Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: kqP+q7hru2RaY+ng+vqKhekgktP8VN5ru7NcMoF2o3M=
Subject key identifier: D2:A9:E3:60:9E:BC:F1:4D:88:4F:C0:00:3E:81:2F:49:97:A6:40:FA
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 0193572DA00E4D99AEBD44F2906FF4C95921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 0D4D
Signing time: Sat 23 Nov 2024 04:00:28 +0000
Manifest this update: Sat 23 Nov 2024 04:00:28 +0000
Manifest next update: Sun 24 Nov 2024 04:00:28 +0000
Files and hashes: 1: 7IxbqdyZBE9Zk69vTsT_xk23m-A.roa (hash: 5QXggjbytLCKn3Xb5JBghlEJV/TueJEzChgbLthvnpc=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: KRPaYdDi7D93r0ri9jz9pG7Ki2apZQanJStPJuudU5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a0:0e:4d:99:ae:bd:44:f2:90:6f:f4:c9:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Nov 23 04:00:28 2024 GMT
Not After : Nov 24 04:00:28 2024 GMT
Subject: CN=d2a9e3609ebcf14d884fc0003e812f4997a640fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:48:f5:a0:fd:a7:2b:93:3f:97:3f:ae:b8:
0f:d0:dc:f9:d2:fe:2c:cf:6d:3c:08:2e:6b:42:28:
67:81:69:a7:2e:94:68:e3:15:16:37:de:2b:09:05:
bc:47:14:26:ad:81:4c:61:39:d9:82:00:3d:59:93:
17:b1:e7:82:4e:ca:b2:09:cc:0b:e2:06:72:31:00:
19:7a:8f:9e:d7:f8:53:8a:05:2f:63:3b:51:bc:d9:
91:3c:60:e2:97:6a:ad:65:ba:f2:d1:98:05:0c:3f:
74:60:55:15:f2:61:a6:84:38:3e:b7:86:62:54:06:
9c:e1:61:da:d2:cb:6a:15:b3:d7:95:82:12:c5:3d:
6a:9f:58:a3:cb:f9:4a:d8:cb:17:72:8c:aa:1f:fc:
e9:88:a8:1f:19:42:95:9d:82:41:8d:c5:a9:63:cf:
b8:72:8f:7a:de:cb:6b:e6:c1:ae:52:9d:58:6e:7e:
95:20:84:aa:a6:68:70:f0:c7:43:4a:5a:4b:5e:60:
ce:23:ab:d1:9c:4b:5b:6b:d1:76:15:0e:3a:80:f9:
35:d7:d5:01:db:ce:08:4b:2c:b9:e6:20:8b:be:2f:
f5:82:26:c6:0d:0f:cb:cf:0a:fa:4f:bc:11:1d:76:
a7:67:cd:a5:5b:bb:68:5a:7e:44:28:65:bb:4c:d9:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:E3:60:9E:BC:F1:4D:88:4F:C0:00:3E:81:2F:49:97:A6:40:FA
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:bf:4b:83:c0:64:08:1b:35:8e:30:4e:80:30:02:3e:41:
48:d4:c5:d8:46:84:86:8c:9d:bf:e2:e1:ad:5e:2a:90:fd:eb:
6f:d8:97:2a:c3:13:35:fb:44:f8:35:41:21:24:f2:ca:dc:be:
dc:11:93:51:75:1f:bd:b3:08:b2:e0:3c:55:db:b4:8d:79:55:
5f:e8:ef:f1:6a:40:ec:94:d3:87:e3:f1:96:20:c0:b8:12:1a:
85:b5:25:c9:91:79:c6:9d:37:bd:30:05:ce:72:a5:21:2e:32:
ee:a0:9d:4a:a9:df:2b:9c:d2:6d:9b:3f:a6:f0:93:a1:4e:62:
f3:39:58:01:7d:8a:5d:64:50:f4:5e:b3:ce:d9:09:d0:bc:81:
03:2a:3a:91:5d:59:b0:a2:0b:aa:3d:80:7d:0c:1f:9a:f7:ec:
e5:74:b7:6d:a8:97:69:74:83:85:ab:fe:b2:40:5d:0c:04:dd:
ba:09:e3:76:65:93:a1:b0:e8:a1:6f:ac:30:b8:06:c7:41:fb:
35:ae:0d:4e:df:77:2c:37:6b:48:1a:5d:7c:01:9e:f7:a5:b4:
dd:94:4c:b3:9a:24:73:5a:ca:5a:1a:3a:c1:06:e7:d1:9f:03:
31:e0:02:a8:9c:26:f0:19:fa:f1:90:f4:85:40:0b:94:79:03:
c5:db:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:14 2024 by rpki-client on console-fra.rpki-client.org