Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: 1UF8nHTvNVZ9GjszW0ammQ281vj8HOICvlOtUBKHObs=
Subject key identifier: 43:3A:CA:E2:0D:31:62:59:6F:F8:DA:8B:E5:C9:56:87:CA:2D:7F:C5
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 019356F693491445DB0F29A2DE3E7A3D141B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 06BC
Signing time: Sat 23 Nov 2024 03:00:20 +0000
Manifest this update: Sat 23 Nov 2024 03:00:20 +0000
Manifest next update: Sun 24 Nov 2024 03:00:20 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: CTMEZKlDX35LK/htFhjrKI64uc+wwbQCF9gsuC1YgXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:93:49:14:45:db:0f:29:a2:de:3e:7a:3d:14:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Nov 23 03:00:20 2024 GMT
Not After : Nov 24 03:00:20 2024 GMT
Subject: CN=433acae20d3162596ff8da8be5c95687ca2d7fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:47:5d:07:79:3c:e6:fd:dd:5b:f1:85:97:
00:93:a9:55:33:43:b1:f6:e3:3d:1d:c9:3c:27:25:
76:44:6d:d9:82:3e:83:b1:a7:5b:e6:59:c4:ae:20:
cd:5b:91:20:ea:ec:ba:57:be:0f:1f:b7:e5:06:ab:
b0:e3:00:c9:34:43:35:e8:34:4c:85:e1:38:50:ae:
9c:ee:b6:06:11:23:ce:14:26:84:33:c2:69:b1:2c:
b0:c3:35:a1:67:6a:24:5d:08:a2:d7:3f:ff:24:b8:
cd:80:b3:77:6e:f8:d1:58:27:ab:c6:b2:46:60:da:
b2:31:f0:e2:a7:e3:6d:43:38:b1:69:3d:54:fe:cb:
25:66:9d:97:2f:70:9d:04:06:7e:5f:ef:45:46:dd:
fe:e5:e5:83:ca:ea:63:93:1c:31:e6:39:f7:5c:9a:
9b:3e:1c:14:c5:2c:5f:64:e7:48:89:f1:84:2d:66:
c9:9c:40:06:8e:80:8d:dd:58:bb:bd:62:df:67:03:
69:4f:14:ce:e5:65:54:9d:4b:a7:05:bb:a0:42:d3:
b9:13:0c:01:d6:29:46:c2:67:86:e2:b2:5b:56:01:
f1:a1:bc:de:4a:81:1c:4f:2f:95:3a:d1:7c:8f:db:
3c:b9:44:c4:dd:4f:a8:3b:a5:a7:f6:56:5e:bf:a3:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:CA:E2:0D:31:62:59:6F:F8:DA:8B:E5:C9:56:87:CA:2D:7F:C5
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:40:11:0e:31:8b:cb:11:60:11:ca:e0:4f:b9:f0:00:c8:d7:
2d:6f:b4:b2:46:73:c1:dc:78:dd:d6:28:39:51:1f:2e:2b:bc:
15:a9:e8:3e:62:35:0c:22:e4:a1:30:92:eb:59:83:0c:f5:9e:
d7:bf:4f:6f:4f:e1:e3:4d:a5:a4:22:23:d6:f1:a2:48:b0:bd:
cf:af:60:6d:c6:49:bd:59:80:52:0a:50:69:47:56:00:9e:66:
c9:34:22:d7:e9:75:c3:da:1b:1f:4c:92:33:12:03:3e:d1:16:
fb:16:82:83:f3:6e:e3:a5:d2:cb:3a:9e:e3:06:07:e7:3c:4d:
4c:5b:19:af:4d:c0:cb:87:cf:d6:ec:b2:4a:72:51:05:9f:d6:
64:17:bb:b7:f6:a2:fc:1e:3a:38:eb:72:30:45:8c:80:aa:fe:
d7:68:58:bc:fd:1a:04:06:d5:83:76:cf:93:cb:db:4e:99:84:
6e:bd:d7:13:f9:d0:8f:01:76:47:cd:d0:52:29:15:c8:46:81:
a1:08:9d:bd:c1:71:3f:9a:34:f8:26:a3:20:19:f3:59:b0:6a:
7c:f3:c2:69:cb:4a:35:34:63:f0:0a:7a:8f:7c:f1:65:3c:c6:
99:97:72:b6:46:9f:c2:84:5b:27:39:90:fd:1b:f1:48:38:c5:
ec:87:70:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9pNJFEXbDymi3j56PRQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4
YTE5NGIwHhcNMjQxMTIzMDMwMDIwWhcNMjQxMTI0MDMwMDIwWjAzMTEwLwYDVQQD
Eyg0MzNhY2FlMjBkMzE2MjU5NmZmOGRhOGJlNWM5NTY4N2NhMmQ3ZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm55HXQd5POb93VvxhZcAk6lVM0Ox
9uM9Hck8JyV2RG3Zgj6Dsadb5lnEriDNW5Eg6uy6V74PH7flBquw4wDJNEM16DRM
heE4UK6c7rYGESPOFCaEM8JpsSywwzWhZ2okXQii1z//JLjNgLN3bvjRWCerxrJG
YNqyMfDip+NtQzixaT1U/sslZp2XL3CdBAZ+X+9FRt3+5eWDyupjkxwx5jn3XJqb
PhwUxSxfZOdIifGELWbJnEAGjoCN3Vi7vWLfZwNpTxTO5WVUnUunBbugQtO5EwwB
1ilGwmeG4rJbVgHxobzeSoEcTy+VOtF8j9s8uUTE3U+oO6Wn9lZev6O+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM6yuINMWJZb/jai+XJVofKLX/FMB8GA1UdIwQY
MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt
NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm
LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0ARDjGL
yxFgEcrgT7nwAMjXLW+0skZzwdx43dYoOVEfLiu8FanoPmI1DCLkoTCS61mDDPWe
179Pb0/h402lpCIj1vGiSLC9z69gbcZJvVmAUgpQaUdWAJ5myTQi1+l1w9obH0yS
MxIDPtEW+xaCg/Nu46XSyzqe4wYH5zxNTFsZr03Ay4fP1uyySnJRBZ/WZBe7t/ai
/B46OOtyMEWMgKr+12hYvP0aBAbVg3bPk8vbTpmEbr3XE/nQjwF2R83QUikVyEaB
oQidvcFxP5o0+CajIBnzWbBqfPPCactKNTRj8Ap6j3zxZTzGmZdytkafwoRbJzmQ
/RvxSDjF7IdwNw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:18 2024 by rpki-client on console-fra.rpki-client.org