14:62:73:7c:e2:71:02:50:88:56:
4d:a2:27:d7:7c:8e:bd:90:2f:a1:c4:bf:5e:5d:45:50:8f:4e:
f8:c0:c2:af:e6:57:4d:37:6c:43:71:e3:bf:79:38:61:08:d9:
b9:7b:1d:b0:dd:e8:5c:3d:05:3f:d5:4a:a2:16:1f:45:99:88:
21:f0:05:2c:2f:47:f3:4d:a7:7d:54:a5:f9:26:53:72:13:ee:
e8:2d:be:ff:d2:06:3e:ff:b8:a9:78:1d:5d:d2:ea:59:de:79:
ee:d1:8b:e4:34:e4:13:e8:a8:18:5f:73:05:c7:b5:af:5f:a9:
e7:0a:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:31 2024 by rpki-client on console-ams.rpki-client.org