Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: xvt4D+X5g2sSO6+m7RUUUMxzm73nlcARXJK9lx0eZko=
Subject key identifier: F4:8F:85:94:07:EE:B0:01:78:DE:AD:0D:E0:6F:BD:C6:F4:E1:12:67
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019351D0768D5ECF20A9C75477C409F67E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0AE5
Signing time: Fri 22 Nov 2024 03:00:36 +0000
Manifest this update: Fri 22 Nov 2024 03:00:36 +0000
Manifest next update: Sat 23 Nov 2024 03:00:36 +0000
Files and hashes: 1: gT3wugUI4Aw5B0MBu793Gkj7g-8.roa (hash: 4IEE+98b5XBgMZ2bvOTabHnCk7uL0HYkzVHO7z3d8zM=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: TnS8gAxPL/f7dmWl/p2MgRYzYvd5pfnLepJ8lTzf30M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:76:8d:5e:cf:20:a9:c7:54:77:c4:09:f6:7e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Nov 22 03:00:36 2024 GMT
Not After : Nov 23 03:00:36 2024 GMT
Subject: CN=f48f859407eeb00178dead0de06fbdc6f4e11267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:be:82:2b:f2:ec:0a:52:af:1a:fc:71:94:
c7:ad:7e:98:b1:27:ef:90:01:eb:bb:f5:b5:0e:d3:
d1:4a:54:ce:87:e7:35:37:ab:71:90:17:27:de:a3:
15:d1:4a:d0:4a:5d:46:18:d8:6e:6f:59:1b:1f:e3:
b7:eb:25:42:a7:82:04:95:d3:bd:97:c2:56:bb:ee:
f6:e8:c3:87:70:18:e1:15:5e:58:71:9b:8c:dc:5e:
35:d3:ee:d4:22:52:2d:d5:e9:0c:88:43:4e:3b:e1:
24:cb:8d:d6:9f:f3:e1:f9:3e:98:7b:48:91:f3:ec:
e0:5d:07:34:f7:07:ec:8b:60:a0:de:96:9a:a6:bb:
82:ca:ad:60:fe:8f:4a:b1:b5:55:e3:d7:a1:85:8c:
a7:09:21:20:89:6a:f9:cb:5a:46:40:a9:6b:a8:a3:
ed:48:95:36:32:6a:67:f3:02:9d:8a:53:e0:c5:18:
9d:d1:e8:f3:ad:a4:7e:0c:ea:3a:15:85:84:18:f8:
19:d5:a6:c7:f1:08:c1:75:0e:9a:bf:ce:e6:47:11:
94:37:19:49:14:6a:d7:bb:fd:16:05:08:af:0a:fe:
75:3d:e4:f3:35:37:9d:e2:fa:bf:9f:45:a7:98:73:
ad:f6:b0:69:8e:c0:06:f7:3a:53:5c:40:99:0f:5a:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:85:94:07:EE:B0:01:78:DE:AD:0D:E0:6F:BD:C6:F4:E1:12:67
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:71:5e:15:05:79:3e:52:a8:43:e6:50:5a:2a:47:36:c5:
f5:03:26:46:2c:62:b8:84:2e:de:59:51:4a:df:ca:c7:fd:11:
62:41:e9:8a:f3:46:88:84:85:53:2c:51:61:65:7a:d7:68:e3:
d2:b3:99:51:0f:a1:c9:ba:76:f5:28:bc:6d:29:e7:5b:1d:9b:
50:22:85:4f:93:d7:db:98:6f:45:13:ea:32:4a:6f:4a:3a:6c:
43:e8:de:ca:72:f1:96:d6:77:9b:56:19:d1:ef:98:78:ab:0f:
46:78:4a:2b:d8:f3:43:0a:61:e7:8f:7e:4e:4f:d4:7d:0b:81:
f6:47:6c:17:15:34:c1:99:1a:87:c7:80:46:2a:6d:20:cc:ff:
7b:fb:f6:e0:8f:d2:c1:ca:68:b3:af:3d:93:fd:a7:2a:14:1d:
43:65:37:2e:a9:61:d6:bb:05:ef:53:aa:97:23:1f:d4:86:a5:
88:c0:9d:c9:62:13:bd:49:71:55:c4:34:f3:0b:52:34:1c:6e:
08:7a:5a:19:84:9d:16:e3:e1:6c:69:28:e5:28:43:24:2d:d3:
8e:39:31:58:a3:4f:01:00:1f:b1:ce:a2:23:10:f8:3c:71:8d:
55:2e:06:6c:97:9b:30:ba:21:cc:6a:11:2b:44:7b:ab:32:46:
5b:8f:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:56 2024 by rpki-client on console-fra.rpki-client.org