Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: +6JPWIhS8/oE7s2cO9+BCZvHJXJxuex9bEGziDc+BMg=
Subject key identifier: D3:D7:4F:49:46:02:6E:EB:AF:63:9E:78:9E:4F:12:08:76:ED:DB:6B
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0193520742E02ABC8E899E3105BA885F5729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0C2F
Signing time: Fri 22 Nov 2024 04:00:27 +0000
Manifest this update: Fri 22 Nov 2024 04:00:27 +0000
Manifest next update: Sat 23 Nov 2024 04:00:27 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: VZl9M8ZW1Qf8B6yY+IlZ1sh9cfhVBbuPpnhtnq6vuXI=)
2: WfJaksAmXQQrDdzFH5nfx_2oTt8.roa (hash: brNkwfutAXrSL8oQrUP2lzeSp9whMU3NCAB1wqUX96o=)
3: cGAcnya9tpWRusG8AgV4cWKAYk8.roa (hash: HTqgy9ow/utJkGxnmqmU1CMEoTtvcClIXxQPvIV4Q+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:42:e0:2a:bc:8e:89:9e:31:05:ba:88:5f:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Nov 22 04:00:27 2024 GMT
Not After : Nov 23 04:00:27 2024 GMT
Subject: CN=d3d74f4946026eebaf639e789e4f120876eddb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:65:c4:ba:19:6f:f0:a9:0e:19:c2:7f:77:
a2:11:a5:5a:7b:22:ae:6b:a3:a5:7f:8d:46:73:81:
41:aa:85:c0:a1:d3:5e:40:bf:1e:fd:71:88:53:0f:
4b:79:4f:fa:3b:41:31:dd:d5:d3:30:63:8d:03:f3:
85:16:9c:61:ae:57:f9:7d:04:ef:2b:5f:88:94:29:
2c:a3:12:d9:02:ab:70:0d:98:7b:a7:39:1c:35:d2:
27:ff:8f:ca:6d:fc:9d:ee:c9:61:ee:78:a2:d5:42:
b2:8f:d8:c8:53:2f:32:08:b3:cc:85:ad:c4:f2:eb:
38:5f:e3:2b:f7:8b:5d:ae:de:e6:5d:3d:18:7f:40:
21:e8:28:49:6a:0a:52:19:e8:69:d7:3c:09:7d:cf:
99:10:76:3f:c0:d3:39:61:96:97:e6:0a:2f:06:0c:
42:85:91:da:3a:3d:92:e2:3b:d9:aa:96:03:a3:1b:
12:21:4e:61:49:9a:fe:c6:95:65:ce:d7:6c:1a:77:
a4:53:f2:11:7a:34:65:8d:31:eb:56:25:f1:79:d1:
04:26:2b:cb:c4:a0:e3:5c:0d:18:25:40:de:38:93:
b9:be:ed:6a:d7:39:28:0a:49:3e:5e:5c:e3:8c:29:
14:bb:bb:c1:12:75:99:26:c0:e7:ff:75:07:eb:4d:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:4F:49:46:02:6E:EB:AF:63:9E:78:9E:4F:12:08:76:ED:DB:6B
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:eb:88:89:35:f5:72:df:53:5b:84:cd:7d:f1:31:3c:d9:
5f:77:f8:f6:e0:be:77:73:d6:34:91:3d:b3:a9:46:1c:c1:55:
bb:a6:c6:ca:c8:7f:8e:43:9a:ae:23:53:0f:09:88:d4:4a:1f:
f3:1f:f5:5c:49:93:3a:3f:82:9e:23:89:bc:68:40:70:94:7f:
42:86:e5:fb:28:5d:f0:1b:3b:71:3f:6b:87:20:1a:7b:b3:98:
52:f6:4e:ac:4e:b4:f2:de:bb:50:dd:e0:34:bf:a5:0d:cb:6a:
09:d8:08:05:de:b3:9b:23:1c:57:fb:f1:c8:e3:a8:2f:ac:6e:
2c:b3:1a:c3:37:f5:98:1f:e1:18:10:32:d5:4b:da:a2:48:37:
0f:c6:d7:16:cb:47:e8:12:d2:37:a5:e5:b5:7b:98:91:e2:45:
7f:d7:4f:36:21:89:af:62:7d:78:94:b7:ad:1c:16:05:13:9c:
53:86:ff:07:58:5f:49:0f:ff:76:2f:2d:19:95:20:49:13:23:
1c:35:b8:ce:e4:fc:92:24:47:b4:6f:bd:af:55:24:a7:5b:73:
0d:b3:ed:b3:7e:64:44:86:de:53:01:ba:a8:a6:96:4f:02:65:
5d:e0:bb:aa:aa:14:0b:ab:7f:1f:b4:1e:d6:a0:cb:35:00:9d:
bd:77:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:44 2024 by rpki-client on console-fra.rpki-client.org