Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: uz7wTogl9WI7ZNN+WQ9JOJo4PX540Vly26OtChO8U8k=
Subject key identifier: 60:13:F3:C0:C7:4D:6F:1F:CB:A0:68:99:15:7B:42:5B:66:11:D0:3B
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019352ACCA533E88FD65392853C5A9A5B401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0688
Signing time: Fri 22 Nov 2024 07:01:15 +0000
Manifest this update: Fri 22 Nov 2024 07:01:15 +0000
Manifest next update: Sat 23 Nov 2024 07:01:15 +0000
Files and hashes: 1: 189SBiDiQmkkYB7PsaGish2aMXg.roa (hash: 6nM83JyY4NVKOGXZhs88d0F8UgPrOopxyc6NSok6zA0=)
2: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: FFsNNU5N7XE2Z3YCyFrNVH/cs+f8ROre1j2L3JGOUIs=)
3: qvGLp0H_EijjouOgk-b1feUfccA.roa (hash: qc5VuGVAcEkYd8huv58Weu0+ginrtq6C5VpR6nghSq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:ca:53:3e:88:fd:65:39:28:53:c5:a9:a5:b4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Nov 22 07:01:15 2024 GMT
Not After : Nov 23 07:01:15 2024 GMT
Subject: CN=6013f3c0c74d6f1fcba06899157b425b6611d03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:56:09:cf:c5:7c:63:2b:10:91:a0:dc:36:
14:d5:76:32:45:e1:b5:c7:fd:99:cc:e5:7c:6a:9b:
3e:dc:3f:dd:9c:c4:0c:14:b2:89:62:c1:5f:61:bc:
20:51:05:86:c1:ec:66:be:33:05:75:16:0f:a3:65:
39:29:7d:9c:7d:8c:dd:9f:4d:80:53:4e:08:50:26:
d7:1a:b1:61:62:d5:a9:da:1e:e4:eb:58:88:cb:a7:
5a:14:58:f9:26:dd:db:f6:87:8d:15:b6:82:df:39:
22:6e:14:60:94:10:85:b4:4a:12:87:9a:2c:7c:3f:
51:59:0e:e3:60:91:a6:ac:8c:17:ff:16:8c:68:7d:
97:4c:68:9b:02:0d:41:57:86:6f:31:8b:4f:85:c0:
f0:c1:69:07:8a:7f:a2:a1:74:5f:11:c0:e8:84:7c:
6e:4d:2e:58:61:30:f1:90:c6:bb:fc:d7:ac:33:9f:
45:6e:b3:d1:d9:04:e2:09:73:cf:bb:76:13:fb:20:
46:36:9b:fd:4a:aa:32:c0:78:8b:df:88:c3:0d:e3:
3d:37:17:8b:df:1d:33:c9:2e:04:d9:69:49:2a:dc:
ac:f3:4e:a5:d6:f0:fd:c4:a2:ea:2e:a7:8e:9c:49:
76:bb:d9:76:72:b2:72:be:0a:5f:1a:d8:b6:4d:01:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:F3:C0:C7:4D:6F:1F:CB:A0:68:99:15:7B:42:5B:66:11:D0:3B
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:20:4c:87:d4:0d:87:0a:c9:8e:2b:bf:1f:15:99:ef:74:ab:
a0:52:92:34:46:e4:4b:26:2e:d6:71:11:93:17:44:d1:b0:65:
c2:c8:c5:7e:1e:5a:76:2a:ba:ee:20:fb:be:9d:89:3f:78:30:
ce:e3:26:c7:b4:50:ed:58:d5:98:68:c7:ae:a1:85:e3:9c:f4:
1d:dd:8b:8d:58:ed:45:4c:19:96:31:e0:2c:a5:2f:38:d6:40:
08:2f:0b:33:c2:70:e4:05:46:99:fd:e1:77:b6:07:5e:26:48:
f1:77:dc:1d:37:fa:c8:65:67:86:33:48:23:bd:25:fa:7f:93:
6d:33:e7:8a:d3:bb:06:80:d0:3d:bd:ee:09:68:95:21:61:c0:
b9:a3:48:ac:96:d3:2b:e1:cc:88:76:7b:d2:74:6b:72:80:11:
40:c1:5f:0a:48:80:4e:20:7c:cd:61:37:8d:9a:6f:ad:e6:0c:
a9:56:c8:38:66:79:7a:b1:fe:7d:c9:20:10:4b:5d:b4:24:9a:
4a:27:7e:38:f8:57:45:2b:74:2f:9b:27:4a:ec:fd:15:32:7e:
f3:85:fa:77:24:3f:30:89:65:e2:83:58:7d:6e:c4:06:52:29:
0b:d6:54:81:93:b1:81:4c:b7:5e:87:48:d5:f8:ef:ad:45:85:
5f:3d:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:41 2024 by rpki-client on console-ams.rpki-client.org