Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 6Vf3GJpX4307IhOJbagbDfgJVCJAST02bLPodSoJt+4=
Subject key identifier: 54:64:B1:E9:5A:80:17:96:70:6E:19:69:7B:C8:70:9C:8B:BB:DE:EC
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 018F7CC534A546C8B0B84938AD6E89C587FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 10B1
Signing time: Wed 15 May 2024 15:00:49 +0000
Manifest this update: Wed 15 May 2024 15:00:49 +0000
Manifest next update: Thu 16 May 2024 15:00:49 +0000
Files and hashes: 1: 9fv7nHkpO-eJ3_aS55An7-PCuXg.roa (hash: /0FT+gAMUBR8R1SpKlqwSrJ35c5fO2CNSsUJPwydYvg=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: 3Ou+GnDBBZ3gitvL8tjKT8Ld07Hz7rxd+Kts4N2OtEI=)
3: WFycaWyv9q66VIya56DZwVf9s-s.roa (hash: BZlyibHfZC63TPMam/q5T9eU90bgDmwiPBMXySkYXOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:c5:34:a5:46:c8:b0:b8:49:38:ad:6e:89:c5:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: May 15 15:00:49 2024 GMT
Not After : May 16 15:00:49 2024 GMT
Subject: CN=5464b1e95a801796706e19697bc8709c8bbbdeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:ea:82:a3:73:cf:78:76:ea:de:67:33:c2:
65:17:40:df:93:64:43:92:de:f1:9c:a8:a8:d4:d3:
03:7d:f4:b0:83:81:5c:9c:b0:02:6f:d1:34:79:5e:
05:35:2f:4f:02:61:a1:da:80:fc:5e:31:58:39:d8:
42:0d:2b:7c:fb:4e:75:e8:cd:ac:eb:81:dc:82:ac:
ed:b9:46:43:c8:db:40:ba:32:d0:bc:b9:de:82:f2:
d4:57:cc:6d:d2:15:4e:bf:5b:c7:93:79:72:02:c0:
59:29:79:6d:06:40:03:d4:89:94:15:22:75:fb:2c:
e3:ee:6e:f9:8c:0d:04:c1:3d:26:4c:5e:bf:38:31:
11:36:e7:e8:3f:d2:fd:57:82:db:23:c3:13:2e:d6:
e3:fb:08:f9:e3:50:18:3f:5c:d6:d7:f7:b2:4a:f2:
9c:e0:3a:41:51:55:54:53:b0:f9:32:9c:7b:1a:ee:
0e:52:14:52:2e:f6:f8:b5:00:5e:6a:3f:bf:b0:5a:
5b:e6:c3:48:6f:ee:24:61:e1:3e:d1:17:27:c3:9c:
e6:61:2c:fc:da:16:45:d9:b7:1d:ae:35:e4:bf:1f:
76:63:fb:9a:65:40:01:50:f9:18:25:c4:aa:d2:7e:
e1:cc:82:3f:6b:69:5e:82:34:51:6f:7f:c8:d5:57:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:B1:E9:5A:80:17:96:70:6E:19:69:7B:C8:70:9C:8B:BB:DE:EC
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:7a:9d:3c:f4:52:35:aa:ec:ce:ce:9b:5e:f7:8a:e7:d9:
60:97:c3:09:11:5b:7b:b4:c8:fa:99:8b:09:11:49:5b:9d:15:
48:d5:a1:d2:81:5c:dc:97:fa:83:a1:5f:70:10:fc:5d:8b:9c:
71:40:6a:b6:9a:86:8e:d9:7a:58:58:c7:8a:39:27:45:42:8d:
b7:07:9b:2e:fd:7b:e0:1c:f5:13:cc:94:75:a8:d2:93:18:7b:
1e:c5:02:ec:5b:51:47:b2:b6:54:f2:3f:03:70:fe:87:37:53:
09:59:79:07:12:62:fa:bc:61:a9:a5:aa:2c:25:19:15:8d:2d:
01:f0:5b:4b:7a:09:77:f1:f2:eb:d0:83:9c:e8:13:28:48:8a:
0c:dc:11:e2:1a:13:a4:ed:47:a5:a7:21:d2:ad:95:95:ba:09:
44:66:2f:f5:b3:c4:3d:cc:9d:47:43:ac:5b:aa:a6:ba:a7:c4:
87:5d:55:12:b4:a6:4b:fc:f9:8f:38:f2:38:95:9f:7e:c5:d3:
42:b1:42:ac:cc:1c:10:aa:ce:26:cf:87:d1:f6:0c:24:4e:6d:
a7:82:9f:74:4d:22:eb:ab:97:d4:bf:8b:01:24:47:3c:f6:4f:
ef:14:03:82:35:29:44:2e:32:56:87:60:c4:36:16:50:b4:32:
6a:7d:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:08:51 2024 by rpki-client on console-ams.rpki-client.org