Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: NADCq/PbQL0Wz/0eqCfCPXn/kgYzb5XDlkAUmfyA0B0=
Subject key identifier: 6D:40:2D:AE:9B:15:35:38:4D:DE:37:14:04:C1:E9:96:82:71:AF:28
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 0193553F36BC76298AE31C8184D663783EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 12FF
Signing time: Fri 22 Nov 2024 19:00:25 +0000
Manifest this update: Fri 22 Nov 2024 19:00:25 +0000
Manifest next update: Sat 23 Nov 2024 19:00:25 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: NXe/zDtysWkFruPCjdrYtRqMSKHMADmNBTVpQ/cmnhE=)
2: k8xjJo9zY4NR-rLPtlfj-SWeyjk.roa (hash: tBZUKti2YzPVqm+G3eO0LRmISdtpLK81zs2VnKHEgYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:36:bc:76:29:8a:e3:1c:81:84:d6:63:78:3e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Nov 22 19:00:25 2024 GMT
Not After : Nov 23 19:00:25 2024 GMT
Subject: CN=6d402dae9b1535384dde371404c1e9968271af28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:5e:3b:3c:60:f1:60:6f:e4:c1:5e:8e:da:
f1:6a:6b:3a:dd:03:cf:5f:91:32:a2:44:ff:b9:26:
b5:6e:ec:36:eb:14:76:1f:45:91:0f:6b:fd:c0:24:
b4:2b:bb:b8:1c:01:ad:c2:10:0b:8f:8e:69:92:c6:
23:30:9f:ea:ae:1c:18:84:09:54:4a:b9:5d:eb:2f:
13:3b:2a:8a:b6:3c:02:74:17:d2:bb:9a:eb:76:78:
c4:1d:78:57:ad:a2:2a:16:a8:6f:75:e2:76:d2:e9:
6c:9b:0f:1b:47:49:97:17:71:89:5d:21:e2:30:e0:
6a:7d:08:ba:f3:08:e7:21:bd:9f:24:e2:5d:44:8d:
da:f6:2e:36:26:77:87:77:19:5b:f2:3a:c4:d7:a6:
e9:42:1c:86:e2:0a:e3:c4:9e:0a:3e:e2:11:99:53:
9b:e4:92:00:40:c8:ac:ea:f8:a6:b4:aa:62:35:d0:
6a:3b:97:84:3a:bb:ae:9b:11:e6:56:b6:12:02:c8:
65:0d:37:58:29:31:d1:7c:5c:54:8b:30:b5:6e:ab:
d4:4e:30:96:6d:c6:9f:02:ef:e5:dd:a6:cc:90:8b:
75:87:b7:e2:be:6b:44:29:16:af:f8:1f:95:c3:f0:
90:52:6c:7d:b9:7f:99:19:31:6d:fe:34:24:7b:9d:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:2D:AE:9B:15:35:38:4D:DE:37:14:04:C1:E9:96:82:71:AF:28
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d1:df:52:95:99:65:26:20:b9:b5:1e:e3:dd:48:59:a0:c3:
18:08:b5:9f:9f:76:38:77:e9:12:58:2e:3c:8d:f9:e5:a2:60:
83:9a:81:47:4a:dd:a1:ba:e3:8f:7c:93:c6:d6:b1:e9:d4:e7:
b5:80:36:26:26:f2:c2:07:8a:e1:8d:09:b4:d3:fc:36:97:e1:
df:f2:8b:31:fc:d3:a5:6a:a6:34:ab:55:0a:a7:bd:68:19:99:
58:21:12:8f:7a:23:da:92:fa:e3:05:a7:38:85:74:d1:f3:bf:
e8:82:ed:86:a0:8a:a5:c5:80:81:55:5a:ff:14:53:f9:77:bb:
0a:0b:09:4d:35:cd:23:ec:0e:9d:65:c6:65:4f:c0:e5:7c:8b:
0f:a6:63:65:c1:6d:2f:25:05:6f:5f:03:5c:43:c2:db:9f:3c:
c4:38:d6:d5:55:52:63:d6:87:0a:5c:d5:17:36:06:20:8f:cf:
f8:0d:5d:fd:0c:51:27:ea:9f:85:16:dd:4a:d6:d5:5c:b0:a8:
8f:bf:12:88:ce:80:eb:af:7d:7a:8b:88:e4:f2:c9:1b:cf:68:
62:7a:1d:b4:fe:53:da:3c:a9:c3:4d:47:f9:f2:e1:33:41:4a:
96:50:84:20:ef:45:68:69:c3:81:dd:36:6f:35:65:55:e5:9c:
48:ea:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:29 2024 by rpki-client on console-fra.rpki-client.org