Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: rRrWGZwbSJ6CIPwOc0IR1CIRUtLaboK6lEbTD63+AVY=
Subject key identifier: 2F:24:21:4A:38:2D:AC:14:FC:75:C1:CE:88:98:8F:2F:42:E0:41:E7
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 01936AB44427007E897858DA4BD6C6E227B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 0114
Signing time: Tue 26 Nov 2024 23:00:19 +0000
Manifest this update: Tue 26 Nov 2024 23:00:19 +0000
Manifest next update: Wed 27 Nov 2024 23:00:19 +0000
Files and hashes: 1: 1fYYEbIvEaxVvZFqg0M_i623HVo.roa (hash: W8iK2GIpn+Q/jPgRZ0bjB/mQ2skphYEapu5SibpDNX4=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: JCp0FFyYx298DFqetziAlj4Vcgpw35Kl1cvsD/KLsHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:44:27:00:7e:89:78:58:da:4b:d6:c6:e2:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Nov 26 23:00:19 2024 GMT
Not After : Nov 27 23:00:19 2024 GMT
Subject: CN=2f24214a382dac14fc75c1ce88988f2f42e041e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:6e:98:b0:e1:b6:17:48:39:bd:10:c3:81:
e2:9f:d9:02:3a:f0:57:69:a4:49:51:7b:3e:4c:1f:
3e:b9:eb:7f:c7:5d:f5:34:4b:94:58:7f:55:cd:1e:
5f:64:60:4e:f7:87:49:71:1a:fd:28:79:34:60:e9:
78:25:01:47:f3:c5:56:93:41:5d:c0:94:12:1e:6e:
24:9f:a8:65:3d:6f:5b:b2:9c:cd:8f:29:9a:e9:34:
91:96:51:13:9f:00:10:57:b8:d7:6a:90:0d:c0:5f:
82:ec:e4:c8:c0:a7:bb:58:2d:71:45:ba:91:78:17:
05:d4:ed:4b:e5:33:2d:0b:3e:39:b1:f0:37:4f:63:
c6:61:33:e7:2b:c7:27:e2:e1:56:20:e1:1c:8d:05:
75:60:c8:fd:69:eb:ab:1b:45:5c:88:15:fa:7b:b4:
eb:5d:f6:81:71:d6:d7:e8:4b:d2:a2:c2:ef:dc:7b:
c3:3f:be:f9:ce:6b:89:46:74:f4:ef:17:a0:7d:6b:
4c:fb:11:84:5c:a5:5a:48:fa:f2:34:80:38:23:50:
2f:1f:d2:39:cc:07:4d:29:65:2f:7f:bf:53:90:c2:
5f:04:2e:61:44:dd:53:5a:81:fd:e3:df:e2:b2:55:
e6:6e:a8:05:6d:d7:a2:75:23:c5:3a:83:3a:27:43:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:24:21:4A:38:2D:AC:14:FC:75:C1:CE:88:98:8F:2F:42:E0:41:E7
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1f:db:86:89:81:44:8a:74:67:90:ca:8e:aa:5d:c2:8a:92:
99:ff:13:c4:3f:ca:fd:d3:17:a9:32:89:20:9b:9e:ae:62:2f:
ed:c2:e7:e2:96:a4:92:01:30:77:e3:85:14:28:fc:c5:eb:a8:
e6:0c:90:bd:f3:33:8f:c9:ab:1c:63:d5:87:bf:1a:86:b7:44:
87:57:dc:ac:ba:03:b8:c8:a1:61:9c:2b:36:7f:a9:5f:86:00:
eb:36:65:95:66:96:5b:fb:75:bb:80:60:33:22:fc:96:d3:e1:
bf:62:4d:e7:ca:70:17:73:5c:d5:fe:2f:b1:b2:38:78:fc:e6:
89:43:51:ef:9d:fb:ec:a8:7b:4d:db:f2:00:83:a5:6c:7d:19:
9c:90:cb:21:ee:ff:61:39:41:cb:0a:3c:dc:9c:51:38:1d:c2:
cc:d7:7a:45:53:7f:ef:a0:c0:0b:43:19:14:b5:3b:92:17:93:
f2:24:84:36:25:46:d0:5e:b7:e6:23:c5:a7:48:ef:db:34:cc:
fe:df:f2:4a:49:9a:b1:cd:fc:38:5d:5c:ef:ff:cd:fc:c1:5b:
bd:ad:8c:f2:3b:87:01:00:1b:de:af:65:d4:46:dd:71:66:68:
38:c1:95:eb:82:34:d5:b6:ab:50:48:fa:96:1a:87:11:98:71:
b7:ee:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:44 2024 by rpki-client on console-ams.rpki-client.org