Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: L5kVMOkcLZ59rNgTZWAHVag+rgxXITpPezzepC9vW38=
Subject key identifier: 4B:32:50:E2:73:E4:15:3C:51:D2:D7:4A:98:F9:A2:77:42:81:B5:60
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 0193561AECAEA96AB5768DFE5C295C8483B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0250
Signing time: Fri 22 Nov 2024 23:00:25 +0000
Manifest this update: Fri 22 Nov 2024 23:00:25 +0000
Manifest next update: Sat 23 Nov 2024 23:00:25 +0000
Files and hashes: 1: 2-KvKLcygQV1bctBugvX4im-EIE.roa (hash: ap3oo5NJBAoMeclF5N2aYwleeNlIxlA+UdGTmZera7E=)
2: M3K_1qnG9z5IJVLaDf99BD1xBU4.roa (hash: 1lmImPzPVcwHTjOT4rUdUlCyjJZq3v8qjCaJ26km/NM=)
3: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: aNq4pfOy5ZUCn+/0DZeXCM2OEqu/aQDhNogfRK+0LQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:ec:ae:a9:6a:b5:76:8d:fe:5c:29:5c:84:83:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Nov 22 23:00:25 2024 GMT
Not After : Nov 23 23:00:25 2024 GMT
Subject: CN=4b3250e273e4153c51d2d74a98f9a2774281b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:ca:65:9a:17:fd:72:1b:f7:14:82:47:af:
3f:41:d7:a4:ec:1e:71:56:5b:95:76:6d:2c:28:68:
08:24:38:8f:ba:68:ce:7f:df:35:22:16:f5:ad:85:
10:8b:89:6a:45:fe:91:b3:7b:32:ad:75:ea:3c:2b:
2a:15:2a:8b:03:f2:c8:f6:3b:7b:80:18:5e:ef:fd:
2a:d3:55:49:c7:c6:a0:d4:82:91:74:1c:8d:ea:11:
96:30:68:59:a8:a5:fd:1f:43:25:3a:f1:99:81:92:
81:7c:26:c4:98:88:02:d0:d9:14:b9:af:49:6c:9c:
2b:00:6a:68:6b:eb:3c:c1:e9:ee:dc:38:db:46:6f:
10:be:07:8e:9c:d7:b7:91:3d:ba:ae:7b:64:5b:11:
68:5e:2e:38:41:dd:93:75:2a:2d:23:13:af:ef:69:
d2:a1:ce:3d:26:cf:d9:41:23:cb:e1:8f:cc:f3:2e:
27:91:c5:d4:a8:84:68:f3:64:69:c3:3b:b0:a7:d3:
52:07:59:fb:51:f2:9c:be:91:3f:02:9b:d7:b4:cb:
06:48:f5:19:d5:0d:7a:58:41:48:27:8f:f2:25:7a:
9f:58:e9:3f:8b:e1:7a:fb:b1:c4:bb:81:c9:d1:e5:
e6:59:76:7f:0d:e8:95:2a:8c:5c:c2:75:74:07:92:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:50:E2:73:E4:15:3C:51:D2:D7:4A:98:F9:A2:77:42:81:B5:60
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:5d:2e:26:b2:ac:85:14:83:fc:e6:93:d9:85:d9:79:fa:
37:dd:1a:c9:2f:e5:b4:84:aa:f6:61:66:94:78:98:ba:28:3f:
0a:2d:1e:32:5c:65:7e:03:33:b9:f5:13:18:38:e9:99:39:ad:
57:bf:2d:c8:fc:73:1f:1b:ef:cb:8e:d1:44:d5:49:c9:2a:b6:
a7:85:b8:9d:4f:97:f7:ef:e7:ea:47:16:0e:7f:d6:9e:2e:59:
72:95:1e:a2:19:d5:df:bd:a5:a6:77:d3:a9:bf:0c:0e:a6:ac:
50:fd:e0:38:6f:bf:f3:a3:42:de:4c:ae:e5:56:af:2d:d1:ad:
d5:5a:81:6b:3e:86:87:64:67:91:d0:9c:2c:48:c4:93:15:1f:
92:b7:5f:6e:4b:20:e9:81:c6:fd:92:53:fb:eb:c5:11:38:68:
22:f2:d6:f8:b4:ef:ea:d4:58:67:3c:dc:c9:a5:b8:f5:58:b6:
5e:cb:8c:b1:a3:f1:e4:f1:31:d2:fc:74:6a:e8:85:db:d8:72:
2a:8b:bc:ea:ee:9c:fc:f9:2a:c2:d7:b1:84:46:1d:8a:3e:cf:
2a:fb:b0:e3:56:b8:ca:8c:b7:cd:72:e2:36:a7:85:76:86:63:
5f:8b:16:be:09:d6:2d:77:e9:18:45:66:2e:15:fe:32:57:78:
74:ed:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:53 2024 by rpki-client on console-fra.rpki-client.org