Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: qPi7MlEbGFFtTpjjRDpyOYwEaxtpHkXehls958R9DZY=
Subject key identifier: 7C:BB:03:24:91:F2:FE:73:E4:F7:C3:C1:06:E4:3C:BC:76:54:3F:7E
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 018F874A9681045CFE636037F76189FD134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0147
Signing time: Fri 17 May 2024 16:02:43 +0000
Manifest this update: Fri 17 May 2024 16:02:43 +0000
Manifest next update: Sat 18 May 2024 16:02:43 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: dLBRWt8eHiGLzAKwJfMT4/FoVN2sf6S//9LL7KONrj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:96:81:04:5c:fe:63:60:37:f7:61:89:fd:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: May 17 16:02:43 2024 GMT
Not After : May 18 16:02:43 2024 GMT
Subject: CN=7cbb032491f2fe73e4f7c3c106e43cbc76543f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:7b:ea:a7:6b:72:ed:0e:19:7f:e3:cd:a5:
1d:bd:35:6a:87:d2:07:2c:c0:fc:52:0e:00:ed:9c:
10:d5:69:ba:70:0a:ab:b0:ef:92:7b:0b:69:5c:b2:
01:cb:7c:f1:cb:23:c1:23:ec:bf:b9:64:12:81:82:
9b:a8:94:be:cd:0c:e7:4a:f1:fb:8d:4a:f5:78:6b:
d3:43:88:d9:43:28:40:a0:eb:03:b6:ea:72:f0:e9:
e2:11:a1:4a:12:bb:97:98:09:1e:db:09:73:b0:b1:
89:c1:52:7b:aa:f0:52:03:30:40:3b:82:05:b2:37:
31:3f:12:c5:6d:13:2e:84:c6:f2:52:94:04:20:25:
26:5d:5c:83:64:c9:cf:40:f1:3a:56:b8:09:38:71:
94:95:21:66:5a:1b:b3:39:68:c7:22:db:a0:02:df:
fd:35:18:92:12:15:0d:91:4d:6a:b2:57:bd:ee:84:
62:0f:07:53:aa:97:aa:15:7a:67:88:0d:21:a0:b8:
0e:de:83:79:65:17:23:18:97:a6:76:e6:ca:a5:bb:
48:16:4e:3d:ff:ea:21:5a:a5:e6:d2:2d:90:b9:1d:
69:14:25:2f:3e:3c:4c:cf:8d:12:c3:a8:b4:2e:8d:
a1:66:85:af:78:3c:73:f2:7a:9d:f3:3f:c9:c4:bc:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:03:24:91:F2:FE:73:E4:F7:C3:C1:06:E4:3C:BC:76:54:3F:7E
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5d:90:1f:48:02:45:af:49:75:49:42:86:a0:de:e5:79:d1:
28:1b:82:d6:15:d9:e3:64:d4:7f:3d:a3:b3:77:ab:9c:81:99:
ea:15:ff:11:3b:c4:0f:05:a7:cd:1d:a9:cb:e2:13:18:67:cd:
95:d3:44:6a:9e:06:e1:ba:7b:a3:a0:80:1c:d0:1e:d2:56:d6:
49:30:5b:4d:9e:f5:86:fc:df:fb:b9:3c:71:db:16:b2:76:90:
2c:ea:72:28:7f:57:ab:43:25:70:95:f6:b1:95:aa:27:de:6f:
8d:ad:e9:ba:76:a1:e4:1b:f2:ef:de:7b:a8:15:83:d5:b4:6d:
02:7a:da:4f:c8:f7:19:f4:b6:7e:bc:b3:54:7d:b4:6d:3d:c1:
f5:05:0d:dc:01:51:f6:b1:7d:e6:51:4e:40:1f:17:fd:13:b4:
c2:07:68:7d:8c:02:05:f3:be:10:4f:ae:20:f3:a7:e4:e7:9b:
6f:51:9f:4a:ae:e4:18:37:53:ea:8d:22:22:bc:f0:47:41:60:
a5:e6:03:0e:f3:bb:ce:97:61:36:de:aa:59:ce:15:ef:56:83:
6a:bd:4a:eb:76:aa:8f:90:7a:b2:12:1b:ed:54:49:da:c7:50:
11:fa:b2:1c:f4:54:d7:7b:98:b3:75:db:d1:1e:d6:4e:20:54:
5f:59:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:53 2024 by rpki-client on console-fra.rpki-client.org