Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: CAPKLLBvcf3eK5wL7sfCNaHwcTHqZGmwyaQBKNoiJ4A=
Subject key identifier: A6:A0:A0:D2:0F:A8:74:A6:AB:EB:63:87:39:24:B4:21:0A:1F:80:CE
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 018F87ED5FA8A5F02AE90AFE6643825A5A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 19:00:31 +0000
Manifest this update: Fri 17 May 2024 19:00:31 +0000
Manifest next update: Sat 18 May 2024 19:00:31 +0000
Files and hashes: 1: _VUrgi2mg7-B4orR7Pp-1iaiYVU.roa (hash: 3MzHbmN70/h8m5Pz9NSTB9k3qkY6uX3owDEsKzs/axw=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: 03rXSp83JfSZtXjhRHt4l+dqPhLu3oRpSHCJotS3hkA=)
3: ysGJf38CAuZNmWzIZqKuX9O9VLo.roa (hash: 1F+shxEKJtN4kkRHj44PFAqnFK+Pe49heoNAMEQ49Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:5f:a8:a5:f0:2a:e9:0a:fe:66:43:82:5a:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: May 17 19:00:31 2024 GMT
Not After : May 18 19:00:31 2024 GMT
Subject: CN=a6a0a0d20fa874a6abeb63873924b4210a1f80ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:4a:4e:94:30:eb:28:00:9d:73:ce:68:9c:
1c:4a:10:6e:4b:b4:95:a5:6e:68:4b:ff:02:e1:25:
d9:2a:48:01:4a:e4:18:f5:b7:d9:48:b2:df:f0:5c:
bd:f7:7c:7b:7d:ed:d5:65:5c:85:ba:3c:84:d1:d5:
ed:f8:15:e0:03:e2:16:36:73:08:e5:72:d3:c7:4d:
6e:0a:a0:1f:2c:a2:a2:16:1a:7e:42:02:5f:1f:a6:
99:f3:5b:c4:08:39:00:d7:d3:2c:bb:27:a6:cf:1a:
e7:2b:15:8b:24:34:de:c0:21:4b:9a:c4:e0:64:d0:
56:2a:3c:c5:37:da:a4:a2:65:c5:10:ba:42:b3:ed:
1c:3f:9e:a4:32:3e:94:14:20:18:30:23:9f:12:72:
13:45:fc:11:94:20:f1:82:17:70:4f:c4:16:8d:d1:
b4:e0:58:b2:7d:4a:47:a6:8f:70:cc:aa:0a:4f:ab:
f7:e5:4b:d4:b3:76:e7:df:00:ff:10:61:6b:c1:c6:
16:3e:d3:4a:33:88:84:9c:19:a7:e0:52:e5:64:93:
18:3c:93:e1:2f:30:cc:05:36:10:ca:6b:14:4d:b0:
04:ec:eb:0e:a8:a8:5f:68:6e:d7:61:64:3d:44:43:
3b:83:6d:ad:c8:d0:ab:fb:7c:f9:00:b9:48:00:c8:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:A0:D2:0F:A8:74:A6:AB:EB:63:87:39:24:B4:21:0A:1F:80:CE
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d8:28:5c:75:27:fa:aa:2f:32:d4:f4:5b:71:bd:db:9e:73:
99:b2:c0:b7:8e:51:4f:34:f8:e9:ff:c9:7d:36:75:c2:db:c2:
59:b1:f7:16:82:df:eb:04:59:28:9b:0b:fd:8d:05:d0:8a:4b:
b9:a7:e8:d2:ea:de:8d:f2:1f:ba:a6:90:b2:28:7c:42:d8:67:
36:d9:08:d2:a8:cd:ca:49:18:bd:43:db:a0:46:4d:b6:85:50:
1a:36:16:b4:85:34:cf:5b:f1:68:a5:70:ee:94:fc:4a:0e:76:
b2:1e:e1:f0:aa:74:82:d0:df:9d:e6:ad:9b:61:37:8d:e8:34:
5f:59:ff:cc:09:6d:26:f6:5d:ad:26:2d:25:de:00:1c:b3:4d:
b0:73:3a:39:b0:52:75:56:2a:b7:74:8e:19:fa:7d:39:db:c6:
49:be:b0:a0:05:0f:33:ae:2a:98:9e:ee:c7:7b:6c:2e:75:9b:
c3:3e:b3:8d:aa:6d:dc:93:30:60:3d:9e:bb:58:b6:08:be:b3:
ef:00:6a:68:8a:20:97:cb:29:ee:1c:11:ad:ca:87:4b:80:c0:
e3:8e:a4:d9:58:ef:cb:ba:db:bf:d5:4c:28:c8:3a:f1:c6:fd:
9b:78:86:88:b5:16:62:94:c8:a4:f6:67:da:44:42:6a:b8:06:
ed:52:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:56 2024 by rpki-client on console-fra.rpki-client.org