Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: 7B7AF0BLn0EikxsV8AqX4UKHiJapfpzc1Qrntp97IQE=
Subject key identifier: D3:D5:C8:AC:90:3E:C6:F1:F3:13:6E:47:C6:6C:7F:02:8F:9D:46:4A
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 018F9A9AC46FECE9D67E2D015DB45859BCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0862
Signing time: Tue 21 May 2024 10:03:05 +0000
Manifest this update: Tue 21 May 2024 10:03:05 +0000
Manifest next update: Wed 22 May 2024 10:03:05 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: IOfCnp5O4TwJiUbm5+41rttSyFn5uqKXFHmj4uwBJAU=)
2: bJZUYUU1k50ckkSYySGpdkBMop0.roa (hash: IPs4e7XbYqlwBtig2aI3qBSEpfKkYSJpGvK7QU+79WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:9a:c4:6f:ec:e9:d6:7e:2d:01:5d:b4:58:59:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: May 21 10:03:05 2024 GMT
Not After : May 22 10:03:05 2024 GMT
Subject: CN=d3d5c8ac903ec6f1f3136e47c66c7f028f9d464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:f6:be:bd:53:7a:e9:1a:46:25:56:9b:f6:
c0:b8:b0:62:a1:16:80:e5:c8:80:9e:86:33:70:84:
1c:cd:de:d7:1e:ee:a6:04:47:0b:6d:25:90:0f:04:
81:6d:d6:3d:d3:ab:bc:73:cd:b3:d3:0c:4c:d5:37:
0f:d4:5b:35:dc:30:c2:a2:13:8d:8d:12:0c:47:37:
85:45:1a:11:80:6f:06:86:69:d1:39:ff:a9:78:89:
e3:11:fa:3c:92:03:2b:b0:fc:57:f7:82:c2:7c:c8:
cf:28:22:6c:4e:06:68:16:3f:de:44:99:db:a1:72:
de:7a:91:23:af:f2:93:72:d4:d2:99:4f:d8:84:80:
f3:33:f3:ca:74:db:5c:7e:72:71:f4:fb:a0:e7:5e:
eb:51:ac:75:26:d9:cf:6f:8e:b8:ab:e6:ac:ee:e0:
2e:91:d3:e7:17:a0:6a:39:50:fc:c7:30:08:2b:ce:
79:00:84:d7:59:f7:2f:dd:0b:0b:17:7b:94:9d:d4:
5d:90:28:f5:20:99:42:e9:11:6b:bd:aa:ec:c2:3e:
1f:92:81:63:21:3f:e8:8e:88:c4:24:4c:f2:df:b7:
30:60:c5:02:67:5b:01:73:f0:c3:73:c7:4f:05:ba:
fa:28:16:cb:e2:14:a3:6d:48:90:ae:7f:86:ba:4a:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:C8:AC:90:3E:C6:F1:F3:13:6E:47:C6:6C:7F:02:8F:9D:46:4A
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:67:c9:01:c7:4c:9e:ba:0f:eb:69:1c:b0:05:2a:51:f5:83:
c5:5f:3c:18:7e:e5:62:9f:80:c1:ab:9b:df:e7:11:65:09:a8:
38:ef:54:a6:b1:f0:46:1d:7a:44:6d:fc:bc:20:80:e9:a7:8c:
05:4e:f7:56:92:3f:23:1e:b5:0a:bf:91:20:cb:21:c3:a2:69:
c6:0b:fa:d1:25:ff:2f:98:66:3e:ba:4c:0f:00:0c:0e:33:1a:
3a:38:e5:af:e2:60:5b:37:8d:e0:03:cb:d7:cc:09:e4:33:ed:
b2:c7:27:8d:ce:8f:50:2f:07:7f:63:14:a1:79:8c:37:83:ca:
8a:c5:43:f8:8f:5c:8f:6c:7f:75:8b:5f:09:6e:81:59:13:39:
e5:2c:e8:4b:45:e6:18:d7:b4:ac:12:7a:61:aa:47:ec:96:b9:
b7:65:10:7a:5a:76:32:31:b8:61:c7:0d:c0:17:d1:91:7c:ec:
c0:6d:04:fc:71:8f:d0:1c:84:ca:d7:80:11:3a:41:eb:0a:2b:
ef:53:85:b4:ac:c5:30:b1:e8:14:ac:d0:ef:dc:a5:d0:0b:17:
3c:3c:74:4f:b2:ec:27:63:15:c5:13:3d:91:85:01:aa:d1:5f:
7f:12:43:d3:36:ff:3d:f3:f1:05:44:de:bb:5c:78:a1:e6:0e:
f4:90:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:18:46 2024 by rpki-client on console-fra.rpki-client.org