Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: jzyKGIQO9j7zdUsDI5UfHCVBR9PK4SNK0G/+VrpLnVg=
Subject key identifier: FB:61:14:F5:E3:0F:61:DA:39:58:98:62:1E:28:FA:4B:AD:E8:3D:E8
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0193535100595EEBCD6AC969D4075F762D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 10:00:37 +0000
Manifest this update: Fri 22 Nov 2024 10:00:37 +0000
Manifest next update: Sat 23 Nov 2024 10:00:37 +0000
Files and hashes: 1: 3EDkeiZ-pEk4KRhPEtyIm27YvQI.roa (hash: g7oAGdrkQUpVFM/UabazrNcJ852wcQP1r8we6d5yg+s=)
2: 5nms_U5aWNZ3FJBIayzuX-d8Tl0.roa (hash: cDMWgeK6lGRTpehwwbMNqGgnOpbqWBu/6tBkHd/W9O0=)
3: 9rxi0MU3laUjIS5YBjjrbxYeCoo.roa (hash: HNKVqzhMd7OzET0xaGfpE0rdaMybaP2UC1aH/Z9xylU=)
4: GqKJyRYv6T8qRJLHP2kWVwQCxrQ.roa (hash: oOy89BwbYFAiLB6iarL2fZgUKe3x9eKWtJ2eEd747Fw=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: VKmi2EafhMrNMIf1pb2sfSEU/erdP+qaIXFak4uNCBI=)
6: cpXvJO60o6cM-i3u6MsNBFfBN-A.roa (hash: s9qBTfeDJZLzPZs4LaORpit0xUlmEkp35vzpQbgg+zI=)
7: rhbaRMvCqMCITfAkVJLYWci199U.roa (hash: ZCuhkdhraoVyA0M0qcITk5DIbywv8sE0xWeMYnpyU+8=)
8: x7_FxhkbTYN5vctwser8mjD2ksM.roa (hash: ixjMxfKrpLttKGHb7XcPwDYsOccvZHh4HS3oHHcw4V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:51:00:59:5e:eb:cd:6a:c9:69:d4:07:5f:76:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Nov 22 10:00:37 2024 GMT
Not After : Nov 23 10:00:37 2024 GMT
Subject: CN=fb6114f5e30f61da395898621e28fa4bade83de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:64:74:62:9e:2a:3e:9b:bf:74:40:a0:54:
f3:b2:bd:06:cc:ba:b7:8e:d9:ce:c2:3b:e7:f3:65:
a3:98:1a:2a:04:01:ac:61:9c:54:4b:a8:bd:28:d7:
16:de:1a:b5:39:84:5e:c9:73:0f:01:6b:ff:78:e2:
75:1b:55:d2:fe:51:36:76:c1:10:9d:5e:29:a2:79:
cb:b7:d1:ed:05:b6:23:22:0f:47:e7:9a:05:68:72:
75:e7:0d:bb:f3:36:72:c8:1f:49:cc:aa:20:2e:65:
71:6f:57:dc:04:c9:92:c5:58:b2:74:86:8d:a3:78:
b9:6d:3e:6d:64:5f:68:9c:d8:21:4c:2a:a5:60:02:
0c:80:af:a0:c8:f7:ed:fa:8d:c7:ee:c8:4f:88:f1:
f4:91:5a:d1:a1:aa:62:da:f0:c5:71:a0:6c:a7:72:
d4:7c:83:8f:c4:90:e5:8f:d8:81:6c:d9:9d:8d:7f:
48:6b:aa:ee:b3:3d:d1:df:ed:d6:64:0d:6b:bc:0d:
9d:50:85:d0:77:8b:52:26:d5:4f:42:04:1f:31:7d:
a7:55:93:d9:78:52:21:ac:f5:9e:9e:d3:55:2e:dc:
b1:0d:88:cb:07:4f:fa:02:50:35:6f:2f:9c:6b:44:
92:9f:f9:35:91:4a:94:e8:ff:ff:d8:5b:ad:71:19:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:14:F5:E3:0F:61:DA:39:58:98:62:1E:28:FA:4B:AD:E8:3D:E8
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:01:1f:93:73:b9:ee:4e:89:18:66:88:89:33:e4:9b:16:
cb:ca:c0:1a:6d:be:68:c9:4b:50:56:2b:eb:33:7a:08:fe:ca:
e1:d0:f3:56:15:84:84:80:8f:5d:91:7a:90:47:47:58:e9:3c:
76:00:66:49:ba:8d:1f:28:0d:78:00:83:b8:fd:44:03:73:6d:
2a:00:12:c8:b5:45:fb:a3:27:44:8e:c6:db:61:f8:33:8a:b8:
02:e1:d3:0e:3d:70:13:71:78:49:db:09:26:37:b4:a5:3c:a8:
c4:56:98:3b:d1:44:b0:71:b4:3b:e6:c3:3e:d7:2f:e8:66:56:
3d:9b:7d:c2:4d:33:e6:11:60:f5:5f:0e:7d:4d:12:aa:0a:5f:
b6:21:46:fd:0b:a4:54:9e:0a:9b:b3:6c:84:7b:33:99:43:0f:
15:70:19:c8:78:83:4c:71:34:cc:b2:f2:e6:70:31:70:17:5f:
45:f6:8c:cb:99:4e:03:9f:fa:e4:58:2c:65:5e:5c:e0:d7:b1:
e7:8b:e5:cd:f3:37:01:f6:f3:42:1e:7f:67:7e:f6:af:5e:aa:
cc:c1:e5:9a:93:f3:a8:55:af:58:e9:10:ec:0f:32:f6:f6:ce:
38:ca:7f:ea:fb:b2:19:7f:ec:b3:60:9a:c2:db:f9:ec:95:c9:
47:bd:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:45 2024 by rpki-client on console-fra.rpki-client.org