Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: yZSMDwW4k5iqp3EFNfRBhT2AkOO5bHwa2tFyjs3FhEs=
Subject key identifier: C2:0D:A6:0C:77:AC:DE:C0:00:F3:58:0F:B5:1E:9C:C6:75:32:49:0D
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 018F874AC3C4D9D160C317EBF4A8DA485669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 1135
Signing time: Fri 17 May 2024 16:02:54 +0000
Manifest this update: Fri 17 May 2024 16:02:54 +0000
Manifest next update: Sat 18 May 2024 16:02:54 +0000
Files and hashes: 1: 631WVgRjqRecc6oXZgnjMKWbXtU.roa (hash: 3Q3Lwe6JZqce30GfOm3kMCiGg5YOFN2K8pBpLtm92M8=)
2: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: XBOMiVO4StC7tmVC2JNxebsqhy4W9uHtnE3q5ZGFuY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:c3:c4:d9:d1:60:c3:17:eb:f4:a8:da:48:56:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: May 17 16:02:54 2024 GMT
Not After : May 18 16:02:54 2024 GMT
Subject: CN=c20da60c77acdec000f3580fb51e9cc67532490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:2b:22:46:56:56:80:90:64:a0:2a:2f:5a:
29:df:6a:51:8a:03:75:69:9a:81:75:31:43:ec:71:
4f:a7:40:e9:d2:76:a3:5a:f9:d2:b9:34:0a:c9:e1:
bd:d4:9d:fc:20:89:00:98:a9:48:4c:a1:22:2d:b8:
98:07:24:21:08:7d:d1:25:1f:05:d5:a3:7e:dd:50:
65:dc:81:16:83:e8:2f:17:06:ce:f7:34:d2:2e:1b:
52:e3:46:97:28:d5:f5:5c:3c:55:97:05:22:53:6c:
86:4d:ee:8d:91:b9:d4:b3:45:f3:53:6a:3f:9b:05:
ee:6a:be:79:14:12:d3:a5:cb:e8:71:c7:52:69:da:
e8:de:31:9d:94:ec:49:e1:eb:42:74:39:af:a7:0d:
cd:78:39:03:77:7e:9c:eb:e9:a7:79:a5:96:01:4a:
13:61:52:6a:4e:a0:b7:7b:18:15:42:b1:18:88:26:
9e:7e:d2:38:b6:50:14:3d:ff:f9:34:0e:58:c3:5e:
55:3d:09:64:f5:2e:e3:3a:f3:45:4e:7c:03:e3:bf:
cc:73:73:98:4f:ff:45:8c:81:79:b4:79:38:d7:3e:
c2:d7:e6:53:dc:79:93:0b:67:9b:ec:60:e7:4b:81:
de:fd:e1:aa:d0:cb:10:b3:e3:41:d7:90:87:36:c4:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:A6:0C:77:AC:DE:C0:00:F3:58:0F:B5:1E:9C:C6:75:32:49:0D
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:53:35:c7:50:14:d2:5f:e4:d1:14:5b:b9:62:68:06:43:
e3:bd:57:ae:8e:e8:95:6e:c6:3e:d1:19:d0:f1:42:44:97:75:
39:46:4c:a6:f3:e0:49:15:2d:80:15:4a:3f:e0:82:bb:36:dd:
31:2b:34:f0:be:6f:06:b3:33:4b:b4:bb:55:61:15:f2:2e:f6:
a2:07:28:af:35:41:6f:6c:50:9a:9a:75:db:e7:3e:27:a2:8d:
8f:fa:11:6e:2d:dc:90:74:e6:0e:66:bf:50:ac:6a:e8:95:5b:
e3:55:b7:4e:90:5c:c6:24:76:b0:d4:b5:f8:4f:7c:3b:a1:b9:
c2:5f:f1:58:2f:da:51:57:ed:37:69:68:b3:28:3b:c5:32:e3:
cd:1f:68:23:25:26:fd:53:d0:09:52:1d:2e:90:cf:00:b2:85:
df:c3:df:7f:28:8d:d4:cb:a9:4a:0a:45:1d:98:32:3a:10:a1:
34:e7:3a:1f:17:45:b3:9f:af:54:b1:95:4b:5e:82:72:27:e8:
54:fd:f4:0f:ef:48:30:ce:ac:25:25:81:5a:ae:54:f6:e3:ed:
cc:77:65:44:f6:2b:c5:46:d1:52:ed:91:23:f6:4f:80:9b:2f:
fd:6c:c0:fa:bb:7f:a1:ba:37:48:1e:34:c3:79:3a:42:85:ab:
c6:94:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:57 2024 by rpki-client on console-ams.rpki-client.org