Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: SxwwuiOVej+2eh3YWZkZN9YUOMdFWXNwAk0B/rE52O8=
Subject key identifier: BF:93:1A:91:BD:86:B1:62:84:7F:F9:6E:10:71:2B:38:8C:76:9F:AA
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01906DF40E93010889382296FF3A33D36F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 11F6
Signing time: Mon 01 Jul 2024 11:00:29 +0000
Manifest this update: Mon 01 Jul 2024 11:00:29 +0000
Manifest next update: Tue 02 Jul 2024 11:00:29 +0000
Files and hashes: 1: J2gh3fq6KkUW1XOANP1agn_8UxE.roa (hash: wD4P+2Fv6mBJPMN3iV9vcLDBeeQtftBwaUlmc35548s=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: 1l/NmYeRfgi7nZ0r+n8JfATpIOhnpM04pjPbwIlJU3A=)
3: W2MqcTW8xek0UjMyjxkdeLyPA_E.roa (hash: zWi5Zp4J7mrDMU4EuUjmgkUct/nkEnsFvDuiRaVf5wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:f4:0e:93:01:08:89:38:22:96:ff:3a:33:d3:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jul 1 11:00:29 2024 GMT
Not After : Jul 2 11:00:29 2024 GMT
Subject: CN=bf931a91bd86b162847ff96e10712b388c769faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:12:d7:81:1f:e2:b7:e6:3b:b3:aa:3b:7b:
15:b6:98:81:68:db:b0:2a:df:69:8b:ec:75:86:8e:
04:61:f0:a4:74:c8:76:bc:ef:6d:c7:30:5a:56:28:
bc:48:89:85:62:a3:de:92:54:4b:06:2f:89:21:a5:
09:ce:00:f8:cc:7b:91:d0:23:18:b2:18:1a:d1:27:
45:91:22:0d:dd:cb:f0:7f:15:37:9c:c6:f3:6f:a3:
dd:64:68:25:1e:40:cd:37:51:44:00:16:cb:f8:98:
74:50:13:e8:bd:25:cf:f8:a8:d4:2b:c2:23:3b:64:
da:ec:6d:72:31:fc:42:c0:af:d2:5b:a8:32:b9:56:
1f:ad:f6:a1:dd:6b:ca:d4:a4:dd:f5:4f:3d:42:ac:
d9:1f:70:99:b7:5c:98:d9:ca:be:34:79:38:0c:0c:
45:6e:47:80:8e:1f:ec:c9:44:c2:ab:1b:51:77:9e:
f4:0f:79:96:53:7d:d3:34:01:68:21:42:6e:53:5a:
d2:cd:bd:17:cb:82:3c:52:72:0b:1f:50:75:fc:43:
23:8f:95:e5:77:6e:92:0e:0d:5b:b2:78:1e:9a:7c:
1b:b3:c7:a8:c0:f9:7f:71:a2:7e:86:1d:64:ce:7a:
ac:40:15:67:a2:bd:1d:86:25:8b:07:d0:59:50:03:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:1A:91:BD:86:B1:62:84:7F:F9:6E:10:71:2B:38:8C:76:9F:AA
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:84:c1:09:64:68:c7:f2:fa:0e:d2:b5:b7:3b:8f:f9:02:cc:
dc:7e:be:d0:5c:f7:bb:79:a3:e4:4f:d2:fb:14:04:13:5f:21:
6a:60:94:2b:4f:83:72:51:94:a2:d3:9e:56:d6:aa:21:1a:33:
45:6c:45:39:a3:47:6a:5f:33:32:fd:db:15:d1:4f:ea:6a:f7:
cb:50:29:e0:18:67:40:68:f0:fa:60:c8:57:dc:20:10:a2:36:
b7:ca:d0:fb:d0:e8:a9:55:f3:43:c0:2b:41:a8:5b:52:d9:45:
ca:f3:0f:ca:f1:59:d4:3e:d4:a8:b2:ca:0a:a0:aa:0a:78:70:
fa:c9:dd:0b:76:de:87:1b:d1:50:cf:ae:3f:79:c1:f2:f8:bc:
4e:f8:63:93:e4:88:5e:d0:a5:20:db:1a:a4:bd:42:ec:f6:d1:
fe:c4:03:22:d5:ad:be:61:c4:b7:64:59:70:8e:e1:1d:26:de:
de:51:ac:3a:bb:3c:67:93:17:16:24:fa:8e:26:e2:13:1f:08:
01:56:a1:59:ff:a8:3b:94:23:e2:15:89:e0:21:42:d5:ca:30:
2e:b6:91:23:ff:55:48:68:91:93:d0:2f:c1:94:bc:95:b3:26:
55:06:a4:4b:84:26:3b:ba:0c:63:88:20:9e:00:dc:50:93:d6:
3f:4a:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:59 2024 by rpki-client on console-ams.rpki-client.org