Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
File: nZYG7e75CJWc5DNqs5XKkIMxYQg.mft (raw, json)
Hash identifier: y2B1gsrhskv5FlY5emIC85ve+DrVO3+5nKJOkg9+/is=
Subject key identifier: A3:06:15:72:75:FA:28:5B:BD:BA:CD:72:F5:8F:BC:83:6B:6D:22:F3
Authority key identifier: 9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08
Certificate issuer: /CN=9d9606edeef908959ce4336ab395ca9083316108
Certificate serial: 0193549AA82976A7F0E4CEF44B577F8DFBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
Manifest number: 0B56
Signing time: Fri 22 Nov 2024 16:00:41 +0000
Manifest this update: Fri 22 Nov 2024 16:00:41 +0000
Manifest next update: Sat 23 Nov 2024 16:00:41 +0000
Files and hashes: 1: SYyp1vjl1UswcMC-82zPJUhJgrI.roa (hash: 170JhmyG6oOYBtfQQhNpu594gEQZ9mAJ9lPD1R4IRMU=)
2: nZYG7e75CJWc5DNqs5XKkIMxYQg.crl (hash: rrrFkaToAa0fykIjs7MUqC4K6pvnEub1x/auxrgosIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:a8:29:76:a7:f0:e4:ce:f4:4b:57:7f:8d:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9606edeef908959ce4336ab395ca9083316108
Validity
Not Before: Nov 22 16:00:41 2024 GMT
Not After : Nov 23 16:00:41 2024 GMT
Subject: CN=a306157275fa285bbdbacd72f58fbc836b6d22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:a4:11:77:43:f8:bb:12:f1:60:63:80:b2:
f2:6d:ee:b6:1f:e0:80:6c:b6:94:df:d4:f9:ab:34:
60:db:9e:88:4b:3b:23:9a:87:0f:55:f8:10:2b:d5:
e6:3b:a7:50:28:22:6c:51:9e:b9:09:6f:65:72:78:
04:be:62:8f:1e:37:71:76:a1:67:38:2e:a3:77:e9:
3e:13:65:b2:ba:ec:95:2f:bc:f4:b1:bd:9f:68:10:
8f:d5:f8:05:5a:db:d4:b5:05:80:55:c6:de:57:72:
4d:6b:a8:b3:7b:1d:d2:7e:84:fc:ec:af:1d:04:4f:
cf:4b:99:f4:69:78:7d:7a:44:96:24:de:c9:ac:98:
aa:40:2c:72:ed:2f:4c:0d:21:da:ea:b5:53:9e:44:
3a:05:51:b8:0e:ec:0b:a9:3b:18:61:bc:3b:bc:2c:
ea:fe:ac:9e:0e:e3:7d:4b:63:7d:13:47:3b:2f:a4:
df:58:89:7a:c6:7b:6b:5b:06:26:00:9e:f1:03:48:
95:12:47:61:ac:db:cc:d5:c6:36:0f:ee:21:1c:a1:
98:f5:02:ec:9d:6d:5f:ed:64:ff:9a:8f:13:ec:30:
6e:16:40:25:67:b8:93:56:08:ba:2a:f1:0d:d9:e0:
d1:59:40:07:43:72:3a:e3:57:9e:e3:95:bf:c0:19:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:15:72:75:FA:28:5B:BD:BA:CD:72:F5:8F:BC:83:6B:6D:22:F3
X509v3 Authority Key Identifier:
keyid:9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:75:d3:99:fa:68:65:fc:14:63:26:fa:6f:22:35:a3:20:a7:
54:71:08:68:7f:56:4e:d2:36:55:aa:02:27:74:50:99:81:ed:
54:d4:17:b3:8b:aa:5d:6c:91:e5:8b:3a:d5:92:1e:2d:56:3d:
5a:32:ba:31:2f:ca:b4:40:09:f7:c1:99:9b:d8:51:7e:52:9c:
8a:db:6b:f5:29:f2:d1:1a:08:c3:5d:98:d6:4a:d5:a1:e0:7a:
36:eb:1e:ec:b2:ce:9e:0c:d4:84:c8:b8:18:a4:76:de:5b:4a:
ff:33:54:29:2f:35:ac:75:2a:f9:c3:96:34:c2:97:75:e1:2f:
bf:7a:41:39:c9:87:f5:3d:53:01:4f:b4:3d:be:8e:43:6c:88:
62:8c:a8:e5:08:b1:ea:5b:ad:ce:b3:2d:17:4b:2b:23:d4:ea:
08:bf:4f:8e:c0:4e:4b:dc:5e:a6:c6:81:de:79:37:cf:9c:25:
d7:fb:6e:8f:8e:90:19:46:d5:1c:4a:31:4b:e4:5a:70:8d:58:
95:b0:eb:b6:3f:85:ec:b9:4b:e2:61:69:93:ed:85:47:ef:60:
5d:b7:73:6d:b2:ab:1c:c8:a4:29:9a:16:24:eb:6d:c6:b3:9e:
79:7e:59:d6:fc:93:d8:98:32:6e:bc:8c:2c:56:46:38:61:ed:
2d:dc:35:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:34 2024 by rpki-client on console-ams.rpki-client.org