Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
File: NFuHElrLAlH6z9jAqVtIvCJSIUY.mft (raw, json)
Hash identifier: Qr6QGv1J3+G4ymWcpStBcMhi1XvKRU5I19S3rqlLK6U=
Subject key identifier: AE:4D:FC:33:92:6A:CE:22:0B:2B:F2:5A:E1:82:3D:33:86:DA:98:1D
Authority key identifier: 34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
Certificate issuer: /CN=345b87125acb0251facfd8c0a95b48bc22522146
Certificate serial: 018F885B63817F51438FD6E281CBE62CDE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
Manifest number: 05F2
Signing time: Fri 17 May 2024 21:00:41 +0000
Manifest this update: Fri 17 May 2024 21:00:41 +0000
Manifest next update: Sat 18 May 2024 21:00:41 +0000
Files and hashes: 1: NFuHElrLAlH6z9jAqVtIvCJSIUY.crl (hash: P/lGU7Qk+DzRUiORKI6UItf0SSPEXye1mPqFGpQBOeY=)
2: dtPY3lbPmH-lDHxlBV8qBrXOcC8.roa (hash: tDZGOUOFT//uTaOMO75h0K9TiRMl2MTgUtBLb9pFINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:63:81:7f:51:43:8f:d6:e2:81:cb:e6:2c:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b87125acb0251facfd8c0a95b48bc22522146
Validity
Not Before: May 17 21:00:41 2024 GMT
Not After : May 18 21:00:41 2024 GMT
Subject: CN=ae4dfc33926ace220b2bf25ae1823d3386da981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:2d:a3:3b:28:41:d6:00:b6:4f:b6:cb:d1:
b0:b8:8d:9f:cc:b8:7e:6d:a1:dd:c1:f8:e0:0f:2f:
6c:7c:86:4f:ef:b6:14:da:cc:b1:11:78:08:f5:11:
a2:04:c0:23:68:d2:dd:d4:29:e2:03:40:17:22:cc:
0e:b6:99:db:f2:63:70:7d:49:3f:67:c9:91:03:c7:
a9:89:c6:82:ae:fc:e6:0d:04:3c:25:93:1c:fa:71:
f3:22:06:ec:10:31:73:52:64:a3:9b:fb:63:50:4f:
75:9e:2d:ec:ed:89:98:92:f7:56:23:85:ab:40:13:
c1:7a:73:0d:b8:46:99:a7:c0:ac:23:c2:00:fb:b7:
c5:08:d9:2f:9d:30:dd:48:74:51:14:44:c5:41:5e:
ac:95:bf:9a:e9:37:a6:77:da:5a:79:c4:8e:d4:09:
85:73:2a:f7:24:0b:3e:b5:c4:0b:65:71:de:df:5b:
b5:7d:67:38:92:3d:4c:43:1f:1e:23:1e:c3:54:5c:
c1:51:a6:8a:54:1f:2c:8b:29:6f:b0:26:74:b2:d2:
2f:b3:35:5a:14:20:17:5b:a4:5c:6e:30:ff:44:69:
68:dd:cc:41:b4:cf:56:c0:23:39:86:14:75:ac:0f:
5b:9d:a4:d7:65:0e:bc:65:26:b6:06:d0:db:21:34:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:FC:33:92:6A:CE:22:0B:2B:F2:5A:E1:82:3D:33:86:DA:98:1D
X509v3 Authority Key Identifier:
keyid:34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:ce:ad:27:c3:a5:70:b6:2a:ac:47:bb:8e:65:13:b8:c9:
47:c2:06:d9:65:3e:11:8a:67:c9:62:79:f0:e1:8c:fc:a0:81:
b2:56:52:11:bf:79:3a:6c:98:af:d1:05:08:43:a0:c5:78:23:
b5:d8:9f:87:e0:ad:2f:9c:60:45:56:e0:de:60:ef:60:7f:d3:
0a:2d:a5:16:6b:5d:aa:87:37:e5:69:ed:99:52:24:5d:3b:16:
5b:79:26:4e:cf:33:c8:df:8e:08:4a:fe:d2:94:a5:e5:c0:41:
7c:db:d8:f9:0e:e8:b5:ba:67:22:01:57:3d:53:d1:5b:26:38:
80:b9:d5:e7:85:1e:44:18:aa:f3:b5:7d:d1:a6:89:06:f0:0c:
56:1c:7c:5c:ad:09:79:2a:65:71:3f:a9:56:9b:19:81:e9:40:
16:7c:1c:c0:f7:d3:43:88:69:33:fe:3e:cb:45:26:81:ee:72:
e5:e5:85:1a:aa:7b:32:05:ae:56:9f:80:ad:ef:40:3d:ab:7f:
31:37:e1:20:33:88:8b:89:cc:85:14:e9:a7:c0:ec:09:18:33:
5d:70:d2:85:3c:cf:d1:3a:af:f9:ff:cf:03:39:f6:b8:84:c2:
a7:e5:6c:62:69:a5:35:c1:84:7c:ad:68:07:12:79:bb:81:2d:
81:3a:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:04:55 2024 by rpki-client on console-ams.rpki-client.org