Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: tm2rENv2oFwviQRoBBJVXm4SdANbAM54Im/nN6kIpHk=
Subject key identifier: 73:7F:76:85:37:D7:B9:1B:0C:0E:6B:42:73:40:F1:25:18:16:4E:5A
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 018F882454266DE2261C2C383A2A719E8B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 1175
Signing time: Fri 17 May 2024 20:00:33 +0000
Manifest this update: Fri 17 May 2024 20:00:33 +0000
Manifest next update: Sat 18 May 2024 20:00:33 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: Dxxb+wPTeYogb3R8fiPfKDO4SdJ15Og8EJN7Dy5Aask=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:54:26:6d:e2:26:1c:2c:38:3a:2a:71:9e:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: May 17 20:00:33 2024 GMT
Not After : May 18 20:00:33 2024 GMT
Subject: CN=737f768537d7b91b0c0e6b427340f12518164e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:70:57:7a:94:d3:38:63:3b:4b:c8:a8:71:
25:c4:71:db:96:05:be:b5:c1:39:00:bc:89:cc:2b:
97:d1:79:e6:88:17:7d:11:eb:c7:37:57:d7:cb:79:
66:3a:a8:4f:07:27:33:fc:2f:26:51:59:c9:81:0c:
4e:8a:8a:04:29:c3:65:79:f7:09:46:eb:af:e8:f3:
64:84:24:76:02:b3:f8:90:27:32:ee:41:8a:47:47:
fa:39:c8:92:48:01:61:a1:1e:c1:90:44:e0:5a:85:
6c:0f:21:03:4f:26:88:8b:a9:c2:40:1d:71:00:dd:
92:f7:ac:c2:e4:94:2c:13:8f:5b:31:29:cc:6d:a7:
62:e2:57:48:bd:d5:31:82:ef:fd:7a:f7:29:89:fe:
37:fa:4b:85:24:9d:2f:47:7c:87:62:71:12:11:7c:
d4:57:73:24:3f:e2:34:42:95:4a:d7:ba:b0:b7:c9:
9c:fd:cc:81:85:9d:6a:aa:93:f2:fb:d8:15:4f:44:
33:e9:be:0a:41:26:02:2d:7c:ed:e1:e6:4a:15:7f:
3b:cc:b2:1a:73:90:b2:2d:12:8b:c4:28:e8:44:72:
db:1d:cd:92:12:2f:e0:a1:6b:b7:68:cf:22:cd:32:
d4:c3:b4:99:0d:af:ca:65:6a:70:60:67:c1:cd:14:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:76:85:37:D7:B9:1B:0C:0E:6B:42:73:40:F1:25:18:16:4E:5A
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:fe:63:45:d2:5f:88:40:80:b1:e9:75:4d:ca:23:c8:ff:
20:41:29:59:36:23:c3:38:7d:e7:5f:2d:e6:23:02:df:cc:9c:
1a:4d:1f:92:0b:24:19:eb:e7:e6:16:b1:26:db:e8:da:92:9f:
bc:1a:b6:a7:ac:17:f3:78:d4:a8:de:05:1d:81:1f:67:ce:5a:
f5:6e:52:db:3f:b0:9d:04:2c:c3:0c:18:41:0d:d6:23:41:56:
89:64:73:db:2d:cb:78:c8:ec:d2:5b:d1:95:99:f3:b8:d0:67:
63:f8:4c:6f:3a:18:e0:a1:a1:d4:96:d6:4b:c2:95:4b:75:d3:
c7:79:17:4a:a3:94:d1:da:7e:22:eb:84:88:2d:fc:36:04:df:
89:84:f9:6c:1a:33:2c:55:0e:7a:93:08:8a:4f:e2:f1:12:c7:
8d:7a:ae:30:95:f6:dd:59:93:db:a0:cc:52:b4:81:52:e0:bf:
dd:14:1c:2a:b8:e9:49:f8:81:82:99:3c:c0:51:a0:00:c6:f0:
cd:b5:42:73:f7:6a:f9:5f:7a:03:2a:eb:4e:0b:7c:3e:7e:ce:
ad:85:7b:83:9e:1b:1c:a0:d2:21:bb:63:fe:64:24:7b:10:f3:
ca:c1:52:ad:74:ee:7e:c2:df:15:3c:e7:6d:8e:68:23:aa:fc:
99:9e:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:11 2024 by rpki-client on console-ams.rpki-client.org