Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: fnx3CH809mnIkYTJJBisxHaS2cz6dkBWiArQBsRXSl0=
Subject key identifier: C9:80:20:7E:3B:A8:96:83:50:DB:75:D2:55:2D:30:2C:C7:CB:53:6C
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019358E543F8FE18907B966023BBD96E57B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0BCA
Signing time: Sat 23 Nov 2024 12:00:40 +0000
Manifest this update: Sat 23 Nov 2024 12:00:40 +0000
Manifest next update: Sun 24 Nov 2024 12:00:40 +0000
Files and hashes: 1: XAxc8nrxQe_9foz5eXAz5zRx75o.roa (hash: 44ppZwWS+xmwT7dXs8B2ZU09bH3kbsTFiWSjnn9xSLM=)
2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: DKsFN8VVy+SN/ikY/ZBkoTCZnFEt0jCIHR4184uGgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:43:f8:fe:18:90:7b:96:60:23:bb:d9:6e:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Nov 23 12:00:40 2024 GMT
Not After : Nov 24 12:00:40 2024 GMT
Subject: CN=c980207e3ba8968350db75d2552d302cc7cb536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:c6:88:0e:c7:46:07:87:c4:8a:05:60:98:
b2:5b:84:6b:6e:8a:20:0f:47:03:6b:3a:0d:58:51:
67:6b:6b:90:56:13:cc:b2:da:80:d6:b9:d1:bc:df:
19:80:45:55:22:6e:79:a3:b4:f4:7d:c4:e5:af:1a:
fe:31:cb:82:f4:90:68:a7:a0:98:f6:5b:9f:7c:07:
de:08:b2:37:38:1a:64:82:4e:40:d5:aa:95:6c:25:
1c:e2:20:76:35:3e:e7:53:aa:7d:a7:4b:1c:fa:4d:
d9:b9:b7:80:cc:b9:a9:f7:ab:02:cc:a0:7d:87:87:
01:66:07:56:8b:18:f1:aa:81:ab:a7:c9:ce:8c:6d:
bc:8d:bc:64:9b:4a:b8:b9:87:d4:4e:5b:60:55:9d:
b5:49:e5:6c:be:47:d2:d1:85:a9:b2:d5:e0:65:3a:
58:2e:2c:b9:16:a9:a4:45:04:16:a3:33:0b:8a:c7:
fd:5c:35:a3:36:10:5a:01:48:63:e6:86:b0:92:25:
eb:56:2b:ad:c0:20:54:31:58:e1:48:a5:5f:e1:cb:
e6:6d:51:58:fc:03:81:09:b4:84:be:90:60:b4:c0:
c1:9a:1e:fc:e7:ed:09:35:90:92:83:a6:67:ef:30:
ff:35:f5:af:d4:90:2a:b0:82:35:1a:02:d3:2b:ea:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:20:7E:3B:A8:96:83:50:DB:75:D2:55:2D:30:2C:C7:CB:53:6C
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:bd:f5:70:4c:90:8c:2e:4e:77:74:0b:15:6c:60:15:a7:
74:8c:29:2c:2c:93:40:90:85:58:94:be:67:6e:ec:a6:a5:34:
c8:71:0e:c2:6b:55:cf:24:f4:4c:da:42:32:16:ad:f8:d7:64:
e6:8b:bb:16:1f:07:fa:29:3c:05:5a:99:80:0b:59:55:e3:7c:
2e:f4:43:9f:fc:10:02:4f:fe:b4:99:dd:17:0a:09:66:bc:58:
76:79:c0:95:a3:9a:b9:6c:69:f5:d8:1f:a1:b8:32:ee:7d:63:
bf:34:da:04:af:e3:ae:0e:5c:bf:1e:42:ab:d0:9b:6f:ee:41:
2d:8e:14:dc:7b:1a:7c:b1:69:97:a7:41:f1:70:56:b4:90:da:
61:00:f8:e5:5a:2d:c2:5d:e4:83:52:68:b3:07:69:c7:a7:30:
d0:75:4d:39:80:ba:41:42:da:4b:75:38:94:a0:2c:0e:b2:d1:
05:f1:40:3c:c9:56:5c:a7:85:f8:65:57:26:6b:98:97:f4:df:
60:fb:bf:43:29:7e:0e:c3:8c:e5:54:de:50:b5:08:94:66:61:
e0:b7:ab:e8:96:98:c5:2d:df:a5:30:56:d5:5b:d1:ec:a0:57:
ae:ed:7c:37:4a:45:b8:2f:1f:f4:91:54:33:8f:4c:fe:53:37:
29:12:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:39 2024 by rpki-client on console-ams.rpki-client.org