Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: Rjp0cNrKRF5aFwugA4FdJqZdeeFWpdK5Bdnf1qn4aDw=
Subject key identifier: 2E:F8:D2:DF:C3:52:29:DE:6F:B6:24:49:5A:4E:51:C0:E9:06:F6:B1
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 018F8748914CBB64A7AC6ADEE2E21F02E205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0B76
Signing time: Fri 17 May 2024 16:00:30 +0000
Manifest this update: Fri 17 May 2024 16:00:30 +0000
Manifest next update: Sat 18 May 2024 16:00:30 +0000
Files and hashes: 1: Cw-XRJGDx-HPBCUGFKK-OhngF1g.roa (hash: OUhrCKf9qARPri2Ua+gJ0ojkUU1zce53iLiBnzGS51g=)
2: mb-d1XV5vVLQEjalMWvt6vTsWMg.roa (hash: uTJWZCwIM4ioooPleIzcYRLsOUtD3nLa0gats6bP7i8=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: 0YNZZ9FT5Y/U6jFrQdsWHyWUxZXUgOc9vhwUJjQjKo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:91:4c:bb:64:a7:ac:6a:de:e2:e2:1f:02:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: May 17 16:00:30 2024 GMT
Not After : May 18 16:00:30 2024 GMT
Subject: CN=2ef8d2dfc35229de6fb624495a4e51c0e906f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:0e:15:d6:5c:a1:03:e2:68:43:9f:8d:17:
f7:1c:6d:12:20:d4:72:23:02:d5:cf:d5:5c:a0:06:
28:4f:be:d8:ed:1a:04:d0:75:86:95:d9:42:79:e7:
9a:3b:32:bd:ee:0c:2f:a8:c7:eb:70:61:63:cd:f7:
f3:bc:6f:16:44:de:12:ce:fe:47:c3:c7:e0:06:43:
21:b8:2a:a0:c8:c2:27:09:0a:a4:fc:31:04:c0:5d:
8e:7f:53:90:a3:87:38:f8:9d:fb:c1:64:f8:ea:bc:
f4:8f:d5:f0:d2:b6:62:5b:6e:90:ea:ef:22:2b:8e:
b0:b6:8e:af:af:54:28:a0:df:ca:97:8a:df:78:64:
f9:1c:f6:a2:fa:98:1c:36:8a:9f:80:38:e1:04:4d:
68:f0:f4:d8:90:f0:86:53:df:9a:4a:3b:c8:91:44:
4a:d4:ee:c5:ed:00:43:c4:63:ce:b3:78:cd:3b:4d:
97:3a:b2:83:39:7c:8c:e1:3b:8d:60:07:6b:2f:96:
a6:b0:d1:09:ac:2e:b7:10:3d:08:60:c0:22:02:a9:
f5:ad:f8:13:ec:df:fd:0b:ef:4c:ca:de:c6:e9:ac:
ef:88:5b:93:83:86:01:85:33:cc:a6:69:b4:21:f2:
cd:fc:3c:17:72:a4:c7:09:4d:ce:f6:ae:c6:cb:6a:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:D2:DF:C3:52:29:DE:6F:B6:24:49:5A:4E:51:C0:E9:06:F6:B1
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:c0:09:2c:38:85:6e:74:e1:79:14:23:28:9f:1c:79:44:
a2:55:9f:a5:88:36:6f:97:39:79:99:68:ed:89:7f:7d:36:7e:
f6:0e:44:b8:17:7b:f6:30:57:e1:0d:7f:eb:0d:5d:84:ec:69:
b1:d0:c1:74:12:9f:41:c9:a5:f7:f3:be:1c:08:11:24:c1:73:
e8:00:02:ac:c8:fc:7f:1a:27:55:bd:ae:38:19:5d:57:4d:98:
6c:02:e2:62:eb:8e:77:cd:82:95:83:f4:d5:7c:58:eb:2f:75:
6c:c4:7b:ad:65:a6:74:78:f4:2c:07:5e:ef:bb:da:db:5a:a0:
27:ab:8e:5c:44:2e:3b:a7:c3:31:72:64:fc:2d:0d:ed:9a:7b:
a1:59:42:28:f6:d7:1b:c7:ee:55:ca:f7:1e:37:36:40:12:49:
d3:63:2f:1b:f1:3a:80:70:fd:cf:8e:08:98:34:b8:1e:29:df:
93:49:15:a4:61:be:26:2d:6a:d9:13:87:fa:1f:e1:8d:28:a9:
36:8c:82:86:d6:2e:c7:b1:2f:2f:a5:20:69:d7:e3:82:df:f4:
84:c9:e1:0d:0e:68:c3:8e:14:2b:e0:ee:9f:57:cf:dc:65:09:
d6:de:83:d5:29:e7:64:a7:a9:af:42:eb:6e:76:ec:c8:ff:db:
7d:4c:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:48 2024 by rpki-client on console-ams.rpki-client.org