Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File: nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier: K4l1jp+1sBfQPvA7+LRm2s2jCBmsRUZKKdeAeuAHJrY=
Subject key identifier: CE:82:C7:68:EB:5C:9E:DA:CA:89:DC:16:2D:70:D6:E8:D2:14:5E:C8
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 019358783E34CE715FC0233963A5C01513FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number: 137A
Signing time: Sat 23 Nov 2024 10:01:35 +0000
Manifest this update: Sat 23 Nov 2024 10:01:35 +0000
Manifest next update: Sun 24 Nov 2024 10:01:35 +0000
Files and hashes: 1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: 2ZHiPq5ulZTPfkPGOcXx7jvl7fFWxNHE/OhDJ/Y1Fy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:3e:34:ce:71:5f:c0:23:39:63:a5:c0:15:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Nov 23 10:01:35 2024 GMT
Not After : Nov 24 10:01:35 2024 GMT
Subject: CN=ce82c768eb5c9edaca89dc162d70d6e8d2145ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:55:b6:0d:0f:02:cc:7e:0f:72:ea:8e:39:
5b:23:3f:85:13:45:8c:d9:41:1d:03:99:74:51:c7:
2e:a8:07:2e:55:7e:d4:e9:34:13:98:b5:44:b9:a0:
60:38:23:36:02:23:7a:e6:0b:ae:86:d1:96:67:fa:
86:57:fe:47:6e:c6:52:19:40:b2:86:cf:c5:f2:4d:
a7:5f:87:3e:95:d9:59:c1:5e:23:52:7c:26:42:e0:
8f:72:74:4b:dc:08:ef:d2:7c:1b:0e:bc:2a:75:39:
7a:c6:6d:d9:ba:a5:bf:37:9d:50:d2:11:ff:df:a3:
c9:c8:44:02:cd:d3:52:d5:a6:68:98:03:cd:49:71:
b9:d3:3d:75:d4:74:cb:fb:fb:dd:70:e5:c9:a6:3a:
19:27:df:b5:dd:36:8a:9e:a6:b5:1a:ba:92:46:71:
03:b4:9a:c7:bf:38:bd:37:fc:4c:65:5a:bf:4f:47:
15:6b:b0:c4:64:8f:72:7c:79:cd:15:a2:d6:6a:85:
4d:55:8d:ff:13:92:9b:f6:65:c5:22:1e:a3:09:db:
5d:d0:f5:79:6b:8e:fa:83:d4:5a:13:ca:2e:28:05:
1b:6f:dc:df:9c:ef:c7:93:c1:c6:f2:22:c6:dd:a2:
a4:f0:92:da:d1:45:87:cc:5d:0f:a3:55:ca:26:c2:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:C7:68:EB:5C:9E:DA:CA:89:DC:16:2D:70:D6:E8:D2:14:5E:C8
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:e9:bf:db:94:ba:3b:e7:60:2b:08:0f:39:63:da:35:0c:
0c:75:6e:09:cd:16:8a:fa:42:69:a0:01:54:84:3c:b1:29:89:
a0:06:87:1a:b9:51:9f:d2:3a:07:28:a6:19:98:36:d3:b7:27:
53:e3:a9:63:70:9d:6a:39:9e:98:45:79:bd:35:8a:48:68:70:
96:6e:e9:d5:00:d8:8d:07:ae:14:2a:df:32:f7:35:63:8c:ed:
8a:77:d3:78:bc:ec:d8:54:7c:da:51:3e:2b:62:71:2f:49:ee:
a3:43:26:43:8c:b0:63:19:92:11:23:95:5c:07:ec:c7:ff:21:
60:6f:21:25:77:8d:7f:7b:6b:d7:43:c8:2e:dc:c0:b0:44:2a:
56:4e:04:9f:9e:7d:13:ab:9c:88:3f:2d:3e:1e:53:83:9d:67:
8f:ca:18:68:64:66:ad:ef:43:2a:05:32:88:a4:08:79:9c:1f:
18:fb:9b:c6:55:b5:21:bb:f3:1f:5f:01:e6:62:55:bf:11:d6:
fd:dd:49:43:c5:82:1a:36:ac:2f:4d:6a:9d:0b:40:14:d8:56:
0d:41:98:82:4a:13:e3:6c:57:81:97:cf:85:db:8e:c5:79:d8:
2e:17:9e:60:e1:7a:4b:df:75:05:34:72:e0:0e:d4:f4:cc:cf:
b3:b1:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:38 2024 by rpki-client on console-fra.rpki-client.org