Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: U7rL/Sx92bBJkgpIu1qRgSAdXqWYTHrF9Qmgskt5TcM=
Subject key identifier: C0:99:BF:FC:19:E2:86:84:E1:BC:80:55:BF:0C:29:D6:37:49:80:C8
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019356F67EB02355EDDC73D8F7B4C7490CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0677
Signing time: Sat 23 Nov 2024 03:00:15 +0000
Manifest this update: Sat 23 Nov 2024 03:00:15 +0000
Manifest next update: Sun 24 Nov 2024 03:00:15 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: usHAhdnCZ2Xtk6XhWdkElRHf3G+kK4f7j6u5nfSMJ2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:7e:b0:23:55:ed:dc:73:d8:f7:b4:c7:49:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Nov 23 03:00:15 2024 GMT
Not After : Nov 24 03:00:15 2024 GMT
Subject: CN=c099bffc19e28684e1bc8055bf0c29d6374980c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:e2:a7:47:64:45:eb:28:8c:ec:f7:a1:64:
58:36:e2:b5:b1:14:cb:6f:fb:bc:71:8e:cc:38:68:
91:11:2b:d2:16:fd:a1:dc:73:32:a4:2f:80:8d:8c:
51:a1:9b:d2:e5:ac:b6:66:fa:cb:ed:47:25:23:38:
28:f5:d8:d0:17:df:68:60:8f:7a:50:43:d6:36:a7:
c3:ed:d7:f7:cb:cc:2b:d1:83:a6:37:46:d3:59:44:
c7:51:fb:c6:ce:7f:b7:8b:27:c4:73:03:83:0d:3c:
4f:7c:8d:6e:e0:df:a5:fe:eb:4f:ed:88:ea:f3:20:
72:25:9a:67:43:a2:ff:f5:35:8d:99:af:21:82:e9:
61:af:51:83:24:7d:db:d6:2d:d0:47:24:21:e9:db:
a1:55:53:30:cd:c3:30:ad:6b:54:a0:c2:74:b4:fa:
bd:ca:7f:c1:bf:d2:c7:a3:a8:1d:90:bf:d7:e3:29:
2c:2a:c0:11:30:4a:58:e2:98:c9:e8:ae:61:6e:8c:
2a:e9:78:53:87:04:72:e1:0d:e2:bf:5b:fc:c0:e5:
b3:36:74:67:e7:86:4d:1c:88:e2:fc:3f:92:b8:d9:
a9:a9:06:09:2f:f6:a5:d9:22:cc:83:ef:84:fc:95:
69:2d:1a:a4:df:dc:25:82:39:e1:79:37:d3:db:d2:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:BF:FC:19:E2:86:84:E1:BC:80:55:BF:0C:29:D6:37:49:80:C8
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:f7:9a:5c:16:67:51:48:2a:41:08:80:18:4d:3f:bf:0e:
b4:6c:de:d9:d9:12:38:f9:2d:52:33:25:cb:7f:75:3f:e6:61:
62:33:3e:dc:b8:36:fc:35:a0:2b:11:82:21:a0:0a:26:d3:90:
d7:88:c8:ed:b8:79:db:08:12:ea:cf:d4:5a:f0:9f:a0:e6:0f:
6d:85:1c:e9:a9:d5:bb:29:41:56:31:a7:1e:61:24:e5:55:88:
b2:e3:5f:b9:e2:43:53:b6:e1:8d:ce:8e:08:06:e8:1f:f7:e0:
f6:b0:fb:2c:67:ba:79:79:b2:13:f1:9e:78:9f:9a:6f:1c:5f:
1c:d0:7f:2d:df:29:01:71:ac:d0:c7:c9:9a:91:08:b6:98:16:
a7:4f:e7:66:d3:47:34:e1:27:6a:87:2d:8a:25:e1:d2:72:40:
ee:dc:81:0a:99:c8:79:3c:61:6b:38:a3:4e:7a:58:df:d1:58:
59:6c:2c:8f:7e:c9:55:8c:6d:6d:3f:e1:44:4c:03:53:7c:d5:
7c:cb:9e:14:23:8e:00:9c:a4:4c:b4:62:96:bf:3d:bd:44:96:
22:7b:dc:10:ec:a5:9f:3c:14:e5:c0:bd:b2:e7:9b:77:78:c7:
ae:da:cc:63:a2:e3:7a:ba:e8:ae:0e:b5:22:9f:35:60:48:70:
30:ed:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:10 2024 by rpki-client on console-fra.rpki-client.org