Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: CDN7LIhfnmY7kqXSzKaHeU11BnIF7UFgHaUpNn6fShY=
Subject key identifier: 50:1E:3E:67:65:54:44:2E:48:2F:1A:06:40:0E:B3:96:EB:D7:96:5D
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 01936AEB7F2631226C8B06BC009229032443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 1198
Signing time: Wed 27 Nov 2024 00:00:38 +0000
Manifest this update: Wed 27 Nov 2024 00:00:38 +0000
Manifest next update: Thu 28 Nov 2024 00:00:38 +0000
Files and hashes: 1: LPzQ6sexGwPxXdJE3EbmsmkS8nA.roa (hash: 2FIQwuF8Scgbv00IOzl/ramfIAA1EObx2JnjdZaeR3c=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: mm1DwQmTyAPDmHu3pQGzXMYfIGPhOBlQ0V0AZF6IWMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:7f:26:31:22:6c:8b:06:bc:00:92:29:03:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Nov 27 00:00:38 2024 GMT
Not After : Nov 28 00:00:38 2024 GMT
Subject: CN=501e3e676554442e482f1a06400eb396ebd7965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:27:18:2e:3f:5a:fd:24:72:aa:b7:e1:74:
ff:65:b1:5d:8e:c8:56:d4:64:68:4f:d8:54:89:9e:
14:7e:9e:e5:ab:2b:a1:e6:5c:e9:33:e6:9a:9b:2c:
c1:3c:76:b2:77:6d:2c:6f:d5:7b:b0:44:34:b8:60:
91:44:6d:ea:54:ad:2d:f5:dc:17:f0:2b:4d:be:35:
85:93:e0:42:9d:b4:74:46:1d:55:4d:2d:e0:8d:7d:
b9:49:99:bf:7b:db:24:b5:48:bb:9f:b0:e2:bc:4c:
69:94:e4:b2:54:22:fa:64:5c:41:b5:e9:bc:49:3f:
28:ca:1e:c8:73:2b:b4:fd:a2:49:04:9b:59:65:71:
f0:c8:8b:88:81:43:b9:90:ab:8a:00:9c:6a:bc:aa:
ca:9f:bf:27:4a:e5:c1:26:89:c5:6b:4f:4b:9d:cb:
7d:9a:7e:35:6f:65:41:9b:99:47:75:f6:53:3d:7b:
0e:ad:28:23:57:4a:6a:ce:7b:b0:e1:1a:cf:92:02:
28:bb:2c:cc:e0:39:b5:f0:f2:61:c6:59:ff:67:ec:
e5:ef:9e:2e:b6:5c:fe:62:4b:9c:cf:e0:f7:61:26:
f2:3e:0f:47:28:30:92:8a:16:5a:f7:77:88:b0:12:
47:b1:9f:7a:ed:d7:5f:89:0b:a9:ae:fa:cf:07:ef:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:3E:67:65:54:44:2E:48:2F:1A:06:40:0E:B3:96:EB:D7:96:5D
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:79:bd:d2:29:97:c4:72:26:e0:8b:35:19:0d:c1:9e:df:
2e:23:ef:cb:6b:65:f3:97:50:0e:8a:5f:b6:2c:3e:9c:b8:97:
85:62:21:af:9a:a3:50:32:4d:9a:df:01:2f:fa:a9:e8:0b:4b:
2a:2b:c4:ec:78:44:b3:ea:40:3b:3a:61:37:12:31:4e:3d:fd:
b1:51:b0:e5:1c:64:84:74:ec:ba:af:21:b0:53:7f:27:68:1c:
19:57:2d:cf:53:ad:ff:70:18:61:ef:db:85:53:0a:33:56:33:
96:86:9d:1d:d5:b7:43:b0:04:90:b6:d4:ba:d4:c1:b6:7c:06:
1f:a1:1c:fe:b5:77:e3:78:b1:f5:a0:f0:6e:f2:6c:75:b0:c4:
8b:7a:ab:31:cf:af:a0:c2:b9:77:86:78:8e:89:71:dd:6e:d4:
83:00:d7:c2:a2:8e:3f:94:b1:31:02:9f:3e:a3:99:ad:19:01:
b0:64:81:d5:64:1d:6b:0d:f9:0b:e5:ae:8f:9e:26:cd:22:e2:
2f:09:92:89:c4:96:c2:0c:94:4d:ff:7d:f3:d3:a7:2b:ac:ad:
13:9c:e5:9f:92:ea:af:8f:53:8e:7b:d7:e3:1a:bc:ee:cb:68:
5b:95:d9:99:01:e1:7f:d5:0b:1b:c0:6e:b2:d8:20:6e:9f:a7:
35:8b:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:07 2024 by rpki-client on console-fra.rpki-client.org