Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: ufGYanZ6SZjfVhZ3G9GfKWp4b42fmOlQWE9GFLUtNos=
Subject key identifier: 0C:60:CF:A0:4D:3F:5D:C3:80:13:EB:AB:97:91:A2:B0:8C:A4:A8:DE
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01935764E702D65A5C934B9165F153416797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0364
Signing time: Sat 23 Nov 2024 05:00:50 +0000
Manifest this update: Sat 23 Nov 2024 05:00:50 +0000
Manifest next update: Sun 24 Nov 2024 05:00:50 +0000
Files and hashes: 1: L9vQOvgJV_y8-IUh5GZ3n1qXZRY.roa (hash: 5oszbtV0a33X+NIYd1ID1wqX/2UPYXYn5XTldWJivbo=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: mMBYUC/b4/x0TH0Lmlf+xR7L9F8wMvPNwrvBs29Cxa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e7:02:d6:5a:5c:93:4b:91:65:f1:53:41:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Nov 23 05:00:50 2024 GMT
Not After : Nov 24 05:00:50 2024 GMT
Subject: CN=0c60cfa04d3f5dc38013ebab9791a2b08ca4a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:ba:ff:9c:e3:9f:dd:31:aa:a2:09:64:41:
82:a1:5c:e7:e6:8f:8d:90:62:eb:8d:a4:f4:43:73:
b0:ea:91:cf:ae:df:1f:8c:aa:47:c2:90:aa:3f:30:
37:28:1d:a5:b1:d9:5f:cb:28:a3:6a:03:b6:a5:65:
d4:98:24:07:61:72:3d:26:f2:6e:6f:34:39:b2:2d:
75:1c:ac:a1:17:62:5e:f7:0a:d5:e6:ee:75:f1:e1:
c1:ed:a3:5d:c4:2a:ad:7c:84:a8:a7:e2:e1:9c:3a:
64:d8:f7:50:0e:0f:e3:4f:9a:47:9a:aa:a9:74:7a:
30:3c:0e:f0:f4:b7:e3:4a:aa:f6:5f:a8:d3:b7:e3:
f9:da:6f:4e:3d:ec:16:6c:ee:9b:58:44:87:2e:78:
9b:ac:02:39:92:6c:06:1b:cb:ad:ae:e7:54:a3:b5:
69:88:b2:e1:38:ad:79:66:77:81:3e:ab:64:83:b8:
66:c8:c0:cf:2f:53:79:95:ad:c4:6c:bb:7a:4d:c9:
59:1a:30:e8:dd:e8:37:ee:e7:59:a8:42:08:e0:d0:
48:6f:cf:b7:e0:61:d3:0b:fd:e0:2f:01:4f:5c:d8:
f1:c9:fa:ca:80:6b:4c:d4:b8:98:52:58:ed:56:2b:
d0:d5:b5:85:35:2c:7c:e4:74:bf:33:29:18:74:63:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:CF:A0:4D:3F:5D:C3:80:13:EB:AB:97:91:A2:B0:8C:A4:A8:DE
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c3:20:2c:b1:47:4c:96:62:81:05:b3:3a:70:55:a1:63:58:
06:b6:49:2f:f2:58:30:78:3e:07:2d:9d:27:1f:d4:49:0b:61:
16:c7:de:98:d2:a3:3e:43:ec:6d:49:d5:ee:56:29:17:04:e4:
ef:b2:1f:c8:3a:65:18:6e:73:16:4a:63:a6:1b:cf:2f:4c:46:
97:d9:d8:ad:72:71:fa:33:9a:b9:f9:13:3d:d1:fd:7d:4d:5d:
0c:3d:c7:dd:d0:84:06:cc:a9:f9:e9:9c:14:87:7c:da:91:f3:
37:34:e3:06:54:b3:74:68:9f:22:9a:99:a2:7b:cf:2e:b2:d3:
e7:86:d3:05:89:83:be:71:9d:af:be:41:49:f9:21:2e:7a:6f:
36:b2:20:2a:08:09:b7:71:d3:5b:6a:7b:c0:3b:77:e9:24:20:
43:dd:8b:fa:f3:23:7f:a8:07:8f:da:f2:4b:b7:72:91:c2:67:
50:58:f8:1f:e4:5c:df:8a:ee:9f:4a:f2:09:bf:da:f4:b7:d5:
ae:7a:91:c6:9d:55:16:7e:dd:4a:4b:b0:30:3f:fe:7e:f3:37:
8b:01:2a:8f:10:2a:1c:9a:e7:43:56:ab:82:04:8e:96:bc:60:
5c:34:5a:9a:14:12:de:34:06:d7:93:c3:4a:a8:08:52:d8:38:
45:80:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:56 2024 by rpki-client on console-fra.rpki-client.org