Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: eiDATEAICKxb4OgSuY8zoeYjT1ymknbMyWRw8rDu/8M=
Subject key identifier: 4A:2C:4D:E3:D0:36:38:3C:56:D7:6F:1E:99:10:87:41:EA:14:7E:61
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019359C0E5CB2BA38279CA490E99E1ADE592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 09A5
Signing time: Sat 23 Nov 2024 16:00:34 +0000
Manifest this update: Sat 23 Nov 2024 16:00:34 +0000
Manifest next update: Sun 24 Nov 2024 16:00:34 +0000
Files and hashes: 1: A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa (hash: O1sqUiozPZ90OSxOhoNFn5pm9S5qD1p2YYN0PAWc3yM=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: jguCUUdG3HrVnmhMNX81GaNNhcVSAYYJRyoFbtO5ts4=)
3: kPq5mHyAwtRZgkVRIU2ztGZn3DU.roa (hash: 3Uj8/Yiw4HIPOzjr6m5kOfTZ0UdyB58yW1QjoqA3oRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:e5:cb:2b:a3:82:79:ca:49:0e:99:e1:ad:e5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Nov 23 16:00:34 2024 GMT
Not After : Nov 24 16:00:34 2024 GMT
Subject: CN=4a2c4de3d036383c56d76f1e99108741ea147e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:5d:f7:a3:41:2b:27:97:8f:3c:1e:30:ee:
e7:14:8d:36:25:b4:bb:e3:f0:b7:40:47:d8:77:bf:
e9:13:6c:7a:7f:14:aa:79:9c:f2:b7:5b:21:42:78:
0d:f9:18:e7:b5:e0:6a:3c:c0:be:90:65:53:bf:7f:
92:03:a3:af:e1:ba:3d:73:ff:23:2b:bf:79:a6:55:
fb:cd:6d:e1:0b:99:d3:04:6a:ae:9f:a6:15:42:58:
03:ca:60:e3:44:3d:f1:99:e3:65:59:56:67:4e:8f:
6f:cd:cf:56:1b:89:11:11:e7:19:0a:6b:11:64:7f:
5b:48:bf:a9:fb:03:5e:65:14:42:a2:38:a6:83:66:
bc:b3:d5:a1:4b:c2:46:02:06:71:06:72:ad:f3:f5:
d7:fc:60:aa:6d:9e:7f:68:75:98:69:66:7b:b7:38:
14:4d:d1:0d:6d:25:06:c9:56:e1:58:52:18:f6:fa:
3e:b7:22:21:ab:4f:23:f1:42:1d:50:fe:53:47:0f:
be:20:f6:0d:b1:f9:74:44:b0:8a:7e:91:50:97:fb:
cd:8b:33:d7:ba:c6:5c:b2:3a:db:2c:a2:16:ce:10:
6d:fd:f8:04:02:15:c9:7f:d0:e9:19:eb:81:e5:99:
18:b5:c6:7a:4b:da:ed:a6:ee:fa:10:4a:f6:0f:bb:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:4D:E3:D0:36:38:3C:56:D7:6F:1E:99:10:87:41:EA:14:7E:61
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:b2:bd:a9:70:e2:52:b0:c9:7d:4a:eb:a3:c6:f7:38:48:
c8:2c:28:c2:a3:4a:8a:ae:e3:b5:d7:9b:a0:bc:ad:d5:0c:b8:
0f:37:56:ea:e8:82:e7:cb:e1:e4:bf:a2:48:8c:f2:1b:02:a6:
b1:7d:d0:79:e6:6e:f6:96:f0:99:8f:d9:8a:6b:ea:12:40:37:
20:90:29:95:10:51:4b:1e:a0:0a:dd:11:ec:48:26:b2:c2:cc:
cc:0f:22:a7:28:57:64:66:3d:21:9c:c6:4d:ed:b8:19:ae:33:
76:b6:d1:01:30:fa:54:76:2b:49:c2:3b:fa:98:53:48:0c:9c:
8f:ac:bc:e3:a4:87:e9:1a:68:e1:64:32:58:73:ba:c1:c2:3e:
ef:54:1d:53:b3:5a:64:c1:c9:06:b6:49:61:86:aa:b3:b8:ba:
5e:97:df:10:7e:61:bb:22:6c:f4:47:fc:65:e9:a2:5e:28:ed:
81:bc:63:74:be:74:d7:91:73:ef:2f:c6:9e:fd:91:78:94:33:
de:81:c8:88:84:f3:b6:5d:97:23:8b:89:48:49:0d:8e:d8:06:
0a:19:f3:ac:9d:16:4d:96:70:d9:39:6a:8c:f3:12:50:a6:25:
0d:f4:ea:e4:89:c5:1f:2e:4b:68:62:ea:bf:80:35:f9:1c:2b:
ff:30:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:46:21 2024 by rpki-client on console-ams.rpki-client.org