Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
File: NLWONYkAecLWDA5LyOyCwbMxlfY.mft (raw, json)
Hash identifier: QSP21ugQMdJBTR/oU6u9kp7raYvjD1xFYRRvJleTv+4=
Subject key identifier: 9D:BD:1F:FE:27:9C:CF:9F:9F:95:9C:5E:40:AC:72:21:2F:F6:AD:E4
Authority key identifier: 34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
Certificate issuer: /CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Certificate serial: 018F877F438422B456D33EACD8F3992BD414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
Manifest number: 013B
Signing time: Fri 17 May 2024 17:00:15 +0000
Manifest this update: Fri 17 May 2024 17:00:15 +0000
Manifest next update: Sat 18 May 2024 17:00:15 +0000
Files and hashes: 1: NLWONYkAecLWDA5LyOyCwbMxlfY.crl (hash: knxzud2+zWz5f5dzlHKNAFdmRegQdNCBfPPND8IgCpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:7f:43:84:22:b4:56:d3:3e:ac:d8:f3:99:2b:d4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Validity
Not Before: May 17 17:00:15 2024 GMT
Not After : May 18 17:00:15 2024 GMT
Subject: CN=9dbd1ffe279ccf9f9f959c5e40ac72212ff6ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:4d:20:32:15:a7:59:18:5d:87:e3:7a:f1:
71:ac:bc:fb:9d:e2:6e:dc:a6:ee:b9:a8:3c:95:49:
8d:30:59:44:a7:61:d7:01:36:d5:2f:c5:f1:12:8d:
e3:57:ad:4f:66:7e:39:81:61:e3:68:8b:8a:a2:64:
04:fe:35:bd:7d:46:77:18:2d:2b:67:3f:61:bf:bb:
b0:03:e7:ba:6f:d2:71:05:a6:fc:79:23:06:49:5a:
a3:ff:f6:8e:3e:ff:b9:2f:d7:0a:93:24:3f:b4:5f:
65:a9:30:7c:ce:b2:65:5a:b4:ae:f5:0c:d3:1a:a0:
99:11:f1:90:52:cb:8b:97:2c:c1:69:89:ee:2b:1e:
d2:1e:ad:25:01:d6:0f:16:d8:9a:2d:20:31:d4:2c:
1f:ed:d1:08:5f:7e:29:83:f8:06:30:15:e8:20:70:
8a:33:e2:f2:dd:d1:08:29:b8:59:62:77:60:a5:23:
d9:37:81:c6:73:32:fb:12:90:06:a2:8d:7c:24:25:
9f:83:34:be:f0:a7:f3:f2:04:af:83:53:52:16:87:
09:ca:53:bf:04:37:14:d6:ea:ff:e2:fc:7f:44:6e:
90:2e:67:0e:d7:5f:23:46:7b:14:8a:83:ff:69:7a:
fc:de:a5:a8:aa:8a:a8:9e:6a:58:df:d3:9b:f5:56:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:1F:FE:27:9C:CF:9F:9F:95:9C:5E:40:AC:72:21:2F:F6:AD:E4
X509v3 Authority Key Identifier:
keyid:34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:8f:89:a4:90:33:e2:bd:b1:84:c7:74:92:9b:4b:f8:12:
01:38:b2:51:35:c4:23:f4:6b:86:f9:c5:4d:f4:24:37:4f:a0:
1e:ff:d8:0a:25:36:51:e8:78:c5:49:62:c6:ba:2e:05:84:6a:
e1:d4:25:eb:c5:bf:f3:91:03:e9:92:72:aa:aa:ef:b6:a0:be:
5d:41:f4:73:17:bb:0d:a9:2a:ac:0a:00:b0:32:0b:e2:9f:ee:
28:16:4a:42:04:1f:ee:d8:0b:4d:45:a5:6f:c2:a4:74:e0:ab:
6a:b2:2b:6d:e6:0b:ce:db:75:a6:c5:79:77:3c:76:3d:5b:58:
0e:8a:2a:36:d1:a2:61:a9:fb:6b:be:26:14:f5:ff:2e:b6:c7:
38:ce:2e:8e:2a:4c:b2:82:c1:ea:bc:84:22:fa:0e:0b:bb:13:
52:00:f0:5a:3c:6b:5c:30:09:b1:c5:ac:18:db:b0:ed:f8:eb:
a7:39:27:4a:37:7a:47:1e:f8:93:83:1b:84:5b:80:4c:81:6d:
5a:98:d6:36:53:66:94:17:b8:65:1b:4d:a3:fa:b1:05:69:13:
06:13:cd:93:a3:64:b3:5d:9a:53:1d:48:46:ee:a6:fd:67:e9:
34:18:5b:e4:d2:ad:5c:12:0f:8d:80:e2:1a:84:29:1a:1e:48:
9a:da:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:48 2024 by rpki-client on console-fra.rpki-client.org