Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: /6KeP4qTScxaS/3jeTij3RxHIc7v5z/efxyqpJNGMMA=
Subject key identifier: BE:88:8B:BE:12:A3:16:9B:81:2B:6A:59:D6:48:AF:49:28:EE:F2:D6
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 018F8635A40658FB3270E988A374A02E0E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 0B67
Signing time: Fri 17 May 2024 11:00:13 +0000
Manifest this update: Fri 17 May 2024 11:00:13 +0000
Manifest next update: Sat 18 May 2024 11:00:13 +0000
Files and hashes: 1: IlCQJx8xLMLhsCHR8kwr_OetMas.roa (hash: d502BYgC2bUAyRLygERY9qfFU2gMH3hPaCsQ507G/W0=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: sDPp1yNWh8k2RqG5p+EZqIxEM1x4w4973buWxIBqLWc=)
3: c6oLRU66wrhSElShcpzyrYmVC9s.roa (hash: bDum4vF00woux8f1xRWLlY0Rp9GNvV1NMSlcWnz16BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:35:a4:06:58:fb:32:70:e9:88:a3:74:a0:2e:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: May 17 11:00:13 2024 GMT
Not After : May 18 11:00:13 2024 GMT
Subject: CN=be888bbe12a3169b812b6a59d648af4928eef2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:ad:b7:b5:9c:e3:a9:c9:23:67:57:3d:45:
0b:67:80:0b:23:fd:e1:3e:f4:74:f1:34:e2:28:77:
a4:55:b8:32:09:ce:87:3e:18:b8:d5:98:35:b9:50:
25:88:bd:e8:0c:07:f1:1c:dc:ad:72:3d:74:26:b6:
ba:5a:b2:b4:cc:bd:65:30:59:5e:d0:7b:94:2f:10:
73:7b:ad:2a:06:b7:84:2a:9a:a0:2e:25:43:ba:50:
78:11:39:2f:7f:48:fa:bd:31:ae:64:eb:a3:f9:6d:
1a:92:6d:7b:f0:ad:64:c5:bc:a8:c8:e8:87:f3:b9:
b5:4e:10:ee:6f:dc:ea:68:4d:bf:d6:3c:a7:de:f5:
c5:b6:5b:c4:8b:46:bc:2f:97:3b:6f:d4:48:be:46:
0b:b1:03:7f:46:5d:52:47:10:6e:ce:d7:41:05:92:
48:ab:6a:e7:2c:26:95:1a:79:0a:f0:b7:f4:e9:37:
f2:78:c2:bd:e4:20:e2:c8:4c:b3:d6:d7:60:01:5a:
70:89:c7:9f:70:1e:8e:5b:79:24:de:c1:c7:44:6a:
2d:e0:a2:80:06:f7:44:2e:76:5a:5b:bb:61:ff:ae:
ba:b7:07:b6:b1:58:77:16:20:16:83:a7:8d:57:50:
f2:eb:c5:a4:8f:8a:60:5f:b1:62:e0:68:ca:7f:2d:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:88:8B:BE:12:A3:16:9B:81:2B:6A:59:D6:48:AF:49:28:EE:F2:D6
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:f7:e8:1a:8e:5e:13:f7:43:fa:39:d4:2f:8b:71:cb:93:
11:16:7c:74:95:a0:96:6e:a3:23:1f:12:5d:34:9b:af:1e:6d:
4b:07:e3:89:48:69:44:b5:79:28:dd:59:50:20:de:7c:14:4b:
4d:41:b3:5a:c5:6f:58:c1:59:c0:5b:37:e3:04:20:12:2a:89:
57:14:fb:91:ec:72:ab:f7:ec:31:7b:98:c6:4c:8e:35:dc:4d:
ab:52:04:06:df:61:f9:67:27:c4:e9:82:8f:ed:38:32:49:21:
61:71:d1:a4:cc:9e:be:14:d1:e6:39:c2:b7:74:ba:09:f3:7f:
8b:27:9e:e1:e5:40:df:1f:96:43:ad:21:a9:8c:f8:ef:f7:bb:
e1:85:8c:f1:02:8f:3e:ce:d1:5c:de:0b:be:b8:9e:d9:dd:59:
59:7a:39:f5:6d:bc:f0:87:e8:dc:21:37:4a:cd:9d:0e:e4:71:
d4:3a:36:a6:08:36:f8:b6:d3:1c:74:28:b1:9b:03:a2:7a:e7:
67:b4:95:ff:c7:ee:78:27:f9:9e:1a:a2:c9:87:96:9a:0a:04:
e9:72:9f:56:de:df:d1:29:6d:bd:a7:96:01:cb:3c:a7:2b:3b:
e3:15:02:30:22:8a:89:40:29:fc:cd:2e:96:2e:1a:c5:2e:79:
64:e5:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:24:11 2024 by rpki-client on console-fra.rpki-client.org