Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier: VqpiPsJhLxqQAmXZR+7Wfze55qPRU+MNy8iEiNpTI1w=
Subject key identifier: 15:7D:66:87:7D:D0:F2:B3:9E:37:F6:4C:3D:29:66:F0:44:95:E2:29
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer: /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial: 019357D2280AB2C01B5E7644C5CC4B2680B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number: 0D21
Signing time: Sat 23 Nov 2024 07:00:10 +0000
Manifest this update: Sat 23 Nov 2024 07:00:10 +0000
Manifest next update: Sun 24 Nov 2024 07:00:10 +0000
Files and hashes: 1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: rpiD67glNGrI2HNBwnS+982XHuHo2CbOJC34mNMZToM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:28:0a:b2:c0:1b:5e:76:44:c5:cc:4b:26:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Validity
Not Before: Nov 23 07:00:10 2024 GMT
Not After : Nov 24 07:00:10 2024 GMT
Subject: CN=157d66877dd0f2b39e37f64c3d2966f04495e229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:dc:be:c6:6b:c4:b9:9e:ad:f6:b1:e8:d6:
c8:d3:84:8a:0b:f3:25:2a:ef:29:a4:08:3e:0b:d6:
0e:ee:3a:d1:5f:88:f4:07:61:66:3d:80:c0:1b:4f:
b6:5d:c8:24:7d:d5:00:d6:3c:08:26:b5:d0:e4:c3:
74:3d:5e:a4:98:df:61:42:aa:4c:a5:31:af:2e:1b:
81:40:9d:ad:75:98:45:8f:6c:f9:99:a9:25:52:49:
22:2e:7b:74:d9:fe:32:20:cf:ee:96:a2:5d:50:03:
bb:3f:f8:e4:b7:0e:3b:3c:55:27:ef:7a:67:2f:a4:
67:ce:96:ce:52:ba:89:26:54:6d:ab:4e:23:70:88:
03:b9:83:f1:0d:67:b7:c9:03:22:61:a5:8d:e8:e8:
22:15:4b:0c:83:e1:09:c1:df:fb:ff:73:cb:9a:b2:
ba:46:15:f5:e9:db:b7:31:4f:ea:f6:be:53:d7:84:
92:15:e0:0c:2e:04:24:fc:2f:d8:30:08:5e:36:98:
35:04:6a:43:ed:4f:06:38:55:0c:09:e2:dc:9e:48:
bb:91:ae:be:e0:97:38:d0:1f:64:ba:6d:2d:48:d8:
8d:5a:77:fc:7c:93:b9:ee:4a:0a:d2:24:08:dd:11:
6d:1b:77:4b:53:4d:d8:b0:df:0b:da:d6:86:0e:c9:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:66:87:7D:D0:F2:B3:9E:37:F6:4C:3D:29:66:F0:44:95:E2:29
X509v3 Authority Key Identifier:
keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:26:3a:39:94:b4:e2:ea:e0:1a:9a:8a:92:3c:26:64:09:0a:
94:e0:51:0e:0d:b5:57:e6:e5:d1:a1:40:7d:7a:89:61:a4:6f:
de:90:29:17:c0:2c:b6:a9:21:89:16:22:8d:3e:39:de:39:f2:
6d:15:f5:49:8b:8b:4f:f3:70:14:4b:ca:3e:d7:10:be:9d:e8:
c8:28:0e:f9:f6:10:7c:5a:30:b6:f0:52:e6:ce:00:c8:a9:cc:
df:53:b1:81:d7:16:60:99:79:55:39:7b:7f:da:a0:65:e0:5d:
7a:7d:ee:c0:10:e0:71:b1:c4:e5:76:c7:85:ca:99:e0:69:10:
c2:07:cb:59:a7:3d:71:e1:0c:ca:e6:e8:55:3d:db:df:a2:c0:
05:16:53:d2:8f:3d:ff:99:b5:2a:42:b3:02:f1:fe:ac:d3:e1:
fb:79:0a:e9:0c:3f:9e:60:2e:8c:09:1e:3a:4b:eb:01:9d:c6:
dc:d6:07:7b:a7:cb:14:f7:95:34:f6:1d:ec:7f:88:65:2d:ee:
50:dc:9e:2f:72:b0:24:1f:a3:ac:10:3a:28:1f:b3:eb:0e:23:
5d:ff:55:e9:1a:d9:f0:69:27:58:b0:b7:91:7d:c0:58:72:c1:
70:d2:53:ad:14:37:22:27:43:17:59:c3:b9:86:e4:3c:fc:40:
65:45:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:18 2024 by rpki-client on console-fra.rpki-client.org