Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: slOeCmGyq7B2ivsyPAy/n4FkSzUifi13oui5g84WyXw=
Subject key identifier: 77:67:81:FA:C1:64:E5:AD:A6:FC:DD:17:C6:60:0B:97:D0:B8:5D:EF
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 0193674594D212B524821F92A88F8BDA79CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 137D
Signing time: Tue 26 Nov 2024 07:00:33 +0000
Manifest this update: Tue 26 Nov 2024 07:00:33 +0000
Manifest next update: Wed 27 Nov 2024 07:00:33 +0000
Files and hashes: 1: 4ktFLbVjnOz2FuzqPQRBeEXAhxA.roa (hash: z2KX3ZmTduz5O9pe2ShWJynoXuCsdLsjg3waUitDRNQ=)
2: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: lWkTmg7Z9MlYRQaRrX2HxlP6lOnP7ehZ6gDYE3u8UOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:45:94:d2:12:b5:24:82:1f:92:a8:8f:8b:da:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Nov 26 07:00:33 2024 GMT
Not After : Nov 27 07:00:33 2024 GMT
Subject: CN=776781fac164e5ada6fcdd17c6600b97d0b85def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:e9:3a:0c:8a:a5:95:f7:f7:70:ea:a6:0b:
14:9d:b9:f2:2f:6e:1f:12:95:6d:1f:8b:82:e3:f1:
5c:84:d0:b5:60:81:cf:fd:1b:e8:06:25:87:2e:c4:
f7:1b:14:3a:6e:fd:c0:eb:44:c1:54:da:45:54:1d:
d1:06:32:d1:14:18:30:4c:e4:2d:3a:22:ff:d0:9e:
75:11:b8:a0:1d:52:96:6d:d6:7d:7e:34:b4:b2:e3:
9b:64:ab:72:3a:0f:ef:6f:78:52:66:6f:10:77:92:
ba:5c:dc:20:fe:d7:bc:90:5b:2e:e1:c0:63:f7:a2:
d2:ba:bb:1d:d3:0a:20:3b:c2:5b:f9:80:ea:5c:6e:
2a:54:64:07:cc:e1:cc:9b:71:79:e2:9e:18:d7:e3:
6a:e6:35:1e:67:d4:d8:77:9e:e3:ea:5f:b3:28:07:
6c:a2:42:95:15:f3:33:f4:c3:73:bd:4a:4c:d6:c9:
da:e7:c4:c1:d4:07:99:93:53:3d:ae:bd:00:0e:99:
10:84:ed:c5:f9:23:36:b2:44:8d:a9:2f:ee:54:cb:
67:c2:a5:b5:8b:da:10:2f:4b:1c:da:1b:68:6c:74:
be:74:ea:dc:6b:18:6c:87:8d:84:41:2d:2a:c7:e1:
38:65:91:9b:26:63:78:3c:d4:12:ed:b6:b8:b8:3e:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:81:FA:C1:64:E5:AD:A6:FC:DD:17:C6:60:0B:97:D0:B8:5D:EF
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:63:49:d8:b6:a2:c2:90:90:af:91:6a:5a:11:ee:4f:13:
df:e0:10:bb:2b:a9:2a:b8:aa:3c:12:d8:b0:74:89:bd:41:16:
6f:84:5f:3b:94:18:9c:4f:67:eb:02:a3:46:ea:c9:95:b1:96:
3f:d8:5a:3e:32:9a:81:7e:07:a6:94:fd:5c:1f:e7:37:cb:cf:
a5:85:eb:ba:88:d0:83:0f:bb:fd:89:fc:22:32:11:78:65:8b:
e6:7b:9d:7a:73:c8:f2:5e:67:ce:3d:f9:7f:cd:14:83:ca:d2:
9b:10:3a:44:0f:23:bc:fe:ca:34:86:3c:db:dd:cf:57:af:56:
d2:ec:9d:e6:0f:fa:74:f5:c3:f6:f1:f9:ca:46:f9:a7:35:e2:
b0:cc:7d:6b:9a:9a:c0:fb:70:9a:68:c1:92:d2:8d:56:67:15:
36:95:1d:58:90:06:dd:d9:b0:44:fa:e5:d3:ee:bc:f3:79:3e:
17:c1:12:d4:e8:f6:0d:e3:7e:61:0b:24:3a:ff:81:a3:67:07:
63:a3:39:d4:56:6c:14:08:6e:d3:37:0e:34:50:44:a4:8b:b9:
85:b2:d9:46:3e:62:5b:a2:63:e1:e8:2c:53:6e:61:29:8c:d5:
3a:e4:fb:eb:08:86:50:9c:13:e4:2b:a7:5f:de:6a:c1:5d:c3:
3f:f8:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:54:33 2024 by rpki-client on console-ams.rpki-client.org