Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: 8sP4cWl+beTRdlbEWmo8vBfG9t6BLWvsA9dxR9yzO4E=
Subject key identifier: B6:3F:A5:2E:88:0B:51:4D:84:34:C5:37:6C:74:DC:43:BC:9F:7F:1F
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 019367EB3B1CEEFD56745E250B8E6F5D3C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0A5A
Signing time: Tue 26 Nov 2024 10:01:29 +0000
Manifest this update: Tue 26 Nov 2024 10:01:29 +0000
Manifest next update: Wed 27 Nov 2024 10:01:29 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: 26X8RKmCJ91jwMdQhDq+KgV546Ciz3chOaxKjx2GdgA=)
2: bJZUYUU1k50ckkSYySGpdkBMop0.roa (hash: IPs4e7XbYqlwBtig2aI3qBSEpfKkYSJpGvK7QU+79WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 09:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:3b:1c:ee:fd:56:74:5e:25:0b:8e:6f:5d:3c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Nov 26 10:01:29 2024 GMT
Not After : Nov 27 10:01:29 2024 GMT
Subject: CN=b63fa52e880b514d8434c5376c74dc43bc9f7f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:02:26:7d:3f:37:09:97:69:ee:b3:0d:6f:
01:1c:c6:a2:b1:aa:ef:58:1f:8c:ca:6e:27:1c:8e:
bd:cd:11:08:b9:84:02:fb:2e:15:58:19:5f:a2:95:
f2:15:64:05:3d:1e:2d:cc:2d:8e:2a:1b:1a:57:21:
21:7a:07:c5:3a:35:96:c9:3d:b9:a2:0f:98:bd:b4:
9f:be:f3:d2:e4:22:e1:48:75:c5:03:7c:8d:76:ba:
2c:51:d8:9b:f8:f6:41:d8:fd:6f:17:5f:84:14:97:
c2:c2:2f:a7:2c:fc:ce:85:22:68:88:31:3e:d1:95:
c3:bf:17:c3:a3:3b:4e:b8:78:e2:4f:fd:fc:66:d9:
be:53:a6:49:de:c3:85:4a:a5:ec:08:6a:10:5e:38:
f0:e9:b3:87:7d:d5:7f:a4:d1:11:47:e4:c1:93:9b:
86:6a:5a:2d:ef:a4:0e:a9:59:1e:fc:4d:4e:be:70:
97:84:c3:10:73:99:b2:79:a1:b3:bc:c8:0c:58:93:
31:95:49:c5:ad:2c:ba:77:07:7c:52:63:ac:ca:24:
06:51:95:70:a5:dd:70:e0:24:ca:c6:8c:e1:be:7a:
ca:a1:70:73:68:d2:fd:ac:ca:f4:14:5f:95:31:ad:
d2:5c:33:30:23:c9:b2:de:3f:23:07:62:8d:26:d5:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:A5:2E:88:0B:51:4D:84:34:C5:37:6C:74:DC:43:BC:9F:7F:1F
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:38:66:e7:39:7d:6f:0d:49:5d:04:c1:37:73:9f:13:ea:99:
03:52:75:44:0e:15:29:5d:71:6a:8e:5d:ba:1f:8b:e7:0b:cb:
63:07:92:5f:8b:27:14:0c:b1:9d:08:21:85:50:83:5c:16:04:
48:74:b0:7d:ad:2b:a7:67:09:1d:d9:ac:2a:53:0d:03:b5:f6:
9d:a8:1c:6a:32:66:67:33:17:66:50:7c:4e:02:6d:79:aa:77:
ca:e7:12:48:fc:c2:94:a8:f8:ff:cc:8e:2c:2b:5d:9f:b0:d1:
5f:9f:8d:bd:2f:00:e8:88:b8:1d:7f:12:f9:5c:4b:22:1d:99:
aa:61:bb:59:59:4e:75:35:c9:be:ee:0d:fb:c4:b2:91:9a:9d:
53:14:9b:9d:b7:bf:88:ff:cf:60:63:7b:ea:5f:97:a2:41:dc:
00:14:29:b5:ef:26:d3:62:19:45:aa:d7:b8:60:19:e5:6c:9f:
de:82:9c:c5:55:23:b2:06:cb:b0:b3:59:74:d0:02:29:d0:73:
cc:c6:cc:22:6b:e6:e5:69:14:63:79:fd:fa:dc:fa:0e:a2:b2:
4d:4a:b2:aa:3c:c2:d0:03:ca:21:f5:58:41:64:54:ad:0b:13:
e0:fc:42:1a:ac:50:fe:25:4c:01:19:7e:40:f9:a0:ee:08:79:
c3:a7:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:27:04 2024 by rpki-client on console-fra.rpki-client.org