Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: Etks0IkAROc8lKYIe3q5SmNTd/ZGAFfpxT/dqCFf0Es=
Subject key identifier: 93:EB:75:2D:F5:31:CC:4F:07:82:09:D6:B9:75:9C:2C:27:6F:FD:9C
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0193512BEA95A37B949816972469035CCC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 12BB
Signing time: Fri 22 Nov 2024 00:00:52 +0000
Manifest this update: Fri 22 Nov 2024 00:00:52 +0000
Manifest next update: Sat 23 Nov 2024 00:00:52 +0000
Files and hashes: 1: 1kzbcgCnBar5pUMf8qAohvoF2H4.roa (hash: 7EjHpBM+rTFT0lK2nmGSwjwSYThS7qTFjOc7+Ci9G9M=)
2: S7lDiKRDO7mEOsNbvMeG9_DaFXs.roa (hash: AGs/JITjd+YenZ8VSSu6nwYtXP3pqQyzIVhGXRfI5J0=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: IJ9CmKsqhUgJUPSTzdQd53Pe4XGi01l6MG0rAMNJv/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:ea:95:a3:7b:94:98:16:97:24:69:03:5c:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Nov 22 00:00:52 2024 GMT
Not After : Nov 23 00:00:52 2024 GMT
Subject: CN=93eb752df531cc4f078209d6b9759c2c276ffd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:a2:1e:4b:10:83:f8:a1:29:ba:ca:b3:27:
14:04:9d:fb:93:cb:81:62:17:58:cf:8d:91:45:2b:
03:36:2c:a8:fd:15:0d:32:48:5e:da:c4:82:83:82:
9d:3f:50:f7:99:a7:8e:eb:27:eb:d8:c6:23:3b:ad:
8d:5e:18:9a:7a:e0:a5:13:ad:e2:c2:18:41:d9:b9:
1e:23:40:9c:49:16:08:8e:90:db:3f:10:36:ed:71:
17:df:47:f8:48:9f:6a:60:f3:6e:22:b6:61:35:44:
67:33:32:7a:df:15:fb:f4:2c:22:b1:00:62:a8:b1:
bf:fb:11:60:65:67:c9:72:1e:25:84:ec:79:c4:6b:
3d:39:6e:0e:fa:b2:ba:ad:1b:43:fa:7e:93:2a:ef:
7b:41:a9:85:19:f3:1b:8c:f0:fd:32:cd:cc:0f:23:
4f:5b:f9:ad:ef:e5:2a:4b:5d:06:6d:71:6f:0b:47:
61:33:b0:87:95:84:79:39:a8:37:73:05:2b:64:9b:
c9:f6:76:bb:37:18:3b:1f:aa:7d:b3:67:58:f8:bb:
74:76:82:22:ab:86:d4:6b:5b:38:48:d0:4e:a5:72:
45:40:f9:26:92:9e:bb:4a:ec:9c:10:c2:f3:6b:29:
84:b2:da:89:a1:cb:cc:97:e0:42:09:11:e1:bd:d4:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:75:2D:F5:31:CC:4F:07:82:09:D6:B9:75:9C:2C:27:6F:FD:9C
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:74:38:11:5c:ae:f8:00:f9:24:bc:35:5f:e3:c6:20:23:
99:e1:43:40:13:01:b0:07:3a:00:1c:37:3e:af:56:f2:59:bc:
ce:46:a5:12:ee:83:d0:6a:34:98:31:76:c5:1f:ed:ca:e1:24:
2c:ac:ac:ff:b9:05:cb:74:3b:9d:a0:34:f0:ee:5b:69:e8:aa:
8d:32:65:8d:0a:97:d7:d0:19:04:03:55:47:db:45:49:3d:e9:
b5:16:e7:c8:1d:76:69:e4:69:b6:04:fe:2a:ec:39:66:54:cd:
00:9e:cf:b4:20:6a:e0:ab:2f:84:0e:de:b1:6b:97:50:5d:54:
6c:5d:0a:74:4b:33:dd:8b:29:a3:c1:d6:56:cb:7f:e2:d6:b7:
78:dc:ba:13:8f:d3:0b:07:92:50:46:c8:d2:88:01:fd:47:4b:
68:19:2f:3a:5a:8d:c2:5f:cf:62:70:8e:52:3f:bf:a2:78:27:
45:bb:e2:2e:fb:44:6b:e6:64:ef:9e:99:a1:35:f9:dd:ec:ac:
25:22:72:95:89:67:c1:2c:67:c4:3e:61:52:cf:c2:ff:67:76:
bc:14:78:9f:ce:4a:12:41:d0:6a:10:ec:48:28:e8:6e:d7:86:
93:bd:ff:89:66:43:c2:84:07:66:65:46:7b:fa:fe:ed:91:02:
8f:b0:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:08 2024 by rpki-client on console-ams.rpki-client.org