Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: 7JTDcFr9eLM4qUlMovXydLcp4TRAbjW5Vi1PWdWXeeI=
Subject key identifier: 10:B1:D6:38:B6:0C:11:56:86:FB:6A:70:98:B8:EA:E2:C1:0E:4B:72
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01936A7DB6248EBDDDDC1D3B7FAEC06F7C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 22:00:43 +0000
Manifest this update: Tue 26 Nov 2024 22:00:43 +0000
Manifest next update: Wed 27 Nov 2024 22:00:43 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: HIOkKOdi1NZ09Tmmhcl41kZZxjX5FgGIjgoXJZ8JcLo=)
2: VHu83DgXcfkjG48VOyxzLNcfDnk.roa (hash: bjDOFvmEZuoL2JKTHgQ1qoo3RCOUQoWaRw1NfWwcZMI=)
3: wp7V9YsVFVhPP_gcuYV2sHAHdLY.roa (hash: jXXCbSK+ZPy71IIpJD/n74FlSNQG3oxx++u8eVAz5lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b6:24:8e:bd:dd:dc:1d:3b:7f:ae:c0:6f:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Nov 26 22:00:43 2024 GMT
Not After : Nov 27 22:00:43 2024 GMT
Subject: CN=10b1d638b60c115686fb6a7098b8eae2c10e4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:0b:13:db:24:a9:48:d2:47:91:bd:11:a7:
26:95:2a:60:f1:19:17:41:9c:18:ec:db:f7:0b:9f:
56:0e:42:e2:60:d8:b3:45:8e:03:2d:44:1f:67:c5:
aa:60:c4:c2:86:f6:20:3e:8f:51:07:47:ea:78:0e:
02:dd:d4:03:42:d8:8a:8e:3a:e9:89:64:40:63:01:
63:60:de:b5:75:cb:9d:ea:7e:d2:08:88:57:13:08:
12:b1:fe:52:0e:90:87:56:c7:8c:bf:ff:3a:9b:f7:
0d:66:3b:49:fb:d0:65:25:08:4a:8e:ad:85:22:c6:
d3:1f:eb:60:4a:15:df:77:c6:61:1e:9d:4e:f0:dc:
51:82:26:86:fc:28:01:74:99:39:b3:67:06:2d:17:
48:34:83:da:42:7a:08:c2:af:88:ac:7b:f1:0c:c8:
3c:3e:60:9b:25:36:8a:d6:d8:7e:2c:0b:44:2e:da:
d4:fd:9e:19:e8:53:b1:1d:a9:7b:eb:43:bd:21:5c:
df:96:7d:66:ef:f3:a2:64:8c:9a:e5:e0:53:5a:af:
dc:d7:4a:75:e0:2a:b3:24:d6:76:bc:82:a4:09:4a:
26:40:14:6a:b8:57:3e:8c:31:a8:60:c6:92:92:f4:
5a:9c:12:36:cb:f3:06:67:f2:1b:f3:8c:a7:87:55:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:D6:38:B6:0C:11:56:86:FB:6A:70:98:B8:EA:E2:C1:0E:4B:72
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:60:74:6a:af:59:e0:cc:0e:ee:0a:51:51:26:82:06:75:
07:7e:56:18:09:1a:52:19:df:4f:28:bc:8b:26:3f:b5:52:94:
dd:bc:d2:fc:00:56:2a:8a:a8:83:8f:45:bb:b9:b6:f2:7d:39:
6d:a0:41:4a:ee:79:a1:27:cf:6a:12:3b:b4:86:95:45:b8:54:
1d:40:1a:25:67:77:ae:92:b4:cb:87:17:b8:bc:55:b2:c5:ef:
48:5b:85:22:2a:7b:8f:5a:45:22:42:53:ca:29:a2:a6:0e:4c:
4d:67:15:0b:34:c4:8f:c3:87:23:ad:7c:3b:d6:fa:ce:d8:88:
fa:34:47:df:cd:79:64:a7:14:a4:51:c0:46:c6:9b:54:26:7c:
56:8a:6d:c0:5b:c2:19:0c:08:3b:39:2c:6d:6b:51:23:c0:cc:
b7:05:65:35:1f:1e:1d:29:1c:26:54:5d:32:38:b4:9a:01:6e:
e7:00:d9:09:aa:5e:98:6d:df:da:bb:13:8a:e4:03:62:41:48:
b5:66:7b:d6:05:55:89:80:e6:0c:f5:cf:5d:33:47:eb:9b:87:
5c:f2:84:56:09:c4:b2:dd:08:b1:92:87:fa:80:32:52:d7:cd:
06:4e:b1:97:57:01:72:6d:0e:ae:5a:94:84:33:92:61:1b:2e:
6a:a5:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:13 2024 by rpki-client on console-fra.rpki-client.org