Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: pd2FZJeM8PwBlPZxvg+ly7n6d0Zfe9eVoMux+YnptAM=
Subject key identifier: 20:1C:92:25:3E:17:74:CE:60:09:9C:71:0C:C6:10:F6:69:70:F7:90
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 01936A7D409ED41C6BC32D4F4BADC09F4507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 22:00:13 +0000
Manifest this update: Tue 26 Nov 2024 22:00:13 +0000
Manifest next update: Wed 27 Nov 2024 22:00:13 +0000
Files and hashes: 1: 9MaN6jNSTVmnoA-2OmPI3sB4uLk.roa (hash: y5zsFvvy9pmFGs0bbdyHDhPoew6cGwCtIP61g17v6uE=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: gPB7UGPQl8Y9R6xo0cgt0w79yIr5/HU7FT9GqioqAhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:40:9e:d4:1c:6b:c3:2d:4f:4b:ad:c0:9f:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Nov 26 22:00:13 2024 GMT
Not After : Nov 27 22:00:13 2024 GMT
Subject: CN=201c92253e1774ce60099c710cc610f66970f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:57:16:5f:da:7f:57:0d:44:f0:fc:3e:8a:
8b:43:87:bd:7c:da:e0:3a:f3:67:7b:d9:3b:fb:07:
c8:65:d6:c1:54:aa:fb:ad:09:7c:e8:00:cc:0a:e5:
c4:7e:2f:46:59:84:19:e2:3f:87:1f:70:1c:e8:04:
5f:ea:7f:95:69:36:34:de:3a:b4:56:e2:8c:cb:21:
70:9a:8d:90:fb:78:56:c0:97:cb:65:42:82:6a:1c:
ec:b6:7b:94:e3:0c:32:86:31:11:28:4f:3f:cf:af:
77:9d:d3:a0:c7:f4:5a:fc:ff:bc:80:36:31:73:45:
ce:36:88:04:d5:49:02:8a:2f:af:d6:45:33:d0:fb:
a1:e6:80:55:88:bb:94:fa:cb:74:c0:b7:8a:d7:8b:
b4:bd:6b:e2:d1:c5:16:6f:cd:9b:b8:d8:83:f2:fe:
94:86:fd:f0:a6:72:9b:82:4f:29:6f:91:3e:20:3a:
73:f5:38:05:2c:3c:29:d2:de:f2:30:51:a8:71:11:
57:96:4d:4b:fc:d9:66:15:0a:08:ec:4a:95:4b:87:
50:d6:e3:ec:56:1b:fe:0a:c1:2b:ac:07:ce:31:92:
83:c2:ae:13:e7:08:66:8f:6b:f1:32:b9:f4:6b:f5:
b7:fe:4d:d3:2b:16:6d:b1:c2:db:33:8b:95:9f:5d:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:92:25:3E:17:74:CE:60:09:9C:71:0C:C6:10:F6:69:70:F7:90
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2a:23:4c:f3:a5:9d:48:ce:2f:12:eb:5c:4c:76:61:01:94:
02:1f:f6:0b:06:cf:9d:f4:b7:2a:15:92:79:5e:45:fd:35:20:
92:bd:2c:ea:4a:5d:e0:12:b7:2a:0b:21:1a:bc:62:f7:1f:23:
25:7f:3e:92:41:65:37:e1:47:22:21:17:42:62:29:5d:82:21:
38:70:9c:f9:79:ea:52:31:a0:59:49:29:e4:0f:fd:a9:83:7b:
72:a2:2b:62:21:a7:0e:86:db:de:0b:5b:ff:e0:e4:a9:d5:5b:
77:78:d9:51:18:c9:e1:87:35:5f:5c:e9:63:a4:6b:d6:f9:3c:
f8:a5:18:43:a7:4e:4c:97:57:47:af:76:d8:c4:59:9c:ff:28:
e7:07:8c:26:d7:b5:9c:f7:30:1c:0f:14:86:33:bb:67:27:98:
d6:c5:b9:70:d4:84:2b:3e:d7:e4:1b:7a:41:e3:f8:ad:d1:c9:
93:a4:16:a0:76:e3:05:00:62:2b:f1:39:d6:59:22:d4:2e:fc:
c4:97:98:55:d4:e1:44:d9:71:63:34:e8:1a:e3:35:f3:e9:13:
90:ac:dd:f9:a6:cc:a1:93:85:70:3b:85:8a:c9:5c:53:c7:41:
35:26:94:16:9b:a8:db:0a:e2:3b:43:55:7d:0e:63:48:b3:cb:
a2:e3:d2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfUCe1Bxrwy1PS63An0UHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1
M2UwYWEwHhcNMjQxMTI2MjIwMDEzWhcNMjQxMTI3MjIwMDEzWjAzMTEwLwYDVQQD
EygyMDFjOTIyNTNlMTc3NGNlNjAwOTljNzEwY2M2MTBmNjY5NzBmNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk59XFl/af1cNRPD8PoqLQ4e9fNrg
OvNne9k7+wfIZdbBVKr7rQl86ADMCuXEfi9GWYQZ4j+HH3Ac6ARf6n+VaTY03jq0
VuKMyyFwmo2Q+3hWwJfLZUKCahzstnuU4wwyhjERKE8/z693ndOgx/Ra/P+8gDYx
c0XONogE1UkCii+v1kUz0Puh5oBViLuU+st0wLeK14u0vWvi0cUWb82buNiD8v6U
hv3wpnKbgk8pb5E+IDpz9TgFLDwp0t7yMFGocRFXlk1L/NlmFQoI7EqVS4dQ1uPs
Vhv+CsErrAfOMZKDwq4T5whmj2vxMrn0a/W3/k3TKxZtscLbM4uVn13ZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAckiU+F3TOYAmccQzGEPZpcPeQMB8GA1UdIwQY
MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt
NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl
LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyojTPOl
nUjOLxLrXEx2YQGUAh/2CwbPnfS3KhWSeV5F/TUgkr0s6kpd4BK3KgshGrxi9x8j
JX8+kkFlN+FHIiEXQmIpXYIhOHCc+XnqUjGgWUkp5A/9qYN7cqIrYiGnDobb3gtb
/+DkqdVbd3jZURjJ4Yc1X1zpY6Rr1vk8+KUYQ6dOTJdXR6922MRZnP8o5weMJte1
nPcwHA8UhjO7ZyeY1sW5cNSEKz7X5Bt6QeP4rdHJk6QWoHbjBQBiK/E51lki1C78
xJeYVdThRNlxYzToGuM18+kTkKzd+abMoZOFcDuFislcU8dBNSaUFpuo2wriO0NV
fQ5jSLPLouPSJA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:22 2024 by rpki-client on console-fra.rpki-client.org