Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: On0xloRuKFVF7BMngDFce6fofNCOGp/FV3e3XEvB2MU=
Subject key identifier: 00:DE:90:9F:A2:5C:8A:A9:94:4E:96:5B:AB:41:8A:46:74:D4:95:08
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019359C0B50FE6266C689401546C8CA61AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0A33
Signing time: Sat 23 Nov 2024 16:00:21 +0000
Manifest this update: Sat 23 Nov 2024 16:00:21 +0000
Manifest next update: Sun 24 Nov 2024 16:00:21 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: R/757KmYqCpF8O73rflHmOpHmFMgFT5zWbJsuGwJxVA=)
2: hdunSZBExdvm6tZZr6LtXSPsIcE.roa (hash: 6i6P940T0N7MLzg2qqrIfpzqFKHklUhkph8kPrvkVg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:b5:0f:e6:26:6c:68:94:01:54:6c:8c:a6:1a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Nov 23 16:00:21 2024 GMT
Not After : Nov 24 16:00:21 2024 GMT
Subject: CN=00de909fa25c8aa9944e965bab418a4674d49508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:3d:43:20:2e:aa:4a:c1:fb:1d:84:fc:d6:
98:fc:13:e3:61:b1:a3:ac:6f:37:b7:2a:ec:00:29:
02:bb:c4:f8:c5:5e:f1:68:de:ee:ed:cd:d0:16:56:
0c:57:fb:0b:d6:84:32:89:2e:12:28:27:c1:1f:20:
fd:96:62:74:ce:82:ce:d7:54:b5:f9:a1:2f:ac:f8:
ac:24:f9:1b:07:a3:e1:11:55:ac:b0:65:c1:d3:79:
2c:c8:4b:1a:cf:4d:aa:dc:70:12:c9:be:e2:27:f7:
b2:6e:8d:66:25:c8:d5:dd:49:9a:6e:ce:03:f9:69:
2a:28:80:20:89:aa:45:a7:3c:80:66:ba:77:48:ee:
55:54:49:f9:99:9f:3b:ca:61:d7:f7:a7:86:11:1f:
9e:dd:a8:e0:b5:da:20:c3:c7:bc:e9:7e:6b:22:b5:
8e:4b:20:a1:7a:5e:2c:03:24:36:51:66:d1:24:2e:
8c:cd:70:c0:8e:7e:37:d0:5f:c4:75:51:07:34:36:
63:aa:93:2b:34:97:15:74:23:56:c9:4a:59:60:77:
92:f1:5f:9a:b4:74:9c:9e:5a:37:df:0b:e7:01:5e:
be:06:30:31:e8:d5:49:fd:3e:10:74:0e:d8:b0:44:
31:77:50:8a:db:a7:2e:b2:91:91:aa:5c:cf:29:46:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:90:9F:A2:5C:8A:A9:94:4E:96:5B:AB:41:8A:46:74:D4:95:08
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:d0:3e:1f:52:af:cb:73:6f:2a:0f:ed:f9:d0:0e:97:2d:
8e:a0:af:ca:c6:37:c7:ae:f8:9d:3c:f3:45:c2:a8:9c:3f:a1:
7b:69:15:b2:2e:3b:40:a2:c4:2d:09:04:f3:3d:b6:85:ff:52:
8a:de:aa:83:80:cb:73:73:94:9e:fe:e0:45:f8:61:76:26:fc:
23:ea:d3:c6:d2:c1:75:68:38:54:44:0c:9e:be:b8:73:35:7a:
cc:48:76:a2:d9:d6:8a:33:45:a5:67:c9:89:d8:c3:f6:28:45:
70:cb:17:fd:61:51:84:09:05:56:d6:65:9d:4a:e7:15:74:dc:
92:95:5a:29:9b:a4:ca:15:c4:ee:06:55:2c:47:56:18:b7:66:
dd:55:c2:e6:85:93:6e:33:4a:a3:3e:94:77:b7:21:a9:d8:e6:
97:35:d8:d1:a2:f0:ec:36:36:49:78:95:93:4a:56:3a:db:42:
a0:74:79:e4:62:ae:76:65:c4:2b:0e:84:ef:ab:5b:d1:0b:03:
61:84:65:1e:00:28:cc:9b:ad:d5:5a:de:38:9e:f8:6d:4a:16:
41:8b:cd:88:70:4d:d4:29:58:8e:72:67:2d:b0:a4:26:0e:01:
8b:e9:ce:28:40:bf:8b:7b:06:17:06:0d:51:cd:ca:73:3c:00:
48:9f:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:01 2024 by rpki-client on console-fra.rpki-client.org