Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: M/oDY7Ud+RQIircOqCzQf3wDFvHPE9JtgW/dBnSqrc0=
Subject key identifier: 5B:7A:A3:47:C8:CA:B7:B8:BE:CE:9B:7D:18:79:22:32:30:28:18:EB
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019362207A8E72B59F1574F8FE50349A38E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 06A9
Signing time: Mon 25 Nov 2024 07:01:55 +0000
Manifest this update: Mon 25 Nov 2024 07:01:55 +0000
Manifest next update: Tue 26 Nov 2024 07:01:55 +0000
Files and hashes: 1: 1-av5a6gJpoJHZ_N_6MDa4Tc6nVo.roa (hash: spfdsMcTsewX5m5o7eQd6vQaIlFc8/l0bgvBTIXtP2Y=)
2: Npmw2y3OLPNo8mkhQ0OU4-P0djs.roa (hash: 2mxski6u97/0G5wVYibMBcBCOr/A6RYXhLk1iaZussE=)
3: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: zuSEivfmp/s8f8toAo4LwVtWHfuVTf3KUvmONmOGv2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:20:7a:8e:72:b5:9f:15:74:f8:fe:50:34:9a:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Nov 25 07:01:55 2024 GMT
Not After : Nov 26 07:01:55 2024 GMT
Subject: CN=5b7aa347c8cab7b8bece9b7d18792232302818eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:a6:14:96:2a:82:87:5a:02:12:ad:44:80:
ff:04:b8:65:9e:77:f1:d0:b4:da:b3:04:c1:d9:05:
8a:12:bd:eb:f7:61:4b:62:1b:35:c1:75:44:c9:fd:
c2:42:a9:95:79:7d:35:03:cd:81:1c:3f:75:4f:e1:
a5:f1:ec:83:39:45:0b:dd:27:92:12:39:e9:74:04:
ac:ed:e2:3e:a9:7a:5c:6d:ce:f0:a0:27:c0:2d:f5:
5b:c7:bb:d2:f1:69:a6:2e:e5:02:8c:89:fa:7b:b9:
8e:fc:57:99:62:57:eb:ee:de:99:e6:b0:3d:f0:d7:
2c:62:a4:7b:91:08:66:98:0e:3f:3b:25:ed:4b:ef:
e0:60:f4:83:85:72:f9:d9:5f:07:63:db:39:3c:55:
9f:03:0f:a5:83:b0:95:66:5c:7e:72:27:48:55:b9:
c5:d5:60:f1:a7:78:2d:18:2e:81:9d:40:88:0d:cb:
a0:47:c6:b8:c1:dc:b4:cd:1d:c2:ab:46:b1:d7:d2:
2f:84:a4:83:31:15:64:e5:7e:72:3a:b1:90:33:de:
2c:ad:da:66:45:3e:87:bd:18:f2:ce:d3:c3:ce:31:
f4:b3:aa:bd:ea:94:dd:ba:cb:2e:ff:9a:e6:ee:06:
90:cd:e8:10:68:b8:7d:af:69:d7:9b:9f:26:1a:27:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:A3:47:C8:CA:B7:B8:BE:CE:9B:7D:18:79:22:32:30:28:18:EB
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:91:74:d0:bd:ef:29:98:3e:db:7f:35:23:d9:6d:69:46:
c2:9a:35:e1:6f:c8:85:7c:cd:be:b6:fe:57:ab:33:d1:05:98:
3c:fd:8f:09:4a:a6:14:1e:dd:93:5a:55:17:2a:3f:35:d5:dd:
d0:54:fc:14:8e:3c:79:b5:ec:0e:88:f7:35:87:84:cf:e7:92:
fa:7b:a7:d1:95:e4:9d:5b:d3:e6:59:f1:d0:ca:7c:1b:a1:c5:
fa:48:ac:d2:62:71:49:52:b0:4d:73:6f:6f:25:cd:f5:5f:9d:
be:03:3e:76:0a:25:a0:20:36:24:8a:c2:f7:86:06:9f:ed:55:
15:41:16:73:ab:e3:73:e0:99:35:00:25:70:f8:8f:31:db:09:
83:b3:31:a2:53:b9:b5:e5:24:19:07:4d:a1:88:0f:cd:61:ba:
b4:65:71:f0:38:29:b8:00:30:50:72:06:2b:1b:f8:62:ac:73:
fb:db:71:0b:d5:88:9b:59:21:bf:05:c2:aa:26:d4:c6:76:c9:
d8:a7:5c:b3:96:bd:41:89:07:90:79:2b:6b:9e:15:3e:31:2a:
82:57:f4:01:72:25:fc:34:fc:3b:6a:67:04:d6:fb:0f:21:fd:
e1:ba:ec:a2:a5:7a:02:b2:a2:ae:24:5f:01:84:63:84:4a:19:
f0:ea:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:07:57 2024 by rpki-client on console-fra.rpki-client.org