Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: 0vQF2pUmD6RtFMBxKl/y8eX/JKcBLKxp1xVcTm1P43k=
Subject key identifier: CE:4A:FA:0F:21:D2:0F:D3:1B:41:DA:63:AA:D1:CC:D3:7C:50:96:28
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0193568AA86DD6D267BF4856BC2EE8104AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0D6F
Signing time: Sat 23 Nov 2024 01:02:27 +0000
Manifest this update: Sat 23 Nov 2024 01:02:27 +0000
Manifest next update: Sun 24 Nov 2024 01:02:27 +0000
Files and hashes: 1: Cw-XRJGDx-HPBCUGFKK-OhngF1g.roa (hash: OUhrCKf9qARPri2Ua+gJ0ojkUU1zce53iLiBnzGS51g=)
2: mb-d1XV5vVLQEjalMWvt6vTsWMg.roa (hash: uTJWZCwIM4ioooPleIzcYRLsOUtD3nLa0gats6bP7i8=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: BCplQ2OnijhUSbZbRZlxlQIPww0KA38Os+37mragKXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:a8:6d:d6:d2:67:bf:48:56:bc:2e:e8:10:4a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Nov 23 01:02:27 2024 GMT
Not After : Nov 24 01:02:27 2024 GMT
Subject: CN=ce4afa0f21d20fd31b41da63aad1ccd37c509628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:cc:06:a0:ce:a6:06:b5:2b:c9:08:9c:13:
98:96:16:06:93:74:38:b0:d9:35:e7:e5:e1:56:e1:
22:eb:ed:89:e3:be:29:56:8b:12:a9:84:31:fe:3f:
1d:20:b8:9d:0c:16:8e:b3:02:f2:aa:c2:b0:f0:ac:
8c:8d:4d:49:a4:a4:c7:de:b5:0e:b4:d1:e3:50:46:
3c:60:da:92:76:a2:42:be:9e:e2:93:90:3a:b6:59:
7f:1e:6d:b9:69:d3:3a:92:4d:87:7d:d6:16:47:c7:
67:dd:b1:ab:17:aa:7b:a8:54:01:4e:57:a2:38:37:
bc:aa:cf:12:69:4e:cc:b6:03:c6:82:6c:f3:72:c3:
af:05:e5:bb:0a:78:98:2e:ae:7a:87:03:93:db:1c:
b2:36:c4:80:5c:89:f4:9b:7e:b4:6f:f8:c2:82:40:
fc:60:5d:3f:ee:6c:ce:05:ad:ec:6d:9a:f1:5d:42:
a4:38:03:a6:e1:0e:d9:d1:30:ab:0f:d2:36:c0:d2:
fe:53:8b:e1:bf:29:b9:e9:21:f4:0a:26:65:e8:34:
05:4d:bf:32:74:e1:b9:8c:4f:6b:c4:25:6b:38:99:
44:30:b2:0a:56:df:8f:d0:bd:a2:4b:ee:23:51:58:
ff:29:4a:bb:77:ba:4c:d9:7f:43:f8:f3:55:65:7b:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:FA:0F:21:D2:0F:D3:1B:41:DA:63:AA:D1:CC:D3:7C:50:96:28
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:74:88:6d:e3:6f:04:4b:9a:ce:31:f7:bd:ae:8a:1e:3b:
d1:94:44:76:6b:2f:e7:e7:9a:2b:7c:67:2c:21:94:49:eb:15:
a4:e9:f7:1c:4e:ef:6f:15:e0:e8:4e:e4:48:de:03:25:72:50:
19:d8:a2:f7:52:d1:10:47:13:c9:db:ec:60:fc:b2:00:8e:bb:
0e:fa:4b:a0:c2:93:c5:ba:bf:84:13:bf:0b:b8:21:49:58:f0:
a2:01:e7:47:94:e7:56:95:e7:82:91:31:b5:4b:d4:b9:39:73:
4d:70:1d:8d:03:6a:62:eb:d0:dc:b4:be:b6:5b:d5:b3:ad:e0:
32:be:8c:d0:63:45:2b:97:ba:14:66:9f:7a:3d:ba:41:9e:ec:
0c:88:5c:44:16:1d:06:af:45:83:5c:c5:6d:dc:6c:aa:72:1b:
0b:19:51:7e:0f:ac:5a:f9:b8:bc:3c:01:cf:16:08:17:83:5d:
80:60:ed:07:d2:20:a0:18:aa:26:b0:f7:c6:ea:9e:66:92:b3:
0f:30:8a:6d:69:7b:71:41:dd:a7:33:7c:74:a3:bd:a0:b2:4b:
98:e2:af:7a:f5:18:78:2b:11:52:21:aa:14:4e:ef:b0:96:de:
e9:d5:bd:90:ed:27:77:87:7e:64:9c:4e:59:5a:42:3c:e9:28:
ac:19:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:49 2024 by rpki-client on console-ams.rpki-client.org