Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: BY5TY42PSOk/HuIi33vkS56XvQed4ntIjYiH+jZ0wDQ=
Subject key identifier: 01:4A:FD:13:F4:D3:C8:1D:D4:17:31:10:99:41:CC:A7:DD:E7:2A:82
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 018F893885EB13F62E5B201989E0ACA8B7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 023E
Signing time: Sat 18 May 2024 01:02:13 +0000
Manifest this update: Sat 18 May 2024 01:02:13 +0000
Manifest next update: Sun 19 May 2024 01:02:13 +0000
Files and hashes: 1: b06iVp-p0elqRYHnyWzt0QnUbbg.roa (hash: KuhhONAuaD2IE5Uj0npmBru3e2WAVAA/5ZdquYX45zg=)
2: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: W+Xeg+FS5I5izoMWFJi19GmeFlT1dPgOvMqa01gsezM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:38:85:eb:13:f6:2e:5b:20:19:89:e0:ac:a8:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: May 18 01:02:13 2024 GMT
Not After : May 19 01:02:13 2024 GMT
Subject: CN=014afd13f4d3c81dd41731109941cca7dde72a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:f4:1c:5c:be:43:8e:28:d7:7a:68:6f:02:
ac:c6:ee:00:cb:c7:db:ff:33:ae:20:02:37:83:df:
f3:64:56:56:b2:7c:15:e8:0f:fa:fa:3b:36:fe:27:
44:61:8b:f8:ba:8d:25:33:eb:42:22:a8:7d:6d:0d:
d8:b5:b8:b1:be:a9:74:a8:dc:c5:70:5d:a4:a2:fa:
2f:39:cd:b3:54:18:1c:87:d8:d9:78:1d:b7:cb:32:
2c:d3:5a:b4:8a:e0:46:13:2a:28:0f:45:06:05:bc:
19:6b:a4:b6:cf:ef:5f:e8:3d:7d:a7:7c:38:06:ef:
6d:a9:c8:86:d8:f2:b1:23:b8:d6:4f:90:17:56:fd:
bc:12:50:a6:6b:bd:27:84:fd:8a:eb:66:11:43:60:
46:10:c0:fc:7f:b9:b5:5f:e8:5e:a7:ec:20:0a:8d:
83:8c:2e:2c:23:df:72:ec:21:23:b9:d6:aa:e6:bf:
bd:6e:d8:4c:6c:b6:97:fb:ba:83:f1:48:3d:aa:51:
6d:28:d4:09:d7:bb:96:88:62:bf:b6:e9:30:59:74:
6c:a5:6e:71:2f:04:42:a6:54:29:b2:2a:33:d9:08:
bb:42:c0:6e:77:86:6c:10:c4:59:00:37:8b:2a:b0:
f3:4d:3c:0e:cc:c4:26:c7:13:41:61:6a:3d:bc:b0:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:FD:13:F4:D3:C8:1D:D4:17:31:10:99:41:CC:A7:DD:E7:2A:82
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:7b:c3:84:44:53:d7:4d:e8:e5:e8:6b:a8:03:e5:bf:e8:
98:93:78:80:fa:bb:08:0a:b3:4a:e1:7f:a9:c6:b7:25:98:29:
df:24:15:db:6a:3b:dd:59:5a:a7:84:bf:f1:b0:04:4c:4c:38:
a0:2a:7e:92:0d:04:b6:80:ca:6d:ce:da:80:4c:c5:25:1e:f9:
3e:2c:a7:6c:01:09:d1:14:fe:53:64:5a:a4:98:80:4c:41:66:
df:cd:70:0e:37:32:54:7e:77:6f:63:b3:3d:95:3c:08:2e:44:
6b:3c:74:a1:1d:a2:4b:6f:34:e4:cb:48:bf:c0:7e:b2:d0:98:
2f:ce:7a:23:83:6d:b9:a9:ee:95:b1:e8:7c:37:5f:46:a6:48:
2b:67:09:5d:be:d6:74:48:17:ff:f9:2e:ff:42:e8:5e:97:e2:
00:00:04:b7:eb:a7:9a:73:d8:fe:b0:62:d1:99:b6:83:80:f9:
5f:f6:f4:07:1b:d0:43:40:24:82:3c:d8:b3:c1:95:24:ab:cc:
6e:cd:73:ea:c7:69:65:cb:0d:a3:96:1e:34:ff:60:13:4e:27:
90:92:d8:8f:ca:a2:cb:9e:05:28:45:28:01:32:7a:c8:f6:38:
78:0f:75:1e:3e:ea:a6:c1:15:3b:ba:44:fd:4b:ac:89:8f:8a:
83:e2:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:49 2024 by rpki-client on console-ams.rpki-client.org