Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
File: NdB1rqTOzB1391EfQdd8pTMCpvY.mft (raw, json)
Hash identifier: ENo7g/nO+fx6SLwoEnge0+VX8j22BeMnN/pAHCQnus4=
Subject key identifier: C7:DA:15:40:BA:64:A6:84:1F:60:9B:8E:5F:07:BB:D8:80:F6:8C:CE
Authority key identifier: 35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
Certificate issuer: /CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Certificate serial: 018F88927444DA91AC76B7C8A5AF388170A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
Manifest number: 05CE
Signing time: Fri 17 May 2024 22:00:50 +0000
Manifest this update: Fri 17 May 2024 22:00:50 +0000
Manifest next update: Sat 18 May 2024 22:00:50 +0000
Files and hashes: 1: NdB1rqTOzB1391EfQdd8pTMCpvY.crl (hash: BvV9DtKTcZyfvw2syHo8Cv4QVBRNfJClAqJ/lAT/kTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:74:44:da:91:ac:76:b7:c8:a5:af:38:81:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Validity
Not Before: May 17 22:00:50 2024 GMT
Not After : May 18 22:00:50 2024 GMT
Subject: CN=c7da1540ba64a6841f609b8e5f07bbd880f68cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:e0:4e:84:83:48:0d:8c:f9:0f:1f:b9:d0:
23:de:c7:0e:03:86:32:5c:8e:36:e0:e0:f7:61:82:
be:0c:19:bb:16:3d:82:7e:70:74:ba:e5:e7:90:1f:
c2:0f:a9:81:77:b8:1d:f1:0a:22:ad:58:46:ae:81:
28:77:79:34:26:33:ff:fb:35:0a:39:c9:39:c0:7b:
9d:65:b6:b3:e8:bf:0f:5d:7d:e4:8e:91:98:15:c5:
56:fd:fd:0a:cf:d5:7c:12:9d:d1:d1:35:c4:9d:b6:
d8:c7:ed:7c:aa:27:3a:80:b9:49:4f:91:34:9a:61:
24:82:c4:23:1b:cc:67:0c:2c:f5:c8:e5:e0:51:8c:
62:9b:af:ad:2d:1f:90:f0:37:e3:e2:43:0f:66:f4:
b4:f6:b0:2d:9e:13:7e:88:db:aa:83:a9:5e:fb:e9:
05:c4:58:0c:10:63:2e:92:55:96:6e:12:45:16:4b:
15:f8:7e:2a:8f:4c:c9:5a:af:c8:c1:e4:70:69:8c:
87:cd:cd:8f:0b:2e:e1:21:e3:be:34:b9:a9:2f:c7:
80:fd:ee:33:16:cf:89:4c:56:61:9d:0e:eb:6f:ec:
bb:65:6e:2a:13:75:14:31:52:63:f5:a5:af:e0:85:
03:a5:4b:29:91:9f:d7:e2:42:a0:4b:72:8d:e7:8f:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:15:40:BA:64:A6:84:1F:60:9B:8E:5F:07:BB:D8:80:F6:8C:CE
X509v3 Authority Key Identifier:
keyid:35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cd:4b:89:90:ae:f7:ec:c5:39:69:ea:bc:e5:6b:09:b5:5a:
0a:9c:5c:cd:1b:11:62:f1:c4:f9:d2:cd:88:74:52:8c:d9:a9:
6b:1e:c0:4b:2b:a7:d7:4a:14:43:f7:d3:02:1f:85:d6:49:f0:
2a:2c:09:b4:97:ba:22:00:ac:5f:a9:f7:97:ef:1d:c6:da:d3:
14:73:2e:60:dc:13:53:4a:a8:47:d5:42:94:da:00:68:ea:c0:
65:56:b7:2e:51:f3:02:52:93:83:62:f9:47:c1:39:2d:1c:d5:
01:03:81:f3:14:22:61:7c:76:8c:11:7e:c0:bf:8d:ab:5c:e6:
90:d6:d0:f2:0c:b8:e5:96:c2:69:c9:4a:76:d1:52:1c:13:c0:
3c:9d:9b:d1:d8:2a:41:7f:d3:c0:65:a7:06:24:16:4a:80:3a:
e3:55:63:df:6f:1c:90:27:c6:2a:41:c4:63:6e:7a:c5:38:10:
85:29:c5:83:2d:9b:80:d7:88:93:9f:5a:1a:4d:bc:6a:a5:f3:
a5:c0:0e:47:cf:7a:57:1f:aa:27:e7:5e:c0:c4:e3:85:18:e6:
8f:21:bd:2b:b5:b5:50:f2:54:93:31:2a:65:d2:47:f5:fe:d1:
fd:e1:de:d8:48:01:ff:fe:27:71:03:73:18:a5:04:45:ea:7f:
06:18:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:37 2024 by rpki-client on console-fra.rpki-client.org