Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: ONRf9BCIap8A6n8PoC+w84h9q1B6X3Y/8D5rmKx4+u8=
Subject key identifier: 7E:86:73:B0:B1:D6:2F:7E:44:FA:A3:CC:F0:92:7E:A6:BF:DF:4F:87
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01936030C9B14D096114568BAB8C23463A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1375
Signing time: Sun 24 Nov 2024 22:00:30 +0000
Manifest this update: Sun 24 Nov 2024 22:00:30 +0000
Manifest next update: Mon 25 Nov 2024 22:00:30 +0000
Files and hashes: 1: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: hbgbkiZA71elKPmsFno5X4q+u6VYZKt5kiIP52fx/sM=)
2: aSmXro7WJi3RQU-0WohfEO90HiQ.roa (hash: bjXqKrzXk0ZWnsiTen0MeODqqJeqNan8TxyUQG3N9Xk=)
3: gKjRoJufT0XO9onmh9u9gyc84KA.roa (hash: DsBL54Ff7QvPbJj91FhZSvzcjqpgmjzEt2mcohbuX60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:30:c9:b1:4d:09:61:14:56:8b:ab:8c:23:46:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Nov 24 22:00:30 2024 GMT
Not After : Nov 25 22:00:30 2024 GMT
Subject: CN=7e8673b0b1d62f7e44faa3ccf0927ea6bfdf4f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:b0:67:57:03:c6:5c:ed:a1:7d:f9:4d:96:
7c:22:7e:d5:45:73:d8:4b:64:22:17:d6:4e:cb:89:
70:49:bc:b9:7b:de:9f:e0:2c:87:ea:e7:38:5c:f6:
e3:11:38:0a:f4:d3:77:88:74:44:35:82:f4:8f:81:
e1:f3:50:69:de:f9:35:0b:88:e9:2d:54:c8:c1:a4:
7a:d2:ec:cb:09:4c:14:91:2d:5a:72:08:14:94:ca:
79:7e:cc:b7:1c:6c:b8:e6:73:bd:d2:4c:5a:75:61:
60:ee:d6:a6:62:81:a8:fc:f7:86:e2:f4:fe:62:cb:
92:ea:e1:fa:bb:d8:be:64:96:3e:72:06:2c:cd:24:
25:40:2e:53:f4:75:1f:d7:88:04:2f:98:85:2c:d3:
1e:26:0e:45:74:d8:d3:71:83:d1:ce:c3:aa:fc:f7:
27:92:b0:19:bb:ce:81:a9:b1:eb:db:da:e9:fb:b1:
fa:54:57:7f:6e:00:13:71:6e:18:47:b8:8b:fa:c4:
a8:64:76:db:2d:8c:5e:c5:ed:b7:b1:07:56:20:6f:
b2:ac:96:be:30:b2:a4:e9:a6:ff:53:15:df:49:25:
af:bf:8e:17:9e:1d:ed:65:cb:4d:eb:c7:4f:95:36:
16:cf:f6:8e:3a:38:e2:d1:97:ad:2a:dd:43:78:23:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:73:B0:B1:D6:2F:7E:44:FA:A3:CC:F0:92:7E:A6:BF:DF:4F:87
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:fc:94:35:35:f7:64:ad:41:23:e4:c5:8a:48:a5:c8:8f:
86:c6:21:c9:a1:5e:2e:45:22:c6:09:5b:a4:0b:58:cf:1a:47:
06:d9:3e:d5:fe:59:4e:e7:55:77:2d:ac:c6:26:25:07:80:bf:
00:76:5b:b7:c4:66:d3:7c:2e:0e:2a:aa:31:00:f7:46:21:e5:
2b:1e:cd:8a:fa:ac:d6:d3:4b:59:e4:a2:b4:e0:5a:b1:85:39:
55:d6:56:a3:8e:d6:c7:43:33:de:82:f5:6b:01:c8:8b:74:e5:
07:f4:e1:d6:f7:ed:e8:35:17:ea:d2:70:08:41:84:94:f7:23:
67:bb:70:80:1b:26:6e:b5:05:8b:5a:fc:a5:f5:92:42:78:ce:
f7:9b:74:75:d6:aa:4c:c4:e0:93:b2:8b:d6:58:78:0f:78:47:
75:0f:a9:77:73:db:bf:15:c6:87:a8:24:bb:21:8f:21:03:0a:
c8:f0:e4:15:4b:0b:b4:14:29:db:58:85:6d:ee:a0:1b:44:fc:
0e:95:8c:6e:17:9a:dc:9e:24:16:21:ae:64:6f:c4:fa:a3:cb:
3b:5f:88:c0:77:0e:5b:af:eb:f9:79:02:99:cb:c8:a9:49:0d:
a0:12:70:b9:92:f9:ff:ec:90:ae:8f:4f:52:f6:59:e6:32:70:
aa:a9:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:04:05 2024 by rpki-client on console-fra.rpki-client.org