Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: BNytkgoFOnCFezVNH9MrY4Ee1P4wHk1jixCJ+lTGIMY=
Subject key identifier: 5C:05:C7:03:FC:BA:87:39:C2:54:45:DF:76:E4:E5:07:8D:23:FE:4F
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019355080F9FBD1900C09522CC120206E59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1304
Signing time: Fri 22 Nov 2024 18:00:11 +0000
Manifest this update: Fri 22 Nov 2024 18:00:11 +0000
Manifest next update: Sat 23 Nov 2024 18:00:11 +0000
Files and hashes: 1: IiLauL0ZABJIfJsW0ysDF1yPkSk.roa (hash: 2dSS9LHJRv79sSaSs3OG0Q18ftFux3F7aHcbWrtUM24=)
2: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: LaltxXCuUQ4S6tnkcLhJH4mS1dp5NTbgAmaKn3vcKms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:0f:9f:bd:19:00:c0:95:22:cc:12:02:06:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Nov 22 18:00:11 2024 GMT
Not After : Nov 23 18:00:11 2024 GMT
Subject: CN=5c05c703fcba8739c25445df76e4e5078d23fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:ca:7d:60:c6:a1:b1:c4:da:1a:dc:be:e8:
06:ba:ea:62:f8:71:86:da:93:e9:5e:0d:e9:7a:fa:
9a:ac:f7:01:81:c0:f2:c2:40:1f:4e:67:ba:0b:a3:
ed:25:9a:db:69:6d:e9:49:15:1d:e9:3c:fe:16:81:
10:b5:2b:eb:41:f9:52:8e:87:a4:9e:e7:50:0b:1b:
00:86:69:ad:90:fe:e9:2a:02:b2:c2:09:67:0b:86:
f1:3a:62:c9:14:e7:47:b5:e9:cf:37:32:c7:1a:74:
b6:40:ba:99:d5:09:fe:16:4a:c9:c0:66:da:3a:6b:
38:fb:95:70:48:22:79:d9:06:64:96:d1:18:c5:44:
f3:af:ff:b0:7d:c8:7d:ba:4e:02:32:c4:69:45:11:
5a:65:54:66:93:8a:e7:01:b1:75:c6:f2:b4:f0:ee:
a5:d3:e0:e2:9c:96:4d:4f:c1:8d:ba:37:d4:a4:68:
20:6e:3d:0c:a3:45:66:5e:fd:a3:23:52:64:c7:1e:
cb:46:04:1a:71:8f:50:ba:95:a2:66:b7:e5:79:9b:
15:30:63:e6:48:a1:77:8f:f8:70:da:e3:8c:3b:30:
8f:2a:33:49:e0:be:f6:91:e4:a2:96:0d:18:8e:15:
f6:36:54:68:6a:0d:1a:39:90:a3:3e:a7:48:4f:99:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:C7:03:FC:BA:87:39:C2:54:45:DF:76:E4:E5:07:8D:23:FE:4F
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e3:e5:50:d4:1e:fe:43:d2:ef:fc:1e:77:57:fd:6c:e9:66:
89:d5:e7:9e:ea:96:41:01:7e:a3:de:46:9a:55:90:ef:42:de:
d9:42:b1:e0:39:60:88:7b:d3:63:de:bb:e3:fb:89:04:41:53:
c2:fd:26:c1:09:b3:94:22:16:62:93:25:11:8e:0b:eb:8b:a4:
d7:88:4e:2d:1d:23:fd:b0:11:80:d6:09:2f:dd:aa:d7:5d:9d:
87:63:62:9b:8e:7a:49:fc:6d:d6:8a:a1:d5:45:81:10:7a:c7:
12:ce:4a:19:1f:01:bb:ed:d7:85:12:81:ef:20:11:c8:93:3a:
a8:ca:24:ba:93:f5:1e:d5:a8:09:3a:3e:ce:91:dc:25:2f:43:
df:1f:bc:9a:79:76:c8:4b:14:b5:14:76:aa:84:e9:6e:ba:2c:
e8:03:ea:e2:30:0f:55:2d:bd:9d:26:84:fa:df:37:17:8e:69:
c8:af:2d:aa:e0:ab:bc:78:f0:11:ba:57:f9:d2:3d:77:98:ba:
ad:45:48:e2:d5:fa:d7:a7:7d:63:a3:a5:1c:0f:dd:bf:cd:62:
14:ae:e0:07:50:33:8f:51:5d:55:8f:c6:df:dd:a8:69:c2:46:
4d:80:fa:80:89:87:4d:45:90:36:99:a7:a6:60:f3:69:43:1c:
ca:71:10:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:34 2024 by rpki-client on console-fra.rpki-client.org