Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: w0anO8PTn9Edxm5Q44977cavFZI/lZxkLbC5jfIbP0Y=
Subject key identifier: 27:1B:01:B1:9E:D9:18:7A:DE:F0:D0:9E:DD:4A:FE:05:74:86:60:67
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0193579B85267D0189D71ED25A02A41544F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0341
Signing time: Sat 23 Nov 2024 06:00:30 +0000
Manifest this update: Sat 23 Nov 2024 06:00:30 +0000
Manifest next update: Sun 24 Nov 2024 06:00:30 +0000
Files and hashes: 1: GSXA3s5jn64og_rXKCBZDIqnKLo.roa (hash: VUM3R0A+HqG4tbXAuoqWxTiYWVL8M3ASZYrddjU7/AA=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: mdQrolqHcxp3vbsBqWCo8u6NOPAZrOTNqvAHgM4xbQs=)
3: V-RQatMmXEQ8B4EVtPbvPEv2EOM.roa (hash: WSWTlhBtcyenp22CA9hG970ARcisAfMDjCJqEGCzwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:85:26:7d:01:89:d7:1e:d2:5a:02:a4:15:44:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Nov 23 06:00:30 2024 GMT
Not After : Nov 24 06:00:30 2024 GMT
Subject: CN=271b01b19ed9187adef0d09edd4afe0574866067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:bf:20:bb:23:28:83:10:1b:04:a4:db:6e:
c6:31:f9:44:72:5f:b5:40:fb:be:c7:33:e5:33:23:
fd:d4:30:10:cf:6e:c5:8d:0c:a2:84:03:52:56:d9:
48:41:d8:54:89:5d:e6:f2:ca:a7:2a:ab:8f:04:e2:
49:89:7e:f7:91:28:49:a9:0a:a9:8b:a3:96:34:1d:
86:81:8d:3d:22:5b:67:a5:ce:1a:f1:62:a0:07:57:
0b:54:f9:ad:9a:bc:14:f1:16:fc:c7:5d:27:e3:16:
8d:6f:7f:b0:be:26:8c:53:9c:c6:35:a6:c2:a2:fb:
68:60:cc:49:a6:a5:f8:8b:3a:40:d9:5a:d3:3a:2c:
db:a6:a9:b5:95:a3:41:f8:34:ef:1a:e6:bf:9e:17:
3b:41:9e:31:b5:ea:0c:47:e0:33:1e:f6:c3:f9:83:
78:5f:24:ff:07:80:9f:3d:be:88:1d:75:58:de:07:
93:5b:15:e6:7b:7f:69:5b:9f:95:7a:97:f3:18:58:
57:f9:02:10:bd:5b:d8:af:16:86:6c:10:8d:b9:3b:
a0:f3:24:2d:75:c1:48:9c:e8:67:29:41:33:9c:ad:
31:3d:4b:31:9a:7b:c4:9d:c2:ed:84:db:76:7b:d6:
1a:68:25:92:da:59:97:df:f2:a4:69:71:d1:b3:76:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:01:B1:9E:D9:18:7A:DE:F0:D0:9E:DD:4A:FE:05:74:86:60:67
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:67:49:73:cf:ee:9b:8c:ba:10:fd:45:db:7c:da:37:f8:cf:
f1:05:ec:80:e9:6d:a8:a7:5f:53:3e:14:20:66:29:57:6c:f0:
5c:0f:b4:cc:d0:8f:7c:97:35:c2:bc:3b:b7:32:b4:b2:bc:d8:
b6:c1:26:5e:71:bc:a7:62:80:ab:8a:88:2c:67:9c:59:41:fd:
59:9b:ae:a5:48:c9:67:5a:8f:d0:6c:9e:89:fa:af:5e:12:8d:
ea:a3:25:11:57:ae:f9:cd:7a:e8:c9:fe:94:75:5b:85:5e:5e:
18:fb:af:27:03:db:0a:78:f9:45:a7:c3:0d:03:e3:89:a5:1b:
1a:77:27:b4:b2:4d:c4:5c:d4:70:53:e9:84:2e:01:2a:2e:0e:
62:35:26:f1:1e:0e:cd:1a:f9:da:28:b2:45:da:06:0d:4c:7b:
11:c9:5a:cf:98:93:ca:b3:f5:cf:8b:76:7d:f5:4f:0a:cf:b8:
5b:1b:82:91:9d:f0:72:8f:4c:b3:6a:f6:df:35:4c:d9:6a:2c:
43:91:a6:fb:f7:10:48:39:bf:9b:8f:be:21:17:ef:5e:d4:26:
a1:ba:39:31:26:36:1e:3c:f6:f9:f0:bb:5a:b9:9f:7b:18:65:
3c:47:0b:92:cb:0e:f1:10:95:4e:7a:0a:79:c3:e7:72:bc:b6:
82:5b:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:48 2024 by rpki-client on console-ams.rpki-client.org