Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: Kpss738bmcWXUcH1P2mtatKvshejyC5DC6P91CYaPIE=
Subject key identifier: BD:45:23:5B:81:86:28:6B:FD:4A:73:24:7D:E8:CE:5E:F8:3F:11:AF
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01901DEC9F42801D2C50E6A860FC4696DE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 22:02:44 +0000
Manifest this update: Sat 15 Jun 2024 22:02:44 +0000
Manifest next update: Sun 16 Jun 2024 22:02:44 +0000
Files and hashes: 1: LJOam5EuaTjFrK0WLyL4258kKqg.roa (hash: jnRgiFyESMLm/CqojABty9iAj+7+8q/kwsKdXX3jgN0=)
2: cdksG9-LD4mtvkD_qJCsBo4hEV4.roa (hash: vEvLXhIlRIzg1TzhMSEdHooMhR+OWsnqR7vx6GCyMYs=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 2mwPtv2cxNAu+hS4ByE3U93483tF6fn9PEmM90D93ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:9f:42:80:1d:2c:50:e6:a8:60:fc:46:96:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jun 15 22:02:44 2024 GMT
Not After : Jun 16 22:02:44 2024 GMT
Subject: CN=bd45235b8186286bfd4a73247de8ce5ef83f11af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:6a:c8:a5:3c:13:75:6d:c8:ab:58:13:a0:
b7:a8:e6:0c:60:61:9b:68:60:f6:4e:9b:78:a6:82:
c7:ea:96:02:6d:05:05:8c:8e:7f:c4:25:35:bb:c6:
07:aa:5e:68:1e:04:11:26:24:f6:da:7c:c8:ea:ac:
4a:30:a7:54:a7:22:30:b5:fc:8e:7f:26:7d:f3:4e:
20:0a:c3:94:8f:0c:1f:a0:e0:b8:32:5c:5c:ce:46:
79:09:46:37:ca:19:22:16:be:dd:e5:a1:f8:d6:8d:
b8:0c:9c:55:94:57:5b:aa:1e:7a:26:1c:5d:06:eb:
61:5e:75:04:98:c4:35:04:06:8e:32:90:88:85:1e:
57:3e:58:23:dd:6c:ff:d4:f8:5c:8c:78:8f:df:e2:
50:f0:48:29:f5:66:35:47:ac:07:84:c2:50:e4:ea:
06:c6:20:32:5a:d9:27:8e:e5:f5:e2:2c:c5:f7:f2:
9b:97:b4:0b:10:02:00:eb:36:1f:c9:02:15:ee:d8:
96:d8:60:37:73:5f:e6:cf:26:6b:e4:20:0c:1c:84:
1c:8e:0a:1f:2a:74:50:45:99:77:c3:76:52:c8:b1:
0b:7d:e9:2e:da:8b:43:d5:6c:5f:fb:10:3e:3d:e2:
b8:81:9f:f6:b8:23:91:5a:b7:09:14:92:77:69:89:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:23:5B:81:86:28:6B:FD:4A:73:24:7D:E8:CE:5E:F8:3F:11:AF
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:0c:7c:16:16:e9:a1:50:65:a9:5b:47:41:ec:8e:ea:e1:
93:eb:31:e3:26:4e:1b:73:71:3d:dc:6f:ee:57:e8:c2:2a:a5:
07:28:93:e0:ee:55:95:33:dd:f6:12:f1:33:82:29:83:2b:58:
29:2e:e9:6b:cc:31:d8:a1:86:2f:c2:17:25:a2:22:bf:bd:51:
92:d8:00:51:46:81:78:d1:93:0d:e2:35:22:79:f6:0d:6d:8d:
13:c4:b8:00:40:e4:00:79:56:29:d7:ce:ed:66:2f:84:a0:3a:
29:b0:54:1d:6a:77:2e:c0:8a:fc:60:c8:01:10:78:49:0d:78:
d5:f5:f1:a9:c2:17:c8:dc:5d:bf:75:6a:1a:b6:0f:3f:e2:e2:
54:17:e0:5b:65:0f:78:35:25:b2:71:bf:c5:f6:9f:08:b1:e7:
9d:16:05:a3:5a:57:11:f9:5b:d6:dd:47:09:3a:63:9f:d7:e2:
47:fe:b3:2d:da:e9:df:2a:52:3e:01:71:01:0a:01:9a:b5:43:
aa:e3:34:61:0d:96:cb:20:b7:28:5f:bd:03:5a:e6:b7:68:31:
44:5a:16:c7:db:03:7f:7c:81:49:06:7f:4d:ea:ee:ff:0b:16:
ad:b0:b0:fb:e7:ee:54:51:76:ff:a4:3e:6f:b6:1e:35:48:88:
d1:f7:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:53:20 2024 by rpki-client on console-fra.rpki-client.org