Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: fy6Ep9YhBjfqhY+WUeUWomg3LWTU3FBZnRycKnw8u9w=
Subject key identifier: AF:73:A4:4E:A1:AE:93:A1:86:3B:C2:26:D8:6D:D4:76:43:C4:87:8A
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 01935764FCDFE2C182D0A952463B102BEFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 104C
Signing time: Sat 23 Nov 2024 05:00:56 +0000
Manifest this update: Sat 23 Nov 2024 05:00:56 +0000
Manifest next update: Sun 24 Nov 2024 05:00:56 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: jXvCsLBXeeCVtSoAvxpysQsmLQLc2afmO8gedm0TnrY=)
2: _1o-GhtBZFcAgbhScAoD5vEasmQ.roa (hash: hliosRBkZ7AL4CNN84jAwrq4t8AZqql2Jlh0fzMSX8E=)
3: z7o7gIWlC-A0VFSSJepyWaod8wU.roa (hash: 0C62W7ULWU2Gyn1DPr0iHhK6VTFPq5MQKQfT7RehI1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:fc:df:e2:c1:82:d0:a9:52:46:3b:10:2b:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Nov 23 05:00:56 2024 GMT
Not After : Nov 24 05:00:56 2024 GMT
Subject: CN=af73a44ea1ae93a1863bc226d86dd47643c4878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:f6:98:ab:30:93:27:62:0d:08:cb:2a:49:
ff:d7:e8:0b:59:e1:7e:8e:af:22:4c:ca:01:3f:ed:
47:94:6d:3e:d9:59:c8:21:15:58:02:68:ae:43:cb:
29:f8:c0:8b:2d:e5:f4:fd:e2:0a:3f:db:2d:59:8a:
ab:8f:d9:da:10:79:0e:dd:d2:f7:05:9d:49:a9:17:
13:36:67:bd:f6:e0:ff:42:65:fe:e8:3b:b4:fc:47:
b6:7b:83:7d:07:05:c1:cc:ef:e9:69:51:ba:51:68:
f5:05:6f:65:cf:20:cd:a4:b2:d8:5e:89:fe:a7:71:
f7:c8:b8:2c:40:eb:a5:0c:e3:27:97:fa:f8:b0:93:
44:ff:15:49:b2:1b:e9:f4:db:77:0b:66:6a:22:51:
17:59:4b:56:b3:ff:75:f5:0a:a1:86:06:1f:31:92:
4b:06:8f:bb:55:33:c5:d5:c2:eb:eb:07:1a:48:7a:
c8:88:08:cb:c0:d7:e6:9e:75:70:36:f2:ec:c6:a1:
d3:15:66:2c:9d:d8:47:77:bc:02:ab:0f:61:15:58:
04:1d:a8:c5:e1:97:0a:53:0d:36:6b:48:ee:7c:b6:
1c:23:a6:80:6a:36:42:a9:0a:20:d5:d0:aa:d4:dc:
5c:07:d6:aa:05:b4:ce:52:84:1c:b5:81:e9:2f:b0:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:A4:4E:A1:AE:93:A1:86:3B:C2:26:D8:6D:D4:76:43:C4:87:8A
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:70:21:64:b6:b5:ff:ed:14:a0:52:1b:ba:49:96:41:d1:
b2:2a:59:84:1b:03:43:49:bc:c2:12:86:b4:28:ab:54:92:82:
7e:a7:a0:2d:7c:c2:ea:9e:93:81:3b:69:8a:ed:71:b7:c2:e7:
10:d5:b1:59:e5:50:e2:0d:df:bb:dc:67:a5:c1:d4:ce:68:42:
f4:73:19:fc:e3:7a:e2:6b:98:e6:0a:31:49:39:80:d9:4b:88:
fb:f5:ea:ce:a4:0a:44:38:08:ab:78:dd:b2:4f:e4:81:4a:8a:
db:08:03:58:6c:f8:43:f2:ab:a3:93:18:7c:d3:2c:62:5e:61:
c9:4a:17:bf:cf:aa:37:97:ed:85:d5:89:97:28:00:f7:d9:c5:
e4:da:0d:e3:6b:fe:93:1a:a8:98:87:04:91:c3:e1:31:63:12:
0a:ee:c0:e4:2a:4b:1c:fc:e6:31:c6:d6:08:b8:dc:92:57:dc:
af:e6:5f:23:bb:7b:36:f1:8a:40:2b:45:0b:29:8e:89:fc:bf:
a0:3e:a8:9a:59:ce:f2:4b:a8:60:e1:1d:9e:75:42:2d:4b:85:
dc:f4:7d:13:22:11:5f:24:a4:c5:ad:4a:75:1d:57:6a:3b:a8:
f4:40:a0:04:29:c9:19:44:1a:7a:fb:e6:78:dc:f4:35:ca:e5:
50:f1:be:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZPzf4sGC0KlSRjsQK+/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2I5NTZlYzNhMTRmNmY1ZTRiNzZkNTQzNDJmYTk4ZDU5
Yzc3YTYwHhcNMjQxMTIzMDUwMDU2WhcNMjQxMTI0MDUwMDU2WjAzMTEwLwYDVQQD
EyhhZjczYTQ0ZWExYWU5M2ExODYzYmMyMjZkODZkZDQ3NjQzYzQ4NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jH2mKswkydiDQjLKkn/1+gLWeF+
jq8iTMoBP+1HlG0+2VnIIRVYAmiuQ8sp+MCLLeX0/eIKP9stWYqrj9naEHkO3dL3
BZ1JqRcTNme99uD/QmX+6Du0/Ee2e4N9BwXBzO/paVG6UWj1BW9lzyDNpLLYXon+
p3H3yLgsQOulDOMnl/r4sJNE/xVJshvp9Nt3C2ZqIlEXWUtWs/919QqhhgYfMZJL
Bo+7VTPF1cLr6wcaSHrIiAjLwNfmnnVwNvLsxqHTFWYsndhHd7wCqw9hFVgEHajF
4ZcKUw02a0jufLYcI6aAajZCqQog1dCq1NxcB9aqBbTOUoQctYHpL7A2cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9zpE6hrpOhhjvCJtht1HZDxIeKMB8GA1UdIwQY
MBaAFDTLlW7DoU9vXkt21UNC+pjVnHemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQt
OWE2ODgwODBhNTc5LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQtOWE2ODgwODBhNTc5
LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeFwIWS2
tf/tFKBSG7pJlkHRsipZhBsDQ0m8whKGtCirVJKCfqegLXzC6p6TgTtpiu1xt8Ln
ENWxWeVQ4g3fu9xnpcHUzmhC9HMZ/ON64muY5goxSTmA2UuI+/XqzqQKRDgIq3jd
sk/kgUqK2wgDWGz4Q/Kro5MYfNMsYl5hyUoXv8+qN5fthdWJlygA99nF5NoN42v+
kxqomIcEkcPhMWMSCu7A5CpLHPzmMcbWCLjcklfcr+ZfI7t7NvGKQCtFCymOify/
oD6omlnO8kuoYOEdnnVCLUuF3PR9EyIRXySkxa1KdR1Xajuo9ECgBCnJGUQaevvm
eNz0NcrlUPG+rQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:23 2024 by rpki-client on console-fra.rpki-client.org