Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
File: zxCtkS75QqrLTRCt05kDxun7sDo.mft (raw, json)
Hash identifier: 0n5fLpiZzdV378UyX7wWO9VLcMMToPsSxHqTI6qa26A=
Subject key identifier: E2:D2:57:FA:43:5F:B9:CE:30:B4:E8:F3:D3:BB:41:23:A3:B1:28:BB
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Certificate issuer: /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial: 01901DEAC4B097AAEDA19B9E6AAF5DC597F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
Manifest number: 0A22
Signing time: Sat 15 Jun 2024 22:00:43 +0000
Manifest this update: Sat 15 Jun 2024 22:00:43 +0000
Manifest next update: Sun 16 Jun 2024 22:00:43 +0000
Files and hashes: 1: RufuW3_xCNrkXrItzwSh1-gqEtU.roa (hash: rS3Btv0ZqtLDbIiRa7t0h8uqqwVYVSfQARh6vcBuITQ=)
2: gvKxdokVyvVvqidVCEhpavCGypM.roa (hash: JV5vjmuCjYHlQUBmjNHyG5Dq71jx7647+gBZftVYkDE=)
3: zxCtkS75QqrLTRCt05kDxun7sDo.crl (hash: fIgC8Ae238h2IC9mwBNv9gkphoHEJEN3ag6M2uDdx+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:c4:b0:97:aa:ed:a1:9b:9e:6a:af:5d:c5:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Validity
Not Before: Jun 15 22:00:43 2024 GMT
Not After : Jun 16 22:00:43 2024 GMT
Subject: CN=e2d257fa435fb9ce30b4e8f3d3bb4123a3b128bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:7a:05:a4:6b:59:18:43:41:b9:bc:f8:9d:
ac:cf:c3:68:db:ed:d7:09:3d:51:fb:fb:fa:0c:59:
86:63:84:b8:e8:9b:26:23:51:94:91:ec:e0:89:36:
36:1f:2b:e8:a5:3f:4c:f4:85:ec:49:ba:00:fd:ca:
4a:dd:a3:28:9f:97:40:ca:54:d2:76:26:a4:05:2c:
72:31:21:7c:4d:38:a2:06:35:1b:36:f9:97:7d:34:
29:cd:85:d1:c9:aa:ee:b2:55:45:dd:14:d5:1d:36:
e1:c2:be:3a:a1:0a:8a:64:a1:41:29:47:cb:19:90:
41:0c:a6:1b:10:55:81:80:c2:df:01:11:01:d2:34:
da:5e:26:71:18:af:1b:4e:9d:2a:5a:bb:77:83:ea:
5c:b4:de:ec:47:18:a2:96:ef:60:e4:e8:d1:5c:d2:
fb:b7:f6:0b:d5:3d:f3:9e:85:51:46:02:72:9a:bd:
0a:61:c0:e8:84:56:ed:f3:2c:e5:14:a8:f9:86:71:
a6:5d:4c:cf:27:82:ee:47:26:f3:a2:d6:fa:e4:c0:
dc:1f:7a:e1:ec:bd:ab:80:45:40:76:13:eb:83:ad:
1d:29:ce:8e:6b:44:3d:8f:bd:23:8b:36:52:e3:89:
25:79:35:b9:b2:ad:c0:04:d8:bd:b4:a2:56:a5:4e:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:57:FA:43:5F:B9:CE:30:B4:E8:F3:D3:BB:41:23:A3:B1:28:BB
X509v3 Authority Key Identifier:
keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:1a:fa:08:72:f0:de:ed:a2:b2:bd:40:b5:9a:02:99:43:
15:c6:2a:1c:1d:70:d7:ca:a4:87:1a:2d:8c:e1:e6:a0:9e:ee:
a3:a2:8f:f6:b8:8c:e1:19:f7:f5:df:c7:cb:85:41:39:0f:c8:
10:4c:78:f6:4b:dc:8d:1a:9f:6f:f0:10:64:b8:3b:e4:03:11:
a9:d2:4d:e8:8e:35:cb:34:50:f4:36:bc:56:c8:96:0b:8b:c3:
f9:92:33:7e:e5:89:dd:5f:e9:f9:ac:48:72:14:42:bd:76:a9:
c9:49:87:03:61:23:25:e1:30:46:ad:2b:b3:f4:38:13:db:f9:
f7:ce:0d:7e:6a:cd:52:b3:55:50:f2:ef:17:f5:05:2b:86:df:
07:bf:c4:73:b8:97:f0:e5:a2:7f:6e:ba:58:14:5f:9d:45:2b:
4d:6e:17:48:04:7a:f0:75:65:0e:c1:ab:e9:38:e9:29:cd:e8:
37:f1:7f:23:55:25:a7:b8:84:31:26:8b:4b:4c:8c:1b:f0:97:
7b:b3:8a:34:e2:9d:c8:d9:db:4a:88:be:66:27:e9:fa:0b:b3:
57:60:5d:71:9a:82:4d:9f:3b:18:a9:b8:26:f4:a0:94:27:bf:
c3:45:4b:ac:2d:b8:cc:f4:ce:95:59:3b:e7:36:f6:62:b7:9c:
a0:11:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:32 2024 by rpki-client on console-ams.rpki-client.org