Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: C2B1s6Bf12TAzClIG938jJf1vJXxwLLTnGbJhh2TRU4=
Subject key identifier: 90:7E:DE:3C:F9:80:61:1C:1D:BB:38:F8:4D:D8:8B:76:FF:4B:6D:85
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 018F87ECF75032D85C95052794F5510083F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 01D7
Signing time: Fri 17 May 2024 19:00:04 +0000
Manifest this update: Fri 17 May 2024 19:00:04 +0000
Manifest next update: Sat 18 May 2024 19:00:04 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: HDAHIwqVQVxQ+5PZ4uXlgjXDb2QLg5SeDqptyKp0VX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ec:f7:50:32:d8:5c:95:05:27:94:f5:51:00:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: May 17 19:00:04 2024 GMT
Not After : May 18 19:00:04 2024 GMT
Subject: CN=907ede3cf980611c1dbb38f84dd88b76ff4b6d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:05:46:a1:70:ca:9b:d1:3b:6b:71:c6:7f:
88:c1:d5:12:da:75:02:2e:88:bd:06:ac:2f:f1:be:
b4:80:b7:02:62:8e:bf:12:77:01:04:b0:13:71:f4:
6a:a8:b7:9d:ee:a2:d9:d5:5b:9f:87:76:20:79:13:
12:50:66:38:a9:bf:d7:da:32:91:bc:5b:b3:eb:bc:
f4:38:6c:c6:66:b5:1a:75:38:96:0b:5c:73:fc:83:
36:cf:13:e6:78:d9:60:0f:2f:a4:9a:0b:72:13:3b:
11:06:31:3d:81:11:af:27:5f:85:42:1a:fa:3d:ae:
71:63:84:1d:63:c1:7e:a8:63:ca:59:b1:7b:d2:15:
6b:5e:6b:35:51:ba:73:f9:eb:20:8c:e4:8a:46:e6:
c1:a3:3b:72:bc:d5:89:e2:c8:63:dc:3e:f9:0e:40:
8a:0c:8b:4d:96:09:5b:02:85:7b:2b:cf:83:66:d0:
ee:de:82:82:e4:34:af:d0:9d:4f:db:6c:ec:c3:8b:
57:e2:d0:1c:db:a0:ce:81:ba:59:04:8f:06:32:63:
e6:66:40:e8:1b:2a:2c:57:12:70:48:59:f8:a0:0a:
a8:1e:1b:ee:d7:a3:be:c1:63:32:6f:e1:46:35:10:
fa:da:74:e7:91:1e:11:a0:ba:10:d1:0d:36:a6:48:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7E:DE:3C:F9:80:61:1C:1D:BB:38:F8:4D:D8:8B:76:FF:4B:6D:85
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:08:b5:11:7b:66:38:32:77:d5:8f:21:c4:b3:f7:3b:46:
fb:3d:38:a0:22:4f:23:68:6f:cd:db:87:81:84:3a:4f:2f:91:
7e:a9:8d:8a:0e:63:1b:ca:0b:5c:01:9b:8a:7c:1d:94:27:cd:
b3:ad:62:b2:b3:30:85:3a:44:c2:6d:78:10:00:f2:cf:62:58:
1f:60:10:97:c4:5d:f6:f9:75:bc:b3:b6:47:de:e5:72:e2:bf:
17:8a:5e:e3:2f:e0:58:ba:88:78:c0:d9:65:a7:5c:7f:c9:4a:
21:a6:90:57:15:ae:ff:14:48:8c:ac:bc:83:58:23:7a:c2:a2:
71:bc:b1:3b:c5:80:b8:8b:c9:1c:00:f8:12:91:21:3b:71:8f:
d8:6d:9a:28:02:eb:ff:a6:aa:f9:83:b8:28:2e:37:de:3c:41:
3f:cf:08:34:51:39:7a:c8:9b:09:b1:db:28:f9:6c:f6:24:54:
52:09:60:8e:c7:f3:24:85:34:1b:58:b8:c0:78:eb:00:65:a3:
42:49:36:0d:e3:06:96:1a:a4:94:90:8c:b7:0e:59:07:89:2e:
c8:1c:fb:a1:a1:16:2c:80:4e:68:58:7d:9d:d2:50:20:28:73:
20:a3:c3:1b:a9:f6:b4:2e:cd:35:a3:28:9e:70:fd:9b:e4:4e:
78:94:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:33 2024 by rpki-client on console-ams.rpki-client.org