Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: oaVYpiSzvoHG3tRXgfpFrFCebvCM6Hvkwz21Iaf94kY=
Subject key identifier: F8:47:7D:AF:D8:64:16:9F:45:F1:96:CB:CF:D6:83:B7:85:E3:05:B7
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0193591C5DC62891B82916F5C53E490AF072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0C30
Signing time: Sat 23 Nov 2024 13:00:51 +0000
Manifest this update: Sat 23 Nov 2024 13:00:51 +0000
Manifest next update: Sun 24 Nov 2024 13:00:51 +0000
Files and hashes: 1: JCUwibuFKIr_u5CBfNqhZ56CgTk.roa (hash: VJ/GhrdsMGqkwkObxfySxch7qO+77No4jGKQK4ytlIs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 56p9iGuj8lVvbSEf8MbP+f4wrHqG7775TL+cbVugOH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:5d:c6:28:91:b8:29:16:f5:c5:3e:49:0a:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Nov 23 13:00:51 2024 GMT
Not After : Nov 24 13:00:51 2024 GMT
Subject: CN=f8477dafd864169f45f196cbcfd683b785e305b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:44:3d:dd:e5:8e:3b:94:a3:4f:51:f1:cc:
73:57:40:f2:e4:2e:a3:73:89:36:8a:2c:e3:f6:8f:
1d:a5:8c:e4:7e:07:4f:04:29:d1:d0:92:fc:d4:aa:
c7:a2:e8:1e:68:c7:20:40:8b:e9:35:de:fc:c6:25:
48:7a:3b:15:ea:1f:69:c8:e4:71:3c:1e:15:f3:76:
03:4d:67:5e:f0:a8:79:bf:db:7b:d2:f7:bb:44:d3:
e4:eb:9b:1d:4e:45:bb:27:5e:ad:e5:c9:4b:0b:8b:
0d:67:b4:b1:4d:d1:8b:61:df:63:f5:26:28:a6:85:
39:bf:b7:cc:12:95:3f:1d:50:53:7f:c6:f4:67:48:
0d:4d:ba:5c:3e:be:b7:68:ef:d6:30:ae:70:fd:8a:
3e:b1:40:cd:39:95:05:db:4e:25:14:7d:ec:cc:77:
39:4a:34:fe:d9:fd:ea:25:d7:40:2e:fa:10:9b:23:
bf:5e:59:44:3f:00:d0:91:b3:55:a3:5a:a2:c1:52:
bb:f9:ca:89:37:23:8f:46:c7:17:e5:fe:6e:21:5e:
0e:25:22:ba:d6:71:32:7d:4d:c5:22:51:2e:c7:8d:
d7:3c:37:42:fc:67:48:1b:a2:09:b6:10:3f:48:92:
f1:7c:9e:60:38:7e:9f:9e:55:ce:9d:82:14:c7:41:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:7D:AF:D8:64:16:9F:45:F1:96:CB:CF:D6:83:B7:85:E3:05:B7
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:c1:26:13:41:f2:f2:aa:29:b3:63:65:9e:c6:76:68:07:
a6:33:ea:2e:97:cc:2b:63:9d:99:ab:8c:27:43:41:f1:65:f3:
29:d4:f5:7f:c8:0b:e1:77:aa:a6:2b:c8:65:95:c8:bb:0c:20:
f8:b9:37:65:a7:97:f5:35:15:66:aa:bb:28:50:3e:0e:5b:1d:
c8:3b:61:72:4c:57:33:b7:56:49:fe:c9:94:e9:02:63:79:b0:
f8:f8:15:29:84:c6:6a:e1:24:dd:be:8c:5e:ec:18:41:81:21:
ea:18:03:20:ef:64:e7:73:73:4e:57:23:f6:ab:21:5a:41:00:
8c:69:89:11:ab:20:61:08:d3:a6:a8:44:25:10:e8:f6:f6:95:
22:14:4b:fb:cd:6b:97:24:b0:8e:1a:8a:86:39:39:21:4e:15:
59:a7:49:c2:37:f5:61:ea:da:c6:7d:92:87:83:26:8e:fa:82:
25:9d:36:1d:0c:3c:31:35:3b:64:63:be:d9:6b:41:53:15:b1:
67:af:5b:76:cc:03:c8:56:a2:09:c9:51:0a:69:40:a3:21:83:
cd:00:43:b3:ed:81:19:6d:02:e1:fc:66:52:bb:aa:17:aa:e3:
5f:7b:40:8d:65:09:71:52:fd:5c:d0:e4:77:a5:80:c6:78:b2:
5c:f8:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:54:19 2024 by rpki-client on console-ams.rpki-client.org