Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: sW38XSiSuhcQtSGg6D9wJ+0wVFun2Gv+UY+BxauI9z0=
Subject key identifier: 05:8D:04:FD:90:90:8C:33:4E:20:32:4C:A4:F1:E4:DD:9D:05:50:A2
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 01902A5D3B2806D6617000932DDDAED865BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 021D
Signing time: Tue 18 Jun 2024 08:01:11 +0000
Manifest this update: Tue 18 Jun 2024 08:01:11 +0000
Manifest next update: Wed 19 Jun 2024 08:01:11 +0000
Files and hashes: 1: 2h0xLKTvbAFUCKBb0GLzF-kTp9E.roa (hash: IBPpbdr4FYNEeuhzE5uQ1anRKu3OL8uNtGSq/SfSrD4=)
2: iY3et5_qCmfHpDxIMDVtH8XeefI.roa (hash: E5gGK8Afp5xLD1HyORonjNCAOpRF1Yc+zmd5NEplloI=)
3: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: zIpCo9GBPQYz1PbNeub0Vhh45KDOFT6l0PxR8tMd4y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:5d:3b:28:06:d6:61:70:00:93:2d:dd:ae:d8:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jun 18 08:01:11 2024 GMT
Not After : Jun 19 08:01:11 2024 GMT
Subject: CN=058d04fd90908c334e20324ca4f1e4dd9d0550a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:d6:9d:02:c1:55:15:e9:09:e0:18:19:14:
4a:b5:9b:0f:26:01:8a:47:77:d7:02:33:68:c7:f7:
97:7c:da:8d:89:ad:d5:d6:90:e8:c5:28:5d:30:5c:
12:e2:ab:8b:6b:8b:7f:00:13:13:7a:50:1f:57:91:
da:f6:bb:b8:1c:d9:8c:e6:20:74:b9:4c:ba:11:53:
26:67:71:a1:4b:54:71:df:14:d5:18:61:a7:65:af:
8e:13:09:7c:0b:e2:ac:48:fa:da:1c:d6:e8:98:68:
8f:34:cf:01:1e:b2:ff:e2:2c:c4:92:58:de:9e:dd:
dd:2a:43:cd:10:af:75:a8:18:28:9a:20:bd:85:fb:
cb:42:d2:a1:0b:8f:96:5b:8e:a7:53:52:59:db:68:
52:e0:55:aa:6e:6a:a1:98:98:44:ca:44:57:79:32:
fe:b7:e3:0d:ae:63:61:41:6e:2e:71:bb:22:91:47:
94:60:52:53:37:a4:b0:31:8a:72:da:5b:d1:1d:f3:
57:a6:61:c3:a8:21:bf:0f:be:0c:9d:8a:8a:71:ce:
cf:d1:d1:21:1f:ae:e0:0a:7e:e0:72:3d:74:e9:0a:
dc:18:21:91:e5:62:03:b5:a1:82:7e:72:ea:2b:e2:
07:77:ff:8e:f9:f0:98:71:d1:98:5c:85:81:a8:a6:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8D:04:FD:90:90:8C:33:4E:20:32:4C:A4:F1:E4:DD:9D:05:50:A2
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ae:40:8a:7a:ea:27:dd:39:b4:7b:7a:e5:e4:52:98:6d:d4:
fa:ce:ff:62:7a:bb:bb:29:28:53:75:25:fc:8a:86:39:2a:82:
74:f3:a1:c5:89:ac:68:58:73:d5:03:7d:65:56:c8:5b:46:9f:
ca:5d:f2:a2:db:29:42:64:3d:d5:81:dd:97:26:bf:ef:ca:41:
28:d1:2b:68:4b:34:a2:99:88:37:3f:b8:51:26:75:19:f5:f6:
e8:55:f7:73:de:82:4b:66:7a:2a:96:ac:de:e9:b4:39:00:ad:
85:09:51:0d:1b:8e:09:39:8c:ea:53:10:f9:d2:0d:48:f1:fe:
3a:74:16:a2:79:53:5f:ea:14:b9:ef:50:06:6b:a1:3d:68:e3:
4b:f0:55:d6:5c:3f:4e:ba:22:44:7c:ba:f4:c2:f2:a9:b7:29:
85:78:eb:12:0d:e7:09:10:15:2f:32:91:1a:1b:64:1d:31:cb:
a0:f8:36:f1:90:65:b6:57:71:0e:3f:01:b0:fb:c8:ab:a7:f7:
e7:d2:76:c7:2e:76:3d:69:95:08:f3:b7:43:0d:12:3f:4f:e3:
f2:55:f5:46:ed:fa:56:40:0b:ed:e9:05:40:ef:a9:51:f4:d6:
a9:77:6f:81:c2:79:98:04:37:be:d7:6f:d1:0b:ed:c3:f4:fb:
3b:51:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:11:47 2024 by rpki-client on console-ams.rpki-client.org