Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
File: NCsDiWx2aYKG-IGmukcqCLeWPKI.mft (raw, json)
Hash identifier: BgNGuZvyFm2osUsMUBNdo8I3QC4M96q7Yv26KsO+oD4=
Subject key identifier: DC:95:F9:9A:74:31:E6:68:96:2E:6E:EC:3B:07:78:D8:56:1B:FE:A9
Authority key identifier: 34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
Certificate issuer: /CN=342b03896c76698286f881a6ba472a08b7963ca2
Certificate serial: 018F87ECFDAD03A56AAB9DD2B68BBCBB0390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
Manifest number: 117B
Signing time: Fri 17 May 2024 19:00:06 +0000
Manifest this update: Fri 17 May 2024 19:00:06 +0000
Manifest next update: Sat 18 May 2024 19:00:06 +0000
Files and hashes: 1: NCsDiWx2aYKG-IGmukcqCLeWPKI.crl (hash: XtfRKnfYEEYiOzMq3uyIa9y76YnoI54p3jFJL7LyILo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ec:fd:ad:03:a5:6a:ab:9d:d2:b6:8b:bc:bb:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b03896c76698286f881a6ba472a08b7963ca2
Validity
Not Before: May 17 19:00:06 2024 GMT
Not After : May 18 19:00:06 2024 GMT
Subject: CN=dc95f99a7431e668962e6eec3b0778d8561bfea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:ed:59:ad:bc:19:56:70:ec:5d:fb:68:15:
fb:33:74:85:e1:47:7d:db:bc:c3:4b:6b:44:20:88:
e7:15:ca:f9:6a:41:8c:20:d0:c7:a1:3a:e1:cd:e5:
e8:ae:ca:a7:e9:ae:70:73:9e:ae:c2:55:c1:cc:2b:
8b:cf:a3:34:e9:31:8e:4c:9e:54:37:3e:99:c6:26:
47:73:24:d6:ce:4a:b2:01:79:62:75:68:65:96:bc:
9b:96:43:a1:2d:eb:7f:10:7c:b1:3b:7d:4c:72:1d:
32:6e:2f:76:3b:1f:77:5a:02:20:42:78:c0:a2:f1:
56:ee:9e:36:13:ed:d9:a8:f4:16:c7:6a:9a:8c:ad:
b0:49:ee:75:b1:46:5b:b6:14:e6:35:96:65:ce:86:
c9:e4:b5:3f:fd:ca:2a:fd:dc:ac:d6:5c:88:d9:80:
29:ee:83:ad:3e:6b:44:d1:7b:d7:fb:9a:ec:db:87:
4a:11:f1:34:31:de:fe:d2:05:f5:5c:ba:ff:3d:a0:
c5:4f:24:59:b8:8c:1f:3b:15:0a:c2:91:e4:25:70:
cf:7a:e6:e6:24:04:f3:d8:ff:3f:7f:d3:18:e1:95:
06:1d:ad:7e:ec:60:39:6b:39:63:33:63:62:75:48:
01:6e:ca:6c:d5:c5:3c:1f:e7:10:27:f9:27:b7:3a:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:F9:9A:74:31:E6:68:96:2E:6E:EC:3B:07:78:D8:56:1B:FE:A9
X509v3 Authority Key Identifier:
keyid:34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:b1:b5:c3:e7:80:c9:16:a5:a7:a7:c1:24:29:7d:70:d8:
99:ff:6f:0c:cd:ca:84:6a:bf:de:2b:ba:5c:1a:4b:9a:14:80:
7f:bc:3d:60:aa:b1:7d:31:14:d0:03:eb:e5:b4:b8:12:59:5a:
ac:52:80:47:2e:eb:25:fd:9c:80:57:20:60:4c:1b:3e:04:30:
84:b1:21:75:a3:a9:7d:4a:9f:1a:9f:67:a4:b5:39:39:03:58:
75:08:88:0d:37:58:44:9c:54:a1:90:29:f5:8a:73:78:d9:46:
6f:7d:bb:0a:a4:e9:cd:45:f5:26:05:0a:10:06:d8:2a:02:eb:
fd:1b:60:4c:5e:fb:39:bd:0d:43:6a:9f:c2:06:c6:03:de:5c:
e5:be:c9:d4:34:b0:0a:77:39:ea:d2:85:d2:b9:8a:1e:4f:42:
8c:0b:4d:50:15:14:2f:13:5a:eb:49:0c:f9:95:7b:6e:4b:80:
2b:6b:a2:2e:59:da:06:13:ab:f7:06:de:da:fa:00:a3:17:7a:
35:fc:86:85:87:fe:26:46:0f:d6:21:6b:d7:df:f2:0b:9e:fb:
02:e3:c7:42:c6:51:fe:2e:11:12:97:7c:56:fb:1d:3b:bc:99:
e9:49:d7:38:bb:1e:88:12:6d:9b:91:76:c3:63:16:f4:aa:5c:
93:5a:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:36 2024 by rpki-client on console-ams.rpki-client.org