Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File: nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier: bO6lHwNr5eu0id5YFtRxaR2qrNZAHDnf0USu9WmfbV0=
Subject key identifier: 70:68:48:EA:43:8F:FB:78:F2:88:08:6A:FE:FF:1B:3D:B4:E7:19:2E
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 018F87B64BE9E17F3B1879BD3402B45C7269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number: 0848
Signing time: Fri 17 May 2024 18:00:22 +0000
Manifest this update: Fri 17 May 2024 18:00:22 +0000
Manifest next update: Sat 18 May 2024 18:00:22 +0000
Files and hashes: 1: DnfhBK4M1xUhRdG9WNgPOx54JRk.roa (hash: 46eFCDRmqZkcOOQ2JOVE2W065uNJS6vLdvx/AzfFpHA=)
2: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: 7KMC2wdTqT8Xv7scB5q4nLPQc4qLjWCVaqDmgF/2gZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:4b:e9:e1:7f:3b:18:79:bd:34:02:b4:5c:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: May 17 18:00:22 2024 GMT
Not After : May 18 18:00:22 2024 GMT
Subject: CN=706848ea438ffb78f288086afeff1b3db4e7192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:6c:a8:68:33:14:03:1d:5b:6c:d5:09:b6:
5a:04:9c:d7:78:0d:b0:1e:19:36:b5:81:d5:74:1c:
be:00:b2:86:17:63:4b:81:07:c4:c1:81:6e:05:5a:
8f:73:51:5e:e0:7c:4a:b3:07:78:77:50:f0:bb:9f:
ce:4f:f1:87:5d:e6:6e:91:8b:2a:b4:11:fd:d1:c8:
74:3c:54:65:ac:90:ee:d3:a5:97:33:7c:6d:7d:86:
7b:0c:7d:f3:c1:ac:83:6f:e6:33:44:d8:95:51:8b:
cb:fd:e1:0e:ed:10:32:89:57:b9:59:96:77:59:61:
d7:b9:c1:b1:78:f3:80:68:20:9b:c7:7f:5d:e9:cb:
68:2b:ce:e9:a9:d8:50:0a:a1:db:a3:45:fe:f1:0b:
57:bd:89:e6:cf:8b:28:f3:fd:2d:6d:9a:be:4e:fb:
55:9c:05:a9:9c:08:1a:ec:a5:f1:c0:7b:2e:aa:10:
b0:98:f2:b4:f6:d7:c4:d3:0f:6c:a9:91:45:e5:66:
3e:ea:c7:6c:33:dc:e0:94:b4:86:d7:76:95:cf:2b:
79:c1:11:32:32:91:0a:12:12:09:4e:43:64:43:3a:
4c:a5:0d:f6:cf:d4:35:04:50:9e:d1:43:cd:53:5c:
e2:bc:24:03:ae:c6:74:b8:d9:e7:0b:4d:8d:c7:de:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:48:EA:43:8F:FB:78:F2:88:08:6A:FE:FF:1B:3D:B4:E7:19:2E
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:76:40:ca:d8:30:67:7a:80:42:df:1d:15:74:3c:d1:02:
4d:6f:cd:da:2b:c6:f6:d4:dc:c7:19:8c:32:2f:a8:66:47:87:
ca:4d:18:14:32:b3:e1:93:f1:c3:3f:af:7b:d2:79:a1:7a:06:
ef:df:4b:09:c7:41:b0:2e:38:9f:3e:6a:a2:22:2c:cb:05:e6:
9d:3a:36:ff:86:6c:cc:08:d6:13:17:b6:66:c0:b1:4e:70:86:
49:9d:97:23:17:5d:b3:b7:dd:d3:b1:41:b0:df:f1:78:f1:a1:
96:7a:b3:cb:74:43:ce:c3:26:c7:3a:43:26:55:78:49:53:68:
93:df:d0:07:ff:50:d4:bf:3b:09:0b:6e:15:0b:b6:2d:ee:2a:
81:12:00:0f:65:06:52:2f:69:3d:22:ee:c2:ce:b7:ef:40:67:
a3:6d:a9:ac:0c:76:ff:7e:db:c6:5e:f8:41:a5:d4:f6:d2:7b:
26:99:ba:f8:79:9e:24:16:f7:90:1c:e8:c1:9e:75:e6:87:1f:
a1:0a:5b:3b:47:22:cb:48:9c:88:44:14:67:65:e4:0e:d6:11:
57:ed:90:fb:68:be:ca:a7:49:29:88:8e:8c:54:1f:0c:39:6f:
5a:9a:73:7d:13:42:0e:2a:29:26:64:ff:96:30:35:c2:09:16:
58:da:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:43 2024 by rpki-client on console-fra.rpki-client.org