Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: Qse7UT1i7mCEGkf+sdQRecq5VXtYq4hhc1hYUXyrkZk=
Subject key identifier: 2A:97:35:5B:E0:E1:94:02:27:7A:25:25:04:06:33:98:64:37:3A:F3
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 01901DEBEA8D55E4C4DA97519D79A52D308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:01:58 +0000
Manifest this update: Sat 15 Jun 2024 22:01:58 +0000
Manifest next update: Sun 16 Jun 2024 22:01:58 +0000
Files and hashes: 1: WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa (hash: jdOJ6baUPje4Gr5Tcn3mxxHfT0Etu5YoePfzEZD5IrE=)
2: _16KtKwHIyoglK1plBQNQQDTIb0.roa (hash: IR9OKL6T6WlGdXJRgy89hl04sfMNq0zvsnXCPtBDDtQ=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: C1AJIACQyMWUIszdkVMbBbuLV3sPQTLmHjsv10fY1PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:ea:8d:55:e4:c4:da:97:51:9d:79:a5:2d:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jun 15 22:01:58 2024 GMT
Not After : Jun 16 22:01:58 2024 GMT
Subject: CN=2a97355be0e19402277a25250406339864373af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:09:ea:7d:be:c5:92:3b:99:a8:10:bb:f2:
f1:b2:79:1b:f5:28:f8:a4:b7:b7:f3:a1:3a:7d:b8:
f6:4b:b4:2b:f5:5a:00:d0:ae:4e:a9:9e:4d:02:cc:
77:b3:77:d1:61:37:11:4b:78:8b:63:7f:9d:f3:17:
19:16:be:63:29:5d:9f:25:28:fd:ab:a6:d2:cc:da:
16:d6:b9:a6:06:64:4d:54:94:1f:45:83:8c:05:51:
2f:6a:1e:2f:77:f9:d9:9b:d1:98:dd:7f:b3:c9:7b:
12:ad:7c:05:3a:86:a9:33:35:0f:d1:de:35:4f:c0:
76:a0:78:17:53:79:bd:01:79:84:51:ab:cc:4f:3d:
d2:08:a2:a0:f6:47:0a:60:65:dd:27:b8:14:a9:8d:
63:76:1d:05:66:11:5b:18:52:e3:47:ce:a2:5f:8c:
0a:1e:0a:bc:00:6f:27:ab:ce:b5:0a:b2:b6:87:c6:
bb:40:31:d4:d8:3a:40:69:46:76:ab:39:1b:04:41:
86:d5:7b:14:0b:aa:d4:51:36:29:02:cc:d6:45:49:
85:bf:f2:25:aa:d5:45:05:df:0f:c6:21:4d:04:b0:
69:6e:d2:49:1e:c6:be:06:00:50:3e:9d:7f:97:3b:
c1:45:7e:97:8b:8e:74:52:57:19:38:b3:94:38:ee:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:35:5B:E0:E1:94:02:27:7A:25:25:04:06:33:98:64:37:3A:F3
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:73:0a:e0:22:40:23:c6:33:55:f6:c0:c5:3c:f1:9b:6b:
61:5e:5e:13:fc:11:82:ff:67:34:51:cc:73:ae:c8:c4:6b:1d:
c4:93:3f:78:85:4b:cf:8a:36:57:a1:f6:a7:5c:99:1d:c9:60:
28:81:b4:dd:75:7d:d2:6b:69:67:e7:07:d3:e7:1f:13:75:60:
79:05:39:ce:69:c8:3b:cf:df:4d:fd:04:69:1e:9d:d0:c3:38:
08:c7:83:44:2a:44:11:9c:50:93:ba:10:05:90:0e:bb:5d:40:
11:44:e0:a2:26:d3:7b:8c:a6:96:c9:43:55:c7:dc:8e:3d:5b:
49:cc:ef:bd:40:5b:20:f8:d9:fe:78:c8:dc:85:e6:93:c0:12:
10:5b:fd:ba:5d:4d:75:3f:04:20:45:f8:12:47:de:fe:0f:62:
14:3a:1f:87:9b:60:e8:f5:05:8a:fe:a3:e1:2f:96:bc:d7:8e:
90:44:4c:a7:92:2d:ea:91:5b:bf:ea:dd:85:e3:f7:e5:9b:15:
48:c9:f7:55:93:0c:04:1d:60:e6:d0:70:59:ca:2a:bb:f1:ac:
92:e9:02:da:98:a3:1a:e4:d7:68:6e:3c:80:5e:2c:35:59:4c:
6f:77:31:26:a0:0f:03:00:75:e9:f7:be:29:94:59:50:c7:05:
63:a2:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:51 2024 by rpki-client on console-fra.rpki-client.org