Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier: 4L3uIRrGX0kNDfjGZDsaNSZ5/cbc2VcuXWx5xO1w8Ag=
Subject key identifier: 4E:36:00:D8:F5:7A:E6:AD:05:AC:91:9D:EA:09:B4:7D:07:F8:B6:82
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 01901DEDAC2696FF61344653D91C8B247D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number: 11C8
Signing time: Sat 15 Jun 2024 22:03:53 +0000
Manifest this update: Sat 15 Jun 2024 22:03:53 +0000
Manifest next update: Sun 16 Jun 2024 22:03:53 +0000
Files and hashes: 1: 7KcXkGAxrngfn8g2AOlb7MqrD-k.roa (hash: 4FgRdL7mmRY+/fHRg3eBnImSwWxHytDitaQ5telDG4s=)
2: dpPghb2be9ew0uImaXN1pElidSw.roa (hash: M1gktY8Nq7BGHfrmClJcq6cWM8Q6BRiJ38MxwKZFoag=)
3: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: f9dNnE3G11B7pa3yRvtdtAXkoUwxcXu4hf5kkF2lYps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:ac:26:96:ff:61:34:46:53:d9:1c:8b:24:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: Jun 15 22:03:53 2024 GMT
Not After : Jun 16 22:03:53 2024 GMT
Subject: CN=4e3600d8f57ae6ad05ac919dea09b47d07f8b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:18:fb:d2:02:f5:4c:0c:bd:42:8f:43:b5:
31:b1:b6:5d:2d:a5:2d:35:c3:ee:b3:fa:5d:12:69:
94:ae:5d:96:63:7c:96:33:7d:2b:ea:c9:d6:1e:09:
40:2d:31:4e:ee:a1:f9:e0:64:f4:a6:50:3d:05:da:
fc:d5:aa:b4:8f:b9:63:6c:37:35:97:91:8e:dc:74:
e6:4b:40:0a:63:bb:24:df:b9:7c:b2:44:24:67:a0:
f7:94:ff:c6:84:7c:6a:02:66:8c:cd:b8:61:39:98:
3e:30:90:0c:be:43:6c:49:76:d3:63:36:dc:75:e7:
49:aa:6d:4a:c3:2f:a3:3d:a6:17:38:09:11:f7:cd:
c1:53:ae:cc:cd:8d:31:53:ce:57:4c:7f:fe:65:72:
85:e3:cc:c7:ff:79:6e:b0:6d:30:f2:0f:06:38:42:
72:f7:c9:51:ba:55:a8:c9:df:13:c1:5f:c7:97:89:
ec:cf:bc:12:13:3e:c9:01:d3:e2:75:d2:39:66:85:
8c:ec:70:84:ef:1a:4e:70:bb:46:7d:f4:3d:72:43:
1a:34:10:b2:21:03:9b:f7:c6:4d:84:ce:49:d4:00:
c0:9c:c6:13:f0:b7:e9:73:c1:3d:33:68:91:46:ec:
57:43:60:ca:44:98:e3:be:25:07:2b:90:2f:70:47:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:00:D8:F5:7A:E6:AD:05:AC:91:9D:EA:09:B4:7D:07:F8:B6:82
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:44:8d:3f:ad:60:ac:b7:16:e9:99:3e:b8:a7:f3:c9:19:
61:56:04:cf:ef:08:70:7b:6a:10:d2:f1:8d:c3:2a:d8:44:20:
31:2d:02:15:cc:f4:23:e2:1c:df:5a:a9:cc:ef:67:1d:c3:1f:
1e:48:cd:89:98:a2:73:55:dd:30:b4:30:6d:2e:06:0d:a8:26:
8f:94:89:d7:ca:73:5a:6e:e6:38:ad:9d:a2:cc:9d:54:a7:d9:
84:ca:15:57:d7:fa:fa:58:a4:b5:81:b0:63:43:d1:2f:6c:f1:
02:5a:e8:da:57:3e:5e:f8:84:d4:1a:da:e0:cf:25:c1:aa:3f:
5b:59:40:73:d0:a3:ca:2d:07:e9:99:b2:2b:34:23:ff:e3:b8:
f6:c8:d7:b8:58:15:48:87:20:7f:81:3b:46:df:9f:fa:2a:5d:
d0:18:04:b2:e2:be:ff:57:6d:5c:ad:44:ec:3c:1b:84:5d:5e:
52:0e:a7:e9:d9:fa:46:1d:92:ba:4d:f0:fc:ee:85:d1:20:45:
7a:e3:06:d2:28:0c:2b:55:8f:a4:31:7a:41:b4:eb:c1:fe:2a:
75:6d:56:90:15:e9:98:6d:ea:60:9b:4e:92:56:3a:6e:f6:b1:
e5:ce:91:3b:fb:ec:6b:11:46:70:74:eb:c2:dc:5b:de:dd:ac:
ab:1b:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:34 2024 by rpki-client on console-fra.rpki-client.org