Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: qA79w+nW7w3v9FRGtZuYIE2MVKl6TDITpM0k/CkTl0c=
Subject key identifier: 96:89:0A:BC:7F:83:DA:FE:C8:60:1E:07:93:45:07:D4:93:D5:C4:D5
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 01923A38D066B1830D590A2D004A25FF120E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 0EDE
Signing time: Sat 28 Sep 2024 20:00:54 +0000
Manifest this update: Sat 28 Sep 2024 20:00:54 +0000
Manifest next update: Sun 29 Sep 2024 20:00:54 +0000
Files and hashes: 1: BxJEEIi-3qKl7I5TEm-UPIvATho.roa (hash: GS4ogG22x8dpp1PkiOcPgMI6nX70n/VELpQmOMzwdWU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: iQjf6LdFuPG47HJRGZvs2XhZK5S7QvBmWPX1b/wcyzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:38:d0:66:b1:83:0d:59:0a:2d:00:4a:25:ff:12:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Sep 28 20:00:54 2024 GMT
Not After : Sep 29 20:00:54 2024 GMT
Subject: CN=96890abc7f83dafec8601e07934507d493d5c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:7d:a5:99:a3:5d:76:c1:cd:1b:09:62:a9:
4a:45:0d:0c:68:6a:d1:6a:2d:c5:4b:5b:6c:c2:f1:
e3:0c:23:65:f0:49:4e:f4:82:5a:8a:dc:97:aa:d8:
f2:1f:cd:53:af:81:9a:53:f6:cd:aa:6d:49:4a:6c:
e6:96:03:39:66:cc:90:3a:14:15:9e:dc:77:0b:43:
0d:e9:cf:d1:1f:2b:94:ba:67:1f:be:43:98:32:b5:
ae:ae:2c:b4:f8:8f:dc:71:43:45:6d:5c:53:75:04:
26:3d:a4:56:44:15:55:f0:36:5d:17:e6:d7:76:70:
b6:32:25:d7:9d:ca:f8:b7:3e:8c:4f:73:bd:6b:dc:
e3:24:b9:de:d6:86:7d:6a:9b:8a:82:05:f9:ed:5a:
d0:44:93:90:72:1d:0f:43:85:65:5f:d0:2b:a9:92:
8e:f4:e1:4d:09:8c:e0:9b:3f:da:76:88:e1:b1:ae:
cc:67:6a:a2:ff:d5:0a:5c:0a:44:ff:5a:71:a4:03:
04:65:d3:b6:dc:94:8c:c5:ae:7f:d4:f1:58:5a:df:
e2:b5:75:73:80:4e:dd:fc:97:06:dd:0f:8d:2f:8d:
03:c2:68:d8:d7:75:f9:af:b9:eb:52:bd:76:7e:e1:
7a:8f:66:4e:c3:6b:6a:5e:9b:27:f7:67:f4:b6:fd:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:0A:BC:7F:83:DA:FE:C8:60:1E:07:93:45:07:D4:93:D5:C4:D5
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:b3:2a:70:8d:73:0d:d7:93:1b:5b:ef:83:c3:bd:00:0d:
d8:fc:c7:02:f2:29:d6:ec:4c:fa:4d:b5:0c:98:2c:bb:ca:97:
f7:8d:ed:c9:65:59:41:47:3a:9a:e8:a8:98:17:b1:5a:f7:fc:
02:c4:e3:d6:56:ee:27:c6:ba:6e:61:cf:8c:a8:5d:04:01:be:
0f:6a:ce:67:7e:c8:e9:92:73:d9:97:56:8f:25:9f:de:a6:59:
90:87:2b:44:92:51:29:ba:a8:6c:b1:ad:25:90:ee:6b:ac:05:
ee:2c:68:ff:ef:a2:72:7d:e3:eb:9e:10:71:59:56:04:aa:66:
79:aa:1c:23:10:79:7b:bb:84:9a:6b:80:b1:0b:62:b1:7e:fc:
29:66:cc:8d:3c:d4:93:d6:50:6f:0a:b3:0a:d5:4b:33:19:30:
1c:07:6e:5d:b1:19:d7:cd:59:9f:ab:c4:69:9a:e4:85:c3:79:
d7:9f:c1:e4:3f:c8:fc:92:7e:c9:06:21:87:3f:0e:b1:8e:8f:
b5:e8:0e:db:81:6c:fb:71:85:c9:41:86:0a:d3:ae:e1:71:1f:
b9:e6:a2:a9:0a:92:e3:09:1d:a8:f2:71:d7:a2:3a:79:ee:09:
4d:89:57:25:08:9c:33:d5:25:69:05:3b:d7:f1:e7:c5:b0:7b:
ac:f4:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:05:30 2024 by rpki-client on console-ams.rpki-client.org