Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: aE69mwGUb6Xs7YAAcPch5EQY04U4b8fJb9CsmukH+Ps=
Subject key identifier: 2E:0A:F2:60:DE:D4:20:D0:D3:AD:33:89:55:FD:01:10:47:7C:5E:F2
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019365FC12362F31CA10C5EF7F4054026871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 01:00:38 +0000
Manifest this update: Tue 26 Nov 2024 01:00:38 +0000
Manifest next update: Wed 27 Nov 2024 01:00:38 +0000
Files and hashes: 1: gsf_92xxJ6uvnirY6hkVd5SDkxg.roa (hash: qjEEl9DqsHIB1+fhEpYjZSgg/raokyhhl847ibXGpw0=)
2: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: St10ZP+ZzuxItCziIBmEOBkCn2Iu5GYarmW3JtL3HZ8=)
3: o877rONs1eylmiODz8T5wgOWXBk.roa (hash: Dy1aKSXZT86gDcgT3Q99oB3/a+OF+/EFJz1yZhjiGqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fc:12:36:2f:31:ca:10:c5:ef:7f:40:54:02:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Nov 26 01:00:38 2024 GMT
Not After : Nov 27 01:00:38 2024 GMT
Subject: CN=2e0af260ded420d0d3ad338955fd0110477c5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:99:3b:e9:60:fb:2c:be:04:0f:c1:2d:e2:
15:0b:88:36:86:f7:72:fa:d1:c1:2e:1c:50:c6:d0:
52:34:83:40:8f:77:8a:1b:26:fb:8f:71:03:3e:07:
13:c3:5e:3c:e0:ba:46:0c:2a:f8:0e:4b:17:ad:91:
66:a6:61:f0:9e:09:4c:e3:2a:b8:12:2e:b9:75:9e:
76:f4:6b:34:94:cb:8e:d9:0c:38:ed:6e:e4:53:9d:
b3:33:4f:f8:63:12:9d:fb:9c:11:5a:15:fd:82:78:
c3:8b:59:4c:df:3d:1d:d1:86:11:09:0c:e2:a0:16:
7d:1e:05:96:0c:22:c3:43:b7:12:c0:e9:3c:1c:50:
5a:56:02:f6:6e:99:46:fd:e7:f6:1e:fa:11:58:25:
44:43:e0:92:fa:48:62:69:f9:1f:c4:1a:91:fb:5c:
13:e3:98:12:6b:b0:71:a8:53:3b:1e:94:51:61:49:
67:62:ee:07:b4:46:a3:1c:25:ae:c6:55:8f:dc:f9:
1b:22:09:10:83:b5:0c:99:c8:1f:4a:cd:d4:64:f9:
24:94:aa:f4:d8:7d:a1:80:ec:fa:7e:b9:fb:09:1a:
39:e4:59:21:a3:38:47:f9:1f:26:f0:c2:6f:f2:6f:
14:3e:34:89:a4:a6:0e:6e:08:0e:d6:e6:0c:3a:20:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:F2:60:DE:D4:20:D0:D3:AD:33:89:55:FD:01:10:47:7C:5E:F2
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:ed:90:aa:02:10:32:f2:9c:7d:d3:9d:06:6e:a8:a6:82:
3d:8d:f3:8e:37:a8:f0:e9:03:77:52:43:94:99:d6:7d:56:b9:
79:2b:b1:c6:70:9b:bf:04:23:db:6b:8f:12:4e:7d:0b:a7:52:
f5:2a:13:4f:5d:6b:1c:a8:cb:24:98:c9:c3:2e:c5:25:cf:b1:
15:81:fa:72:7d:52:8f:b6:26:be:77:6c:27:ab:fe:56:1f:30:
96:ef:a2:58:45:b8:25:bc:72:cc:4e:2b:9b:30:10:10:54:42:
f6:9a:20:ef:0a:13:58:d2:7f:36:30:7b:26:c6:60:97:a2:ec:
d8:bb:9c:ea:d7:5b:cc:3f:13:c1:7a:43:ba:df:63:b9:ef:92:
4a:29:a0:d2:e0:e7:44:85:bf:b0:5b:ed:e3:26:43:71:3d:b3:
ef:2a:af:cf:f9:b3:09:1d:30:2f:31:6a:d8:2e:2e:c5:3f:72:
99:f9:4e:ae:fa:b7:3a:cd:83:08:30:79:a0:b0:1e:86:67:7e:
39:4f:f6:50:06:e0:5f:0a:2a:05:fd:43:84:ba:15:ac:f1:31:
0b:26:f8:e0:dd:d8:32:3d:9e:c7:d8:b7:21:04:37:8e:c2:64:
0c:60:9a:09:76:b0:86:c0:9d:30:d5:27:24:57:13:a5:bd:34:
30:d6:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:00:12 2024 by rpki-client on console-ams.rpki-client.org