Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: f/NTSGgTP21yOJlSiKFWoSksJMUf4x7oBC2n/W9GNLk=
Subject key identifier: D5:1B:07:3E:E0:0C:4D:27:4C:30:2E:BF:78:12:1B:28:D8:3B:A2:AE
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0193579B60212C7C8D491386C28B57FE7C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 06:00:20 +0000
Manifest this update: Sat 23 Nov 2024 06:00:20 +0000
Manifest next update: Sun 24 Nov 2024 06:00:20 +0000
Files and hashes: 1: EwjziXtCCMyrAmm8K139bbhZSMw.roa (hash: bEgbZuMe3aOeCT7aM3ukDiH99wVzL5HWrum+CPY0bxA=)
2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: ZjTzBHUu7mUpP8imh4Vro+kfl7h3GLm9OELKOWU7IhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:60:21:2c:7c:8d:49:13:86:c2:8b:57:fe:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Nov 23 06:00:20 2024 GMT
Not After : Nov 24 06:00:20 2024 GMT
Subject: CN=d51b073ee00c4d274c302ebf78121b28d83ba2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:11:58:e4:35:a0:4f:57:1b:45:2b:d7:55:
24:83:42:1d:cb:9e:71:f0:9b:5f:ba:0d:d2:c0:43:
71:88:8f:ff:0b:0b:7c:7e:22:78:d7:88:6d:bf:e2:
04:f0:5e:7b:be:96:f9:c1:84:25:b0:09:5a:32:43:
a6:b7:a0:ff:0c:23:d3:5d:80:38:7d:3a:b4:e7:e9:
b4:c5:8b:e5:c2:6b:7f:09:f1:66:70:bd:46:56:16:
36:2e:12:3e:d9:22:2d:d9:bc:f0:d5:ea:05:f5:06:
2e:3d:18:25:ec:d8:60:54:d9:2b:8e:8a:c4:cb:67:
b3:6e:8d:96:38:f5:42:52:e3:87:19:e3:80:54:1b:
d9:4c:d8:14:9b:73:da:15:f8:5c:74:18:b9:2b:f7:
70:c5:f7:09:79:82:7a:82:88:74:49:54:d4:0f:5b:
bf:f5:1c:d9:71:40:54:0c:18:dd:7a:03:75:3d:27:
62:0f:ea:8a:f8:c5:f7:26:cc:c1:32:4b:53:af:c3:
4c:19:d8:17:b3:ad:1e:1a:1e:a4:dc:b8:78:52:c3:
42:a7:99:41:1c:15:cb:c7:37:6e:a1:63:69:fd:bb:
52:a9:5a:3f:46:62:f4:8f:38:fa:44:5d:d6:fd:56:
ee:f3:92:29:19:e9:c7:bc:30:b8:aa:47:69:6a:16:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:07:3E:E0:0C:4D:27:4C:30:2E:BF:78:12:1B:28:D8:3B:A2:AE
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:2b:92:f1:e9:de:49:74:5b:ac:f2:74:e9:da:24:35:b6:
4c:a4:dd:42:2f:46:27:50:31:21:c2:a9:91:7d:86:45:38:35:
a9:62:bf:8d:49:25:fa:b8:a8:0f:9d:44:3a:51:f0:9a:76:99:
03:f1:72:d2:fb:56:21:ca:64:79:46:f7:75:31:a5:0b:fd:fd:
e7:b4:b3:0f:96:c8:26:24:43:42:7c:da:47:ce:87:a4:9b:88:
af:2c:17:b0:6d:be:8c:55:e9:ce:d0:2a:31:68:e8:eb:40:d9:
d1:53:de:35:22:f4:41:fd:5d:50:c8:54:69:0b:01:a5:1f:2c:
35:95:20:1b:b1:c1:dd:8c:e7:30:78:e6:2b:f4:b2:8d:7d:aa:
5c:0e:b6:33:ed:82:f0:e4:ac:06:c4:b6:aa:76:bf:e9:45:16:
92:8c:df:0b:7f:95:a8:17:35:15:05:df:c3:e7:da:6f:4b:2e:
bc:8f:14:2d:53:2e:51:70:ef:d3:05:15:82:02:03:ec:a2:be:
2f:c6:29:7f:40:09:b9:81:c6:d7:77:1d:f3:89:4f:72:12:61:
28:09:b4:22:e0:84:27:f8:02:67:d5:a1:c9:2e:9d:73:c1:a8:
98:b0:ff:05:3f:9a:d2:76:39:b0:6b:2f:01:32:a1:ea:a6:64:
b5:4a:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:00 2024 by rpki-client on console-ams.rpki-client.org