Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: NBL59ESDOzmTE/E9Aqs1Xq7MUiEbEq2mwiOqIPTMSWg=
Subject key identifier: 9A:AA:98:74:BE:8F:DB:42:83:25:1D:51:71:7A:78:08:03:F5:C3:C3
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 018F87B68F761181ADC4B98150AEA01A83E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 10D2
Signing time: Fri 17 May 2024 18:00:39 +0000
Manifest this update: Fri 17 May 2024 18:00:39 +0000
Manifest next update: Sat 18 May 2024 18:00:39 +0000
Files and hashes: 1: LeBb7X0lY1YSJcCwODNbMgkDLq0.roa (hash: TOUBvOfyPg3Y3V8IbtaymRIEi4yzxqwcJiTZOXFK5ZI=)
2: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: PekBlm6+ZJBFSSxuKfcG9+NBaSF6UsdeZjO3zziXU+o=)
3: s5OLGPACQZCxzPAUxBS2I1HSBK0.roa (hash: qp0Kr/BuL8GbgYn9XMB52y4y0alQdPjojffLog7j2nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:8f:76:11:81:ad:c4:b9:81:50:ae:a0:1a:83:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: May 17 18:00:39 2024 GMT
Not After : May 18 18:00:39 2024 GMT
Subject: CN=9aaa9874be8fdb4283251d51717a780803f5c3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:22:b4:f9:e3:92:ae:51:30:26:56:e2:1b:
e8:82:81:c0:7a:61:79:18:d4:81:1e:ab:3f:ff:d5:
c0:24:a0:91:f7:83:ff:05:c9:0d:2a:bb:b0:77:28:
01:69:9d:d0:3b:1d:62:59:88:b7:65:db:d6:9c:cc:
43:41:94:8e:45:93:63:6b:24:6e:09:05:69:56:53:
75:31:bc:8b:35:64:57:0d:6d:17:ed:5c:50:ad:59:
53:94:1a:e3:99:af:85:d4:df:2a:b6:74:22:2c:47:
4d:f5:b9:93:c1:cb:74:c0:2a:bc:77:a8:8f:2e:55:
6d:51:55:11:57:3f:5b:48:33:ea:33:7a:2f:8b:c1:
d4:ca:df:23:20:78:08:d1:50:4f:1d:67:19:25:c2:
91:6d:3e:36:ef:e0:6f:2a:f1:d5:98:d8:e7:a9:8d:
a2:84:38:6f:2b:d5:c0:d8:36:48:a5:4b:7d:24:3d:
fc:42:33:61:b4:f3:39:3f:02:8c:9d:f2:ea:d0:6f:
04:e5:59:b4:45:e3:20:b3:f3:b2:19:89:c7:84:f1:
b1:ba:56:98:54:8f:5e:f2:d3:7a:45:1f:2c:bf:d0:
ff:35:7b:46:d7:7c:fe:44:60:38:cb:59:51:92:1a:
6b:24:66:8c:92:dd:42:8e:be:c4:81:57:bd:f2:4c:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:98:74:BE:8F:DB:42:83:25:1D:51:71:7A:78:08:03:F5:C3:C3
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:59:18:4d:38:49:3b:83:fe:62:b6:cb:0a:95:1c:c0:34:
c5:3d:58:e6:a5:e9:62:46:0b:45:fc:7b:8c:11:0f:f8:8d:15:
5f:fe:d0:d4:14:ae:15:85:50:c4:bf:cb:16:b1:fd:80:06:a0:
53:38:d9:73:f8:83:bd:c1:b9:81:f8:d3:90:47:1b:ea:b1:9d:
ba:c6:ab:9c:a7:1f:a6:24:a5:36:ca:ec:84:6e:f7:51:18:43:
46:5f:a2:2c:25:f6:21:b5:b7:11:21:ca:a4:44:f4:2e:95:9e:
74:eb:05:3c:91:81:d2:a1:8a:1b:52:91:65:bd:bb:f5:16:69:
83:ef:8c:2f:aa:42:a9:2d:aa:fd:d7:a1:46:3f:be:8b:94:fb:
4e:1c:5f:4d:33:2a:34:22:f8:36:13:96:2a:38:9c:e2:b6:83:
c0:78:90:3c:c5:f7:98:df:bf:76:25:cf:e2:f0:35:d6:f8:54:
ac:67:e1:16:c4:fe:ee:6a:99:03:db:05:dc:a8:b7:8f:a0:54:
d9:67:ca:74:c1:5d:18:ea:3a:b3:52:4b:ca:73:fc:3b:de:74:
fa:89:8e:d6:c0:68:90:c4:ed:0f:dc:4b:44:ae:e7:33:77:1e:
84:a7:cc:82:35:74:5b:77:55:b5:ea:41:11:a2:72:ed:b3:e3:
19:d3:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:11 2024 by rpki-client on console-fra.rpki-client.org