Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: 8r9gQJrNRAxthbuDctwdC3Ei6IziCsz8nBRZd2fEGlI=
Subject key identifier: FF:57:F4:25:FA:B9:AB:70:17:39:53:30:03:01:99:C5:8E:80:02:6B
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 01901DEB2BA991C7CE049E02560D970B47B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 0E57
Signing time: Sat 15 Jun 2024 22:01:09 +0000
Manifest this update: Sat 15 Jun 2024 22:01:09 +0000
Manifest next update: Sun 16 Jun 2024 22:01:09 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: DFEB+d2vYTdH8n0BKDMdkYzbfLyZLmJFMr9hxYomkpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:2b:a9:91:c7:ce:04:9e:02:56:0d:97:0b:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Jun 15 22:01:09 2024 GMT
Not After : Jun 16 22:01:09 2024 GMT
Subject: CN=ff57f425fab9ab7017395330030199c58e80026b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:85:ed:e2:50:f4:d6:1f:08:13:07:13:d1:
80:b0:7a:ea:8f:bf:17:ef:5a:bb:8a:90:31:d2:ca:
1a:de:f6:c8:c9:a3:94:0c:84:57:57:3b:15:49:d2:
e4:cc:9d:44:e7:32:b0:07:8b:96:95:3e:b6:00:ef:
49:9c:0a:e5:f1:b6:fc:43:2a:51:8d:c2:b5:73:27:
e9:7e:0f:31:68:9c:6a:07:61:e7:5a:fe:34:44:30:
a5:b4:6b:39:71:7d:f1:de:1a:3a:fc:6b:65:19:e5:
e6:1d:2b:42:8e:94:af:2c:e9:b5:50:b8:f1:b1:48:
c6:e0:92:11:a1:b1:15:85:18:5c:f6:ee:91:f2:bd:
93:37:91:bf:1c:f3:cf:c0:14:d3:81:ef:68:52:d7:
5f:42:59:2b:34:01:68:64:51:80:98:00:d1:6c:e9:
15:d1:83:70:71:b0:3a:35:93:1e:34:3f:96:30:f1:
57:d3:f1:89:2c:3e:e4:60:10:e8:0f:4c:bb:7c:93:
d5:3f:f9:76:27:72:af:73:1a:ec:29:d9:c5:02:49:
28:9d:27:b1:d0:23:22:fe:6d:b2:65:b7:93:6f:5a:
ad:07:df:f7:a6:9e:05:f9:e6:77:c8:93:5b:7e:32:
27:70:89:9b:62:4e:93:91:bf:c7:93:db:60:0c:d9:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:57:F4:25:FA:B9:AB:70:17:39:53:30:03:01:99:C5:8E:80:02:6B
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:f1:01:63:55:48:2d:b1:3f:32:4c:03:8e:cf:59:1d:d3:
0e:60:da:41:77:fa:9c:7e:ab:97:df:b2:7d:b6:19:4e:2c:e6:
6b:0a:41:e5:ae:de:b8:2a:a9:64:66:79:2b:63:c0:17:62:0f:
06:d4:55:ae:36:e6:5b:ba:48:37:88:53:5a:08:d3:fa:87:17:
fd:0b:73:01:d1:11:a6:1f:f0:b2:01:14:d6:61:c8:92:02:88:
c9:64:84:2b:2a:cc:c6:2c:92:da:a1:bd:28:94:14:27:3e:a4:
0d:d7:87:26:71:5e:cf:81:83:aa:9f:9e:f3:42:bc:35:d5:50:
1a:ce:16:40:94:81:40:e1:7a:22:9d:44:59:a1:04:8f:4a:e0:
01:70:08:30:b5:e7:07:6c:db:0d:e7:9c:20:bd:55:22:0c:71:
de:ff:60:93:9d:87:45:78:04:ef:bd:82:ea:c2:f7:5e:d2:6a:
f6:f9:a5:4e:72:3c:f3:95:d1:cb:65:d6:70:2c:c4:70:5e:8d:
d0:97:55:06:2d:84:2a:fa:ad:b5:5d:1f:0e:e5:83:72:d2:ef:
f3:cf:15:1d:86:b9:ed:03:9a:a2:b9:58:16:f9:d1:2e:dc:28:
58:c7:c3:ad:bb:cc:a7:6b:81:1e:dd:78:9b:f6:59:03:8f:8c:
4c:0f:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:32:34 2024 by rpki-client on console-ams.rpki-client.org