Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: DtF4rABWB18PNoRG4r5Dle4aPJDvW1Sue9KKPCthbUk=
Subject key identifier: 1E:8D:1B:F3:B9:A4:96:3C:98:24:63:29:1D:9F:C1:17:37:2E:12:86
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 018F874ABD16A5082C87D13868656150B003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 114C
Signing time: Fri 17 May 2024 16:02:53 +0000
Manifest this update: Fri 17 May 2024 16:02:53 +0000
Manifest next update: Sat 18 May 2024 16:02:53 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: IGv//YctMU6njy8KiTvXuQYCpU2VZ/9I6Y8c+JjxFJ8=)
2: WrRyezZpiD80IRpQerJvFY2o57k.roa (hash: jwCGxl7VnhwGu8+Sz9xty1CdIyCub++bA9l19ulxzic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:bd:16:a5:08:2c:87:d1:38:68:65:61:50:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: May 17 16:02:53 2024 GMT
Not After : May 18 16:02:53 2024 GMT
Subject: CN=1e8d1bf3b9a4963c982463291d9fc117372e1286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:9a:26:81:27:9d:3b:ff:b3:9d:ea:52:33:
8a:e6:d4:8d:3f:64:c0:09:3c:9a:74:45:72:a8:0b:
c2:74:fb:cc:b1:d5:ba:65:e0:b8:5f:4a:ca:be:d8:
ec:f7:25:cb:7d:38:f3:74:1c:af:ba:7f:e6:38:86:
57:bd:62:44:3a:b7:56:ef:d5:6a:a4:41:91:4d:af:
a5:a6:b8:5e:76:c4:8b:e0:4d:df:d1:53:15:a5:9f:
07:92:15:30:c2:41:73:9b:6b:06:99:f2:04:a6:2b:
9e:df:91:9f:68:c0:26:a1:c4:ae:70:e8:64:f8:d7:
cd:92:d2:ad:55:0e:54:d8:70:4d:3c:e2:4a:3d:d3:
ac:3d:60:5e:38:7a:1e:aa:67:0f:03:28:ab:95:12:
0f:d6:3c:99:94:71:2a:cc:88:f2:28:d3:6f:b2:55:
38:09:b0:16:c9:de:16:89:57:41:07:36:e8:35:bf:
f4:9f:01:d1:e9:0e:60:bf:dd:b3:6c:9e:ea:35:9d:
b0:14:56:e0:e3:11:4b:a2:46:90:e8:16:4c:32:aa:
66:99:2c:62:bd:dc:e3:b3:20:f2:6e:c3:4f:35:81:
89:03:f4:ff:a6:b6:78:f0:5f:9c:c0:e2:29:86:6c:
23:fa:5b:49:b8:4c:94:38:99:23:3d:3e:4d:82:c2:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:1B:F3:B9:A4:96:3C:98:24:63:29:1D:9F:C1:17:37:2E:12:86
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:36:cc:3e:56:aa:2e:bf:d5:00:36:75:d4:7d:d5:0f:a2:
38:84:4f:ad:65:04:41:41:29:44:fe:d4:98:a4:53:46:fb:50:
ce:9f:7c:3c:dc:d9:38:ea:b8:c9:5a:5a:ea:37:09:ce:f0:8b:
1d:3e:00:45:19:3e:09:8b:ba:38:55:63:df:a1:e6:ce:f7:54:
7b:1a:47:5b:b8:b6:77:fa:74:36:98:b8:14:fb:b3:31:01:6d:
9b:d0:00:c9:a3:d9:86:e4:6b:e6:d1:f1:12:ad:9d:df:a7:b0:
a9:ab:be:f7:8c:02:0a:60:57:8c:dd:51:40:50:df:7d:b9:56:
9a:a0:ae:13:c2:ae:00:8d:ba:d1:bb:df:a0:ec:ce:cc:fc:4f:
d9:73:db:e9:b4:ac:f1:71:10:48:33:3e:22:a2:eb:b4:eb:75:
67:de:82:10:79:62:09:4d:66:36:19:14:60:a8:de:fe:ef:c4:
50:a2:12:10:7c:bb:44:d7:0b:ac:80:de:42:55:ee:83:04:e4:
9f:82:aa:dd:3f:95:6e:a2:92:3e:ff:17:08:1b:46:83:84:de:
e8:b6:80:d5:a2:6c:ae:dc:70:15:bd:44:7a:dc:f8:55:53:63:
ab:74:74:0d:ab:3c:07:b4:8b:06:e5:6b:70:59:90:bf:9d:89:
8f:ec:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:50 2024 by rpki-client on console-fra.rpki-client.org