Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: E0S+S5rP9vwFhbrwpkrIeEl5qmlSzFzTfMBfoy/3rA8=
Subject key identifier: 4D:F1:4A:E0:F4:45:DE:BE:01:77:3C:E1:D2:7A:F3:8D:57:F9:C6:75
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0193542C51A06BB01DBB4E1A62590C16E683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 033D
Signing time: Fri 22 Nov 2024 14:00:10 +0000
Manifest this update: Fri 22 Nov 2024 14:00:10 +0000
Manifest next update: Sat 23 Nov 2024 14:00:10 +0000
Files and hashes: 1: 3ibMriVI-ahyBNvfdhrXRrwenmk.roa (hash: nnhq9TJFkYttK0ahlz6f/2CIAUUqQpyuBuhZMeaV/es=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: DX2FgWpM7zJBWUGftIapZ7l5xRbKZrSbnqk/69s/jSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:2c:51:a0:6b:b0:1d:bb:4e:1a:62:59:0c:16:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Nov 22 14:00:10 2024 GMT
Not After : Nov 23 14:00:10 2024 GMT
Subject: CN=4df14ae0f445debe01773ce1d27af38d57f9c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:7c:71:da:d7:50:e0:f9:9e:e7:ae:bd:72:
9d:70:3f:e5:20:e0:97:37:89:88:35:6c:fa:67:bd:
5d:83:41:a4:5f:93:28:48:b6:78:a6:3c:78:c6:44:
c8:bc:6d:f7:cd:01:af:75:5b:69:a1:cf:ed:21:b0:
6a:14:e7:cb:b5:fc:49:c5:19:71:7e:a6:76:6d:0f:
78:0d:61:b0:db:f4:cf:19:a1:97:cb:90:87:9b:a1:
80:ff:bd:44:09:43:d4:1c:39:c2:72:be:40:8a:85:
64:0b:e1:bf:50:ff:7d:a0:32:2f:79:74:55:19:44:
74:00:65:17:ae:0b:89:b9:c0:e6:28:2f:b5:50:91:
d9:44:6e:6a:38:f5:99:07:36:37:52:42:a4:e6:8b:
f2:03:93:7d:9b:ce:43:5f:fb:16:30:33:5a:08:5d:
21:29:a0:d7:cd:a1:e1:cc:b9:e3:1c:63:4c:36:1c:
33:1f:88:23:3f:de:df:7d:7a:3c:17:92:64:2e:a2:
2c:59:e3:16:6c:57:59:10:6c:59:5c:c0:65:57:0c:
91:de:96:b3:e0:ce:6b:1f:57:95:8a:b0:be:33:e0:
49:88:20:cf:01:bd:4e:b5:ba:1a:14:4c:41:81:b2:
e0:bf:18:26:45:39:d8:84:7d:78:83:a8:18:85:d8:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:4A:E0:F4:45:DE:BE:01:77:3C:E1:D2:7A:F3:8D:57:F9:C6:75
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:bf:64:d2:53:04:22:9a:fc:7b:e4:a0:5f:5f:3f:d6:5f:
e0:7d:01:74:e9:26:88:29:22:d6:16:67:24:25:d0:45:0b:7f:
42:a5:92:e9:1e:f4:53:31:39:c7:47:10:76:94:94:01:17:8d:
40:0c:03:ef:95:09:fe:58:a1:2e:89:7f:f0:2c:57:66:95:34:
c8:e9:28:98:3f:84:a2:61:fc:7e:39:44:c6:fe:92:50:3d:15:
e4:c8:3d:08:ca:f2:13:c8:6d:f1:c0:26:4e:02:69:d8:47:e4:
c7:ff:ab:24:29:d4:f7:32:f6:8c:db:8d:5e:09:8a:3b:ed:40:
1b:51:2c:f7:18:19:2c:02:26:16:89:2c:55:38:70:47:d7:05:
70:5b:27:20:e0:12:dd:95:28:66:4c:c0:42:28:ba:2b:40:32:
31:e1:fe:22:f8:f8:57:a3:56:4b:86:9e:94:a8:ab:60:1e:d3:
7b:4e:9c:c4:71:b7:54:c1:2f:bf:77:2a:46:71:80:99:9a:8d:
77:b6:b6:72:d5:48:f5:1b:9b:6c:87:4a:56:a8:9f:29:f8:d8:
30:7c:24:64:c5:9e:39:a7:99:95:45:86:df:68:14:75:22:e9:
49:21:64:a9:2d:a7:14:ad:f3:f9:2a:f7:9a:19:e2:dc:d5:13:
7d:de:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:57 2024 by rpki-client on console-ams.rpki-client.org