Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: /yAUrYCqkVyMz75y4F9AP1EWj5F8x0bEcglc0WjRRSA=
Subject key identifier: 13:A1:7D:8A:2E:F1:DD:B4:6F:6F:D1:F2:D0:50:CF:D0:67:F8:73:15
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018F93BAD639D1A0EAA7DA2AF1768F03BC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0AA3
Signing time: Mon 20 May 2024 02:00:46 +0000
Manifest this update: Mon 20 May 2024 02:00:46 +0000
Manifest next update: Tue 21 May 2024 02:00:46 +0000
Files and hashes: 1: G56iFMl5xs48CNvzJ3eUhizjxXQ.roa (hash: HFz0dIJ5Q/2jY5r5t5GIvDST3JXHcsV/NRUw7U2Q6QI=)
2: JVEqbKdM19jikAlVXBc1U3dhF50.roa (hash: i/T3IPo2MJzevOPymdSC6cD/BwMGDdWO4CtUYUfZ0ZA=)
3: KBQsiLG0J99vmWibFu-ZXsmVONQ.roa (hash: GmSorM8AjM4k4rnWj2qc4AK7pjLYydm7YOj4wJ6UTsM=)
4: LgCqIewWg94XWtcIa4RwY7W4yBE.roa (hash: BXTi+VXHZtdKnp3uLD88kvLLZuednl9ao3sw+YbfPhY=)
5: R6qnxzSqrJvnZVhRxgLg7xnUtxE.roa (hash: w+NddXB34CEwht27VhrK+DWNXEaLnW8iKIoa/Ct5DdI=)
6: Y_WGs95lEJRJ07d5bgkbLDh8gM8.roa (hash: RhD5LWYJhsHbZy9TWO5EFoNuTFlZC+BPNjlphys9AVc=)
7: d6L_ihjNz4NM2kz3CmFQMxNAS34.roa (hash: mCfrzjoAihHt7JHpBc+CFIarelhjg/AYImBDA3kl8G8=)
8: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: X8KK1u+O2/pK5B4Rx/4K9in99vRZCWNViYxP65ssGmg=)
9: no4n7BQj4nRrXFxSdodP_GswyPY.roa (hash: PU+5XFbgiXKA+xO77ngiBae/7oEne+XL5Ae6CEjyutY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:ba:d6:39:d1:a0:ea:a7:da:2a:f1:76:8f:03:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: May 20 02:00:46 2024 GMT
Not After : May 21 02:00:46 2024 GMT
Subject: CN=13a17d8a2ef1ddb46f6fd1f2d050cfd067f87315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:ad:74:cb:be:37:bf:e6:be:de:61:e0:38:
d0:fd:87:a1:0d:28:96:f0:ed:bc:84:bf:69:65:71:
17:28:28:af:05:95:cd:3d:55:08:6d:d3:50:73:aa:
60:c9:df:df:15:a4:a8:5f:7f:26:a1:dc:9b:7c:29:
a1:94:14:4d:a5:9d:9d:41:8b:e2:4a:3c:bf:96:a2:
ee:17:0a:d7:20:28:22:03:57:bb:24:06:a2:25:aa:
3c:b6:5d:60:a3:e3:1f:23:b7:9b:17:66:cf:31:23:
93:98:5d:26:56:11:b9:92:2b:71:e5:e7:98:5a:cd:
02:c6:1b:93:7d:02:64:9c:5d:39:0d:5a:f3:63:fa:
bf:3c:b1:9b:c7:08:45:92:32:8a:3f:86:b9:5b:80:
75:e7:d9:8d:9e:09:6a:c3:87:0b:fb:5e:c0:42:18:
08:62:a4:14:9a:df:0d:51:f8:8b:2f:63:05:f7:d8:
6a:a8:a6:4a:b2:ae:ee:04:c6:d7:57:85:70:47:11:
73:17:29:68:a4:1f:3a:cb:30:f3:18:6c:9b:95:ad:
96:77:f1:b5:d4:63:4d:78:5e:52:1f:3a:fe:0f:99:
e3:42:a0:b3:e1:b3:f4:ed:d4:44:8f:5c:67:e8:7f:
fe:aa:51:ec:ad:44:42:f3:ad:8b:09:81:ab:fb:7b:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:7D:8A:2E:F1:DD:B4:6F:6F:D1:F2:D0:50:CF:D0:67:F8:73:15
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ae:b7:4b:35:ff:0a:e4:21:8b:36:2a:9c:4b:4b:a7:dd:44:
96:02:4a:be:91:4c:ac:c1:79:9d:2a:f5:80:fb:85:7b:6f:bf:
df:a4:57:84:a3:77:d7:e8:b9:d3:c1:53:30:9c:39:68:25:f8:
3a:21:aa:e7:eb:0c:cf:33:b6:5e:eb:f8:ba:74:1d:02:a7:6a:
7c:b4:b8:da:1d:df:08:05:9e:bb:cb:2f:fc:a0:b2:e3:3b:eb:
2e:28:59:e4:18:14:18:48:48:ed:9b:7d:4d:07:5b:e2:fc:01:
eb:87:4a:3f:87:69:3b:73:ec:68:ff:ca:9b:f5:a0:10:f6:22:
45:e2:ce:4b:88:a5:f2:bd:b8:5f:dc:a7:c1:02:d0:d2:c9:a1:
5f:be:76:fd:8c:9e:cd:ef:0f:12:a6:7f:7e:ef:5f:b8:03:55:
92:cb:1e:f3:f6:4e:4a:a5:95:ea:1b:a6:0a:3a:73:dc:66:39:
5c:0a:77:a6:77:a8:0b:ae:31:ba:29:47:c6:34:5c:dd:f0:1f:
d5:da:73:16:21:ee:93:67:25:b5:dc:51:15:08:d1:3c:5b:71:
29:af:68:d1:13:3d:33:60:88:39:6d:76:27:54:dd:f3:3a:9d:
f4:e9:9e:bf:7f:3d:c2:b9:62:a6:de:5d:64:32:80:37:93:36:
84:51:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:41:58 2024 by rpki-client on console-fra.rpki-client.org