Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: 2jbwm9QCH58tDfxoc9npN0JFy2BEoLceYCTWao+MLk4=
Subject key identifier: 4C:63:AC:2F:EC:A3:F9:21:08:4B:96:D6:05:FB:50:0C:02:23:CC:DD
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 01935878F571F04FE7DA70CA8A131E68F07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:02:22 +0000
Manifest this update: Sat 23 Nov 2024 10:02:22 +0000
Manifest next update: Sun 24 Nov 2024 10:02:22 +0000
Files and hashes: 1: Q6S67dUtQlrlYptIoghLLcauLms.roa (hash: LdBMFn1GdF4yFbRHb1cfXRR//0d9C25uFjgCDDJn5BE=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: t3AyCeOvObX0mss/urdWX9CynYtQI3+NAH2tJ+AGNhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:f5:71:f0:4f:e7:da:70:ca:8a:13:1e:68:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Nov 23 10:02:22 2024 GMT
Not After : Nov 24 10:02:22 2024 GMT
Subject: CN=4c63ac2feca3f921084b96d605fb500c0223ccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:a4:04:3b:74:52:e6:26:89:30:8e:8c:cc:
77:59:bb:e5:be:06:3a:04:52:ef:4f:77:d5:90:76:
08:2d:15:5f:c8:7a:a7:24:4a:19:20:b4:f1:50:45:
1c:a5:1f:ad:7e:1c:96:95:2a:2d:fa:31:44:70:0d:
f4:02:80:f7:f4:37:ce:26:22:57:2c:8e:5d:d8:a3:
cb:f7:6d:25:dc:3b:70:c5:77:a6:fb:a6:d2:49:2d:
76:6c:8c:39:b4:5f:65:87:d8:2e:3e:b0:63:bc:f0:
56:91:17:d9:7e:b1:31:09:1d:a2:9f:8a:f2:9e:c9:
33:16:68:63:1b:71:7b:3e:c5:1e:d4:9f:0f:1c:a1:
d4:97:ae:5f:08:8e:7d:13:1b:ce:ed:5e:51:e5:26:
17:c5:6d:37:c7:5d:f2:d2:36:3d:56:6a:34:88:1e:
59:ff:ee:11:88:51:bb:ce:f3:0a:30:3d:73:1e:93:
26:4e:df:90:f1:3d:77:ed:01:62:7d:b9:ba:f9:53:
5b:56:49:c0:52:e3:b5:68:ce:c1:3e:53:22:4a:21:
db:53:0a:43:51:eb:4e:b8:7b:2f:6f:9e:de:a5:c0:
a1:7e:75:8a:3f:87:1f:08:1f:e9:6b:35:75:ae:48:
1b:e1:f0:fa:f7:7d:48:b8:07:8d:6d:99:73:fa:21:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:AC:2F:EC:A3:F9:21:08:4B:96:D6:05:FB:50:0C:02:23:CC:DD
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2b:72:c4:33:e7:0d:f9:88:66:6b:a2:21:e5:ae:b8:9e:c3:
d7:1e:24:5b:84:59:b6:bb:2a:9b:18:ec:57:8c:dd:10:8d:7f:
39:c3:e7:6f:e8:b4:80:88:67:08:51:c5:b1:7f:89:fe:8d:0a:
54:8e:51:e7:17:c5:0d:9d:2c:ec:93:f8:24:77:43:ab:87:a6:
de:b0:79:74:f3:b3:82:4a:46:d6:12:b2:6d:27:5e:a9:b3:92:
42:a6:2e:a5:6c:15:e3:8d:3c:86:bc:2a:44:5a:85:fd:36:9a:
ac:5c:c0:a8:69:80:41:37:1f:0b:72:72:85:4b:ff:ae:e0:33:
4a:0b:d4:50:09:d3:19:cb:6f:89:48:ab:b4:d8:6d:00:d0:e6:
53:26:42:39:d5:65:50:8c:87:5e:c0:33:f9:7a:3f:32:ae:21:
47:26:ce:8e:d3:62:c8:a5:8f:41:f0:de:60:18:11:62:6d:04:
ea:0e:49:ff:76:50:2e:f9:ee:8c:25:99:03:1c:67:16:aa:5c:
51:60:fe:3e:9b:17:07:ff:10:95:97:c5:f4:4b:f3:0b:15:f9:
c7:d1:92:79:ee:28:12:c3:79:32:63:be:af:66:fe:1e:90:76:
a8:b8:33:49:4c:e0:00:e7:46:c6:df:e2:83:76:44:c5:74:91:
e4:73:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:01 2024 by rpki-client on console-ams.rpki-client.org