Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: gd2n75Fhp2/PYC+/im49Exau5FU3NyuBrQ88kNC+AxQ=
Subject key identifier: 5E:67:58:FA:3B:F7:D7:02:F0:ED:DE:88:02:4F:03:3D:91:88:EC:46
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019352074EEA9E7A9E059FBEEAF8AB08EAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 65
Signing time: Fri 22 Nov 2024 04:00:30 +0000
Manifest this update: Fri 22 Nov 2024 04:00:30 +0000
Manifest next update: Sat 23 Nov 2024 04:00:30 +0000
Files and hashes: 1: 9VOfVF6r91-71eLLX1KhTatnveM.roa (hash: 1He4b7tlWXPfxqcJCvwEyYkYqwVuKUDDiDYCaeNvnjE=)
2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: siwHQ4uNpuFG+NRllveVJVBL/JpDoYarfzX25z1g/fk=)
3: kR85N8bsq---A9qrVIEQXnfNjjQ.roa (hash: UyQedTvQusRS2wUkMONd/B2uQlHMaGvPBpXIUEszMlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:4e:ea:9e:7a:9e:05:9f:be:ea:f8:ab:08:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Nov 22 04:00:30 2024 GMT
Not After : Nov 23 04:00:30 2024 GMT
Subject: CN=5e6758fa3bf7d702f0edde88024f033d9188ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:c4:8a:9f:88:ed:20:1d:d1:5d:fa:0f:9c:
c3:6a:09:30:9b:54:be:a6:69:5d:f1:88:94:75:6e:
ea:3f:cf:54:1d:14:28:9f:7d:b1:70:92:62:32:ff:
6c:2f:08:27:ce:d0:42:f4:6d:d8:2a:6d:65:b6:0d:
e0:bd:b0:31:01:b0:3e:3e:4f:15:a6:1d:2e:c0:ac:
50:ca:3b:fd:84:ac:99:48:38:d3:e2:78:f3:bc:39:
6b:df:33:46:85:df:c3:2f:89:8c:2a:87:55:5b:cd:
45:1c:be:1a:e1:96:54:a8:66:2c:f0:6a:e5:32:a8:
1f:d0:ed:6a:fb:6c:e1:cb:1e:5e:55:3f:54:75:fa:
8f:1c:15:44:a2:29:c6:fd:87:2f:2c:0a:7a:8d:77:
19:1c:b8:c6:8b:6f:bb:cc:31:25:4d:d6:a4:3b:f3:
51:64:84:e4:66:bd:90:cf:02:ac:cb:cc:e0:ea:39:
8f:4e:68:2e:6b:6b:9a:e6:1d:93:cd:1d:5b:35:a6:
b2:31:50:2e:c6:8b:d4:d8:94:0b:38:e4:4c:93:01:
ed:db:4a:d0:ac:16:6e:fb:d9:df:3b:52:6d:42:f6:
e9:3e:42:9f:b2:ca:7a:46:f9:f7:74:f6:c4:50:1c:
95:30:c6:16:26:dc:b0:f5:2b:f4:2a:eb:2d:eb:fa:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:67:58:FA:3B:F7:D7:02:F0:ED:DE:88:02:4F:03:3D:91:88:EC:46
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:93:f5:b3:2c:80:96:a6:5a:81:f7:79:a5:b9:50:67:84:cf:
59:0a:19:ba:d3:77:d5:e5:ea:eb:c8:38:6f:ae:11:62:82:07:
10:7e:ca:35:9e:46:83:c0:d3:b8:31:d0:6a:9d:e8:60:d5:3f:
78:bd:80:ce:a8:a9:7a:7a:12:49:0d:76:db:36:b0:6c:32:09:
51:31:9b:ee:6d:ee:a9:9a:6d:06:1b:18:85:fa:50:0d:9e:04:
3c:6e:2a:61:b8:6e:b9:86:85:7f:7e:e0:21:02:4e:20:71:54:
b5:ba:6a:9f:96:55:45:2d:77:b4:c5:39:36:cd:fa:08:72:db:
b9:08:50:ec:9d:bf:95:e8:9b:fc:36:80:6a:bc:18:86:e2:0a:
82:3e:58:bf:bb:28:90:b2:67:56:91:23:64:2c:de:f0:f3:f4:
54:5e:5f:54:b7:d4:9d:95:d9:d3:2f:ef:99:e5:52:12:1f:43:
0b:3c:b0:46:eb:2f:99:59:e4:f7:f6:26:37:45:4e:ff:22:22:
53:d1:d4:7f:1e:b7:f0:8b:0f:37:4a:75:ad:ea:5b:2a:92:0b:
8a:36:e1:0c:7c:f8:bf:f8:84:69:22:3a:6a:72:bb:b3:68:e4:
e1:94:10:57:6d:8f:f6:50:f7:f9:b6:25:39:bb:7e:96:5d:1d:
fb:fd:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:28 2024 by rpki-client on console-ams.rpki-client.org