Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: iKRuZn9RSe1RGw+wN1knRXMbRDylI/2BjIcI0mhJ1Dc=
Subject key identifier: 83:28:5A:5A:C9:76:2D:2C:CB:04:AA:B8:17:57:FE:F9:F6:A1:73:69
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019369D92B0F4F3962572369B473F07DC3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:01:00 +0000
Manifest this update: Tue 26 Nov 2024 19:01:00 +0000
Manifest next update: Wed 27 Nov 2024 19:01:00 +0000
Files and hashes: 1: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: 1VxU9TgkEab4DVAzPfYiEP45nUQtNSM6LB4CrKh4W0E=)
2: piPqXYJhlB7JXGgTB-BJaXnLsoE.roa (hash: T+HUNOw2Xxf2IgzZxl8Hdd50906vIeBURLcIJqfPhEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:2b:0f:4f:39:62:57:23:69:b4:73:f0:7d:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Nov 26 19:01:00 2024 GMT
Not After : Nov 27 19:01:00 2024 GMT
Subject: CN=83285a5ac9762d2ccb04aab81757fef9f6a17369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:06:c1:d6:5a:39:71:25:65:f8:04:3a:7f:
1c:7b:bf:10:eb:02:3f:60:e9:9e:66:05:6e:75:11:
a4:00:f9:ed:20:2a:68:7d:d2:e9:bf:c4:75:eb:9b:
fe:03:17:f3:9a:44:14:07:d6:3f:fb:cf:99:d9:47:
a5:66:d1:7f:55:f8:97:88:10:15:ea:ad:1c:6f:ed:
1c:e6:2f:cb:d8:6a:ec:22:5e:c4:d4:da:3c:97:ac:
e7:31:f5:ff:31:85:72:f7:93:cc:79:39:16:bd:cd:
fa:61:15:59:a0:f7:c3:16:a8:4c:1c:3d:8c:a8:e7:
74:8a:03:8a:62:be:c1:e2:f3:99:8e:fb:15:b7:37:
45:23:a9:ef:e0:2f:18:31:9c:f4:de:bb:82:05:48:
08:3c:8d:8f:0e:18:66:e9:43:7c:fb:59:3b:f1:a0:
17:b6:4a:e9:6f:48:fd:3e:0d:dd:bc:4a:3e:97:80:
68:ab:04:dd:af:df:9f:83:18:c2:b7:da:39:f7:69:
9f:7d:4a:37:9d:dc:5f:15:22:a6:58:e4:1b:6b:a9:
2c:d0:b0:fd:7f:2c:83:01:38:be:ca:9f:bd:77:c6:
33:2c:03:f9:c5:c3:62:0a:94:42:72:84:a6:34:32:
35:2a:49:89:a3:32:77:2b:65:75:5a:f1:0a:90:37:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:5A:5A:C9:76:2D:2C:CB:04:AA:B8:17:57:FE:F9:F6:A1:73:69
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:f4:88:92:bd:1e:5e:99:5c:08:56:74:59:fb:85:1a:5b:
52:21:c6:33:db:7a:52:4f:2f:45:46:ad:a7:82:ff:6a:1f:07:
39:09:b0:e7:49:9c:d1:f9:ed:80:db:ec:b5:2d:c0:6f:79:d7:
31:f7:d0:7d:7f:b9:09:5b:20:46:d8:73:bd:0b:31:53:9f:1a:
7a:a3:34:c7:4b:83:7e:15:f9:46:7c:1c:1d:fc:1b:0b:f5:ef:
dd:fb:42:9d:2a:d4:62:b7:c9:f5:66:dd:1e:b2:de:5a:6f:98:
87:27:df:ee:8d:1e:21:09:9c:67:98:dc:bc:08:3b:21:3c:a5:
80:84:d5:01:5c:c1:7d:40:b6:52:73:cd:1e:cb:bf:75:05:cc:
77:77:6f:47:03:aa:d2:f5:1f:3c:99:83:ea:a0:05:e3:e4:2c:
ef:20:21:d6:dd:6a:8f:1f:a0:21:72:86:86:7b:24:52:6e:b5:
90:8b:57:cf:9f:22:d5:e8:39:30:c6:98:68:42:a2:cf:41:10:
76:ed:25:4c:52:a7:eb:61:71:5e:f5:9d:42:48:41:4f:55:80:
81:a5:47:6f:4c:53:34:1a:ec:b2:5b:18:dc:91:6f:cb:69:da:
9c:d2:aa:f7:72:3a:a8:a6:5b:af:b4:90:6e:94:db:c5:07:40:
7e:f5:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:08 2024 by rpki-client on console-fra.rpki-client.org