Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: MWLBS93Hkc9ZOARMwf1fWV2+F/kQSnuP8jGWIT0xvog=
Subject key identifier: FD:2D:8D:AA:B1:59:01:18:A0:89:07:96:80:64:EF:D7:4F:2E:9D:08
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 0193576467818F47FEE707E1A6C0A7739322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 0CE6
Signing time: Sat 23 Nov 2024 05:00:18 +0000
Manifest this update: Sat 23 Nov 2024 05:00:18 +0000
Manifest next update: Sun 24 Nov 2024 05:00:18 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: FAfZpeJqbzgz0kdFOmDTBtBTZgSALJhJehiQiDP1gi0=)
2: PBYps83ldEJCmUJRCNAw8fjXkvM.roa (hash: dODmekDYHQSHoe9NEFo+ebH7jlcXe53mdZy3+yCtBqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:67:81:8f:47:fe:e7:07:e1:a6:c0:a7:73:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Nov 23 05:00:18 2024 GMT
Not After : Nov 24 05:00:18 2024 GMT
Subject: CN=fd2d8daab1590118a08907968064efd74f2e9d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:0c:63:2f:a3:39:fd:1c:3f:9f:4e:c5:fc:
b2:b4:e0:7f:75:0c:51:c4:93:57:8d:8e:9e:a1:e7:
24:7e:6d:f5:74:99:48:7a:75:c3:6b:9a:2e:d9:cc:
ae:7d:55:2d:44:72:25:f9:6f:c9:3d:17:37:4e:e5:
a2:b8:c5:14:22:6f:2f:58:85:74:c2:f0:c1:14:ff:
80:df:f8:2b:ad:69:6c:37:64:7c:7c:60:36:f2:a5:
df:04:dc:ea:43:ff:7b:0a:1d:66:8e:93:e7:79:ac:
26:c3:40:44:bf:4d:ac:cc:a8:39:b1:b8:95:10:d5:
26:89:9f:4f:51:31:30:ff:4e:81:bb:7c:e8:28:7d:
7f:b2:a2:00:5c:ba:75:d9:57:aa:7e:d9:c1:33:32:
f3:e8:33:7c:5c:2c:1b:4f:0e:a4:7f:a7:33:75:9d:
d5:9f:69:47:19:38:6f:c1:2e:35:a7:85:bf:f5:53:
c8:39:fe:fb:28:d5:a2:52:f2:dd:29:80:e3:b6:c8:
5c:fe:21:18:95:09:64:63:a0:a4:c7:f1:30:4d:b7:
e7:4b:d5:43:83:15:1f:8f:c0:55:40:31:a2:c5:43:
1a:d3:cc:1c:3f:f9:b8:7a:e8:b6:a0:06:d6:98:0c:
57:41:7e:60:5c:12:c8:cf:2d:3b:1e:86:c4:b6:38:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:8D:AA:B1:59:01:18:A0:89:07:96:80:64:EF:D7:4F:2E:9D:08
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:15:aa:69:5c:ec:c3:31:26:bb:4f:aa:ed:85:24:2b:73:
46:15:69:0d:cc:5c:f5:90:3d:a3:d0:08:18:80:a8:d9:a0:f0:
bb:40:23:0b:bf:d2:ce:e8:d4:b5:0f:6d:df:f0:03:65:03:5e:
43:d4:98:4b:ad:a5:eb:8a:c8:71:b8:37:de:5e:c3:f7:2f:c6:
92:38:3b:74:74:cb:4a:ec:ea:04:98:f4:e0:a6:0e:95:ad:78:
e2:54:2e:5b:35:08:a2:f5:f3:40:d7:78:0e:88:76:80:bc:21:
9f:a0:51:05:08:fd:40:50:fc:8c:70:33:ba:e9:92:ea:b4:bb:
11:00:20:79:0a:27:80:9c:a0:39:3e:03:4c:0a:f1:6b:1e:84:
7f:76:15:35:b7:7b:a2:bb:78:70:e3:48:b7:99:97:27:c4:05:
18:55:3f:31:09:b5:d2:01:1d:8b:50:45:3e:a2:16:63:09:b6:
6b:4e:c9:13:91:e1:2f:9f:2d:6f:f1:96:4b:df:6f:a3:f3:07:
bd:02:95:bf:87:87:5b:82:ff:2a:4c:52:22:e6:f7:47:e0:64:
4a:f4:dc:37:24:b9:22:4d:82:18:53:67:e6:bf:9f:ef:23:57:
da:71:3e:89:6f:60:45:9b:7b:37:50:d2:16:98:b0:b1:4f:42:
c6:15:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:57 2024 by rpki-client on console-ams.rpki-client.org