Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File: NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier: Wsknd1sX+eqQYDxnWlQ7CRq7nm9PxvZe10tjAca5jL4=
Subject key identifier: DF:88:F5:D9:91:AA:98:DC:89:68:66:56:CC:F9:BD:16:A6:05:A5:F2
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 0193568A51E6B07BE7A7A9D332C5131C4931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:05 +0000
Manifest this update: Sat 23 Nov 2024 01:02:05 +0000
Manifest next update: Sun 24 Nov 2024 01:02:05 +0000
Files and hashes: 1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: Wd8EiqWcY5LmzjD0WzEtvY8RgYR9MppId+kNFv1OkJM=)
2: o3USWl_OTMKphTL100-n_XkJtng.roa (hash: X2tCt6BLLBKEdfqwW2iDdOKOvebGR05SSQw5dHadaNg=)
3: ygyAFqRFMyqVLCmNVs-rCG22LNc.roa (hash: 2beML5PrK1TWh2+DfxGOU2mAfLj8dYcPgpf842lMFyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:51:e6:b0:7b:e7:a7:a9:d3:32:c5:13:1c:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Nov 23 01:02:05 2024 GMT
Not After : Nov 24 01:02:05 2024 GMT
Subject: CN=df88f5d991aa98dc89686656ccf9bd16a605a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:d9:ed:7b:eb:50:6f:22:a0:5f:ad:54:92:
00:70:c3:83:8a:b2:ca:1a:c4:4c:6e:a7:b2:23:34:
85:10:61:3c:c0:f2:8a:3a:46:19:e6:40:99:c1:67:
e0:70:22:e3:d7:72:ea:c2:ca:f8:11:07:29:c3:e9:
2f:b8:cd:74:59:c4:dc:fc:46:50:13:04:0b:83:97:
1e:20:8c:78:a0:6c:0f:f2:37:44:0a:8b:58:6d:2e:
2e:55:c7:f2:a2:ad:53:0a:cf:c0:fe:f5:3d:da:78:
14:85:44:97:2a:34:42:e9:36:95:85:9e:23:94:12:
f5:fa:9d:7a:90:9e:fa:1b:2c:21:12:8f:31:39:7f:
69:c9:10:48:17:15:9a:48:5f:63:5d:c0:d1:90:46:
90:1b:b2:3c:8e:d1:46:f9:01:63:0e:88:61:94:3b:
f0:44:67:79:ce:a5:3f:21:5c:36:72:a0:1f:75:43:
36:e3:87:f0:a1:a9:18:9f:16:a7:50:c7:78:21:96:
e1:4a:76:fa:4d:01:e3:41:f6:31:38:10:e5:03:d1:
80:1a:89:9f:df:f8:92:b4:66:b5:41:7a:86:63:92:
a5:78:1b:92:21:e8:9f:15:7e:cd:97:83:fe:35:60:
9f:e6:ac:5b:37:d8:c2:ed:1d:0c:72:a7:81:9a:4a:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:F5:D9:91:AA:98:DC:89:68:66:56:CC:F9:BD:16:A6:05:A5:F2
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4d:56:07:c0:b0:0a:10:a1:c9:7c:1f:ef:a8:95:e5:19:22:
9a:08:9f:9b:3b:27:c1:c3:fe:c5:34:80:16:72:02:87:e3:68:
1f:15:98:34:d7:b5:47:f7:48:99:4c:7e:aa:bd:06:1b:3c:fe:
55:4c:72:2f:e5:4b:be:15:0f:44:ec:64:16:27:a5:68:e9:6f:
78:e3:bc:a7:ec:32:56:5e:cf:36:8f:55:70:f4:05:11:6d:13:
57:d5:ea:72:d8:45:36:b5:52:05:b7:6a:fb:be:f4:13:f0:e5:
74:66:78:77:bc:92:6c:25:f0:78:ab:71:9d:0d:ba:97:e1:a9:
c4:41:63:93:ae:47:7e:81:11:9e:e9:ea:cd:68:45:6a:ec:54:
95:7c:c9:70:0a:51:31:d5:06:19:26:39:08:ef:6f:12:2a:4b:
19:67:a5:cb:2b:fc:1c:1f:89:d4:cc:3a:fc:7c:4b:f4:f1:c1:
9f:65:34:8f:4b:bf:85:35:7e:e5:6d:b6:3d:69:78:12:ad:49:
14:c5:aa:86:cb:11:05:21:f6:48:0d:57:91:ab:f0:2f:47:e1:
40:95:1b:61:f7:ed:9a:d5:ce:b3:a0:3e:a5:04:da:22:5d:e4:
54:21:fc:3d:50:5a:19:40:8b:4e:a3:b9:ee:77:d5:48:0a:2f:
5e:f7:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:50 2024 by rpki-client on console-ams.rpki-client.org