Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: 3S69livy2HaqG+5xs06ABzUpcdWJqXkG5soYo9ChCoo=
Subject key identifier: C3:BB:27:0A:D5:F5:27:7B:FC:B2:2C:46:DD:FA:7A:F5:BE:70:98:63
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 019357D231D597EF914734225DAD3A8588EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0123
Signing time: Sat 23 Nov 2024 07:00:13 +0000
Manifest this update: Sat 23 Nov 2024 07:00:13 +0000
Manifest next update: Sun 24 Nov 2024 07:00:13 +0000
Files and hashes: 1: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: xMxW6Yd4OdNNB/ZNwhTPDz0ti/xH4LItwGasuFuQ3Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:31:d5:97:ef:91:47:34:22:5d:ad:3a:85:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Nov 23 07:00:13 2024 GMT
Not After : Nov 24 07:00:13 2024 GMT
Subject: CN=c3bb270ad5f5277bfcb22c46ddfa7af5be709863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:d3:5c:12:31:b0:d3:14:e3:e5:6e:a4:a2:
a3:d2:fd:f2:d1:ef:f7:0b:ef:68:ed:97:a3:3a:c8:
61:5f:2e:07:c0:93:28:a4:ee:3f:78:c4:12:c3:a4:
74:d1:c0:10:5f:2d:bb:1b:59:ed:86:a9:14:0e:15:
ce:58:12:38:b9:51:30:59:32:64:cc:48:c4:04:a4:
d1:23:91:70:5a:28:7d:aa:78:24:60:de:9c:b0:39:
7c:ac:68:68:fb:86:be:02:e2:2d:f9:2e:f7:e4:23:
b0:89:af:b3:bf:0e:51:38:3e:53:c2:6a:4d:85:e9:
86:a8:f6:1d:66:b7:09:e6:eb:d6:04:e1:25:91:21:
8f:3d:0b:79:6b:c2:d8:30:64:d7:67:d7:34:cb:00:
04:7d:96:9b:40:3f:b7:01:81:f0:bc:13:ec:62:e4:
f8:cb:dc:39:60:6d:3d:a6:0a:c6:24:3a:49:05:ef:
87:f7:aa:4f:ac:ab:b1:ec:67:b4:44:90:70:67:fc:
0b:1f:06:cb:fa:27:1c:5e:12:6f:82:c8:ba:98:ef:
3b:b1:3f:bb:d7:44:57:26:04:ad:e5:3f:b3:8b:03:
30:2a:2c:9e:0c:60:c9:84:2a:ea:2f:78:5d:ba:11:
b6:a8:3c:3b:91:1c:04:79:29:14:50:00:8b:83:cc:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:27:0A:D5:F5:27:7B:FC:B2:2C:46:DD:FA:7A:F5:BE:70:98:63
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:b6:d0:b1:33:54:c4:d4:28:8a:bc:84:5c:18:a9:22:e0:
ad:b2:07:03:92:94:01:0e:1c:81:ff:34:58:79:a5:be:10:bc:
80:0c:27:f0:65:75:14:14:bf:59:d9:f2:87:62:69:d3:b6:1c:
f4:04:aa:85:94:8e:ec:7c:7a:93:29:da:d3:c0:8e:1e:6c:ca:
60:7b:f5:0c:b0:95:71:2d:cc:09:b7:1a:94:0f:74:04:14:95:
87:34:af:45:c6:4a:a5:ab:2f:3e:ee:05:ef:99:2a:15:ab:f1:
31:67:3f:07:05:91:27:5a:7e:4c:ab:8f:71:ed:8e:06:48:14:
31:15:1e:a7:12:2e:bf:01:13:cd:cb:54:eb:ef:89:39:30:68:
24:e0:9c:fe:4f:a5:fc:49:85:09:75:a0:d7:65:00:4a:46:47:
05:7d:54:1c:bc:99:1d:02:1e:86:7e:89:a3:d9:35:57:85:2e:
21:7f:44:44:c9:68:96:5c:19:33:a0:bf:a0:64:e0:a5:0a:9c:
bd:36:09:65:97:09:29:49:37:2e:54:a3:34:d4:02:1e:06:7b:
37:0f:cc:fa:12:bc:3e:e1:41:16:46:3a:01:a4:0b:77:65:46:
56:26:e8:a8:c3:bc:6e:01:c3:ca:c7:8a:78:26:fd:09:9e:86:
55:98:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:18 2024 by rpki-client on console-fra.rpki-client.org