Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: LmIGcm7fp3ty/O+kVNBmsK4dNw9JOdr1VYUsibxMYDk=
Subject key identifier: 2C:9C:3F:CB:45:04:14:A0:E2:54:5A:C3:95:EC:B5:96:59:B1:9A:F6
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019356895185C38C4407C4F29F19C4EF7632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 074D
Signing time: Sat 23 Nov 2024 01:01:00 +0000
Manifest this update: Sat 23 Nov 2024 01:01:00 +0000
Manifest next update: Sun 24 Nov 2024 01:01:00 +0000
Files and hashes: 1: I3P-1JDt-ma40qgbCfRMi1GO9Tg.roa (hash: /jSSWOSASybJeOp0KI7FVJCVhNtjnFG7CWxxqpOJfkM=)
2: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: b5QnXQArx5R12nHoRoeYXjzy2gJFMrlu8PDFnXwXYZc=)
3: jx4vfHZ6Iu5vlAP_0vleiEEMGkE.roa (hash: a3HqUHsrBCmWeZA/q1a9oUEINmIY/+BAooVjVAKyDwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:51:85:c3:8c:44:07:c4:f2:9f:19:c4:ef:76:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Nov 23 01:01:00 2024 GMT
Not After : Nov 24 01:01:00 2024 GMT
Subject: CN=2c9c3fcb450414a0e2545ac395ecb59659b19af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:4e:f1:69:4d:91:4c:fc:4b:b5:ec:ef:12:
87:0a:33:1b:aa:90:a3:f3:70:bc:01:ab:0f:60:e3:
e7:9f:4d:31:f5:06:23:c5:6d:91:d4:64:88:a7:b7:
f9:93:4c:66:a8:46:55:e4:17:8e:44:6a:57:75:10:
3c:57:85:b5:91:23:aa:98:be:d7:d1:a1:a8:c0:e9:
ff:66:74:0c:bd:e4:e8:bf:62:6b:75:a2:34:cf:83:
28:81:81:38:ef:17:e5:c6:5d:23:40:13:f3:35:07:
e5:ac:eb:58:79:53:f2:b6:cb:0b:a7:22:98:59:11:
f0:fe:a6:fc:46:83:0a:64:7a:e0:49:e4:b2:c5:08:
34:31:c0:eb:9b:ae:92:6d:c9:bd:2b:13:97:fb:8d:
ea:9c:d0:98:cd:0d:c9:ad:7d:96:f6:7b:7b:33:4f:
42:36:1f:42:ed:a0:56:3c:76:ea:77:fd:59:9e:27:
c0:77:0c:78:a7:fb:80:f4:b4:b7:c0:ff:32:cd:1e:
f0:56:ba:43:cb:03:09:b1:85:92:da:b0:2f:d8:04:
5e:33:4c:de:5e:56:fd:2f:17:b7:f5:52:ba:46:5d:
3b:bc:26:aa:bd:c0:5b:d2:c2:ed:8c:f5:42:4e:8d:
c3:2d:98:b0:47:8a:de:81:b9:2e:ef:03:20:96:e8:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:3F:CB:45:04:14:A0:E2:54:5A:C3:95:EC:B5:96:59:B1:9A:F6
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:9c:ce:b1:61:d6:b6:2e:77:67:42:67:62:77:3c:64:5f:
87:2f:61:45:86:41:a3:a9:a1:c6:7d:4d:13:c3:f9:1b:e5:82:
c0:5e:c5:5e:35:c1:0d:84:f1:33:1d:44:7a:f5:83:23:e6:91:
df:5b:78:1c:9c:d0:92:9e:6e:1a:71:79:97:cf:c6:64:42:3e:
fa:9f:e1:38:db:32:1f:73:a7:6f:99:92:1a:c9:48:35:4b:9e:
91:88:57:62:8d:2d:81:47:9d:56:42:e4:2e:5a:9f:96:9c:29:
b7:5a:0e:f3:76:fe:3b:a8:d3:e5:c0:c7:dd:62:e9:e0:5c:7e:
ae:b1:81:e5:ff:f5:7a:a6:63:90:7b:11:6b:65:48:da:b0:14:
d9:28:bf:60:bb:ba:ef:56:3f:50:c6:01:72:27:34:c5:dc:d7:
f8:d5:4f:23:c8:73:81:f0:9c:73:c6:01:dd:f4:92:5b:66:19:
bc:1b:29:37:e4:56:52:00:53:c6:ce:f8:e5:b0:f5:8a:59:81:
3b:a9:c9:03:eb:bc:0b:ca:23:4e:a4:f6:6f:a9:4d:78:72:1d:
af:6b:05:5e:85:b0:ba:21:14:ac:c0:69:22:83:d6:5c:86:08:
5f:17:50:f8:ed:c6:8d:72:ce:b9:ba:31:72:1d:81:b3:2a:f7:
c6:d1:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:15 2024 by rpki-client on console-fra.rpki-client.org