Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: tgNRIoJds1ziGHLdhsOtNRJATYv6PoBvZJnNNUOTczU=
Subject key identifier: 3B:0C:13:38:95:26:C8:BD:C2:DE:E4:33:A4:FD:7A:F0:BC:F4:58:D9
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019045669053DBA2BB0E599B7C2EF6B0F103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 14:01:07 +0000
Manifest this update: Sun 23 Jun 2024 14:01:07 +0000
Manifest next update: Mon 24 Jun 2024 14:01:07 +0000
Files and hashes: 1: 1Qip2LFVDlxWAxfcUIhbBQT-rTc.roa (hash: ZKRqE22ZUpn+wo+ymdBd7NaILCgM750xJ8LdahZCO4Y=)
2: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 0nYx8R8vxjVKG+WQQciJg7kQlLHjKOYa7OCLyGPcTGA=)
3: UsFu_huS1Sr0j5HEjrdt_dMK-3E.roa (hash: tIQlDrKnOxIRKHV+O0gMb0sC3/ng+tCf9R3CWM459vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:90:53:db:a2:bb:0e:59:9b:7c:2e:f6:b0:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jun 23 14:01:07 2024 GMT
Not After : Jun 24 14:01:07 2024 GMT
Subject: CN=3b0c13389526c8bdc2dee433a4fd7af0bcf458d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:88:26:4c:0d:22:22:a3:a2:f7:91:3a:4e:
62:8b:be:36:24:16:01:40:f9:33:fc:d1:e4:8d:d5:
6c:c0:af:89:ab:8f:75:7c:9c:34:c3:1c:8d:eb:ac:
3d:63:77:55:4a:93:2e:d4:a7:df:5c:48:df:70:7f:
53:46:4e:20:ab:51:47:09:17:76:06:19:a5:ce:f8:
44:8a:f9:3d:6a:2b:e5:24:a9:ad:ec:79:53:18:0e:
6e:d6:60:38:9f:f5:da:6e:90:1a:11:91:66:79:21:
f4:4c:aa:37:9c:58:62:a8:ed:2f:40:8b:d9:9c:04:
4f:ab:0c:5f:5b:03:24:9a:d9:58:a2:7e:6e:11:55:
61:ed:c3:d8:cf:11:6e:14:3a:5f:f5:3c:ad:82:ba:
f3:82:62:d3:51:cb:c8:2f:92:3f:12:3c:d3:f0:a8:
0d:83:51:15:0b:cd:97:7c:74:1b:be:f4:9e:b3:5a:
be:1e:e8:e6:80:6f:64:ca:af:63:98:40:99:b4:af:
7a:12:e5:68:d0:5c:5d:b7:69:c1:4d:7c:13:ec:be:
62:c4:bb:ad:ae:c7:48:a9:c3:01:a1:49:b1:a8:b0:
17:94:64:f6:a0:b2:08:de:d5:ef:6b:ad:9e:f3:76:
88:31:9b:c1:4d:35:52:24:a0:c6:4f:71:c9:17:a3:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:13:38:95:26:C8:BD:C2:DE:E4:33:A4:FD:7A:F0:BC:F4:58:D9
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:65:47:e1:76:0c:a8:78:34:6d:ac:38:15:a1:35:a4:a1:
f4:96:77:8b:93:8f:f1:6e:65:08:71:0e:72:ff:2a:59:80:da:
9f:0b:7f:7e:1e:9c:c0:2d:76:3f:55:36:26:5c:e4:f9:30:ef:
b7:b4:62:95:31:d2:1c:56:76:ba:41:02:ff:ce:9f:5a:fa:c1:
15:f0:18:a7:06:7c:84:09:08:61:ea:c3:da:c2:dc:8f:85:8e:
ca:31:d1:5e:6b:5d:23:43:96:d8:56:01:e9:41:4f:5e:c5:d4:
17:62:41:20:de:e4:a1:e3:ef:46:bb:9e:38:8b:1d:e3:c0:01:
70:0d:ac:21:7b:01:2c:d3:c0:bd:1a:39:fa:8e:2a:82:21:1b:
5d:b1:aa:a8:15:82:49:a5:3a:5e:1b:b5:1d:91:51:88:c7:fc:
ef:f8:32:2c:46:cf:6a:ff:7f:f3:65:a3:f8:ab:22:24:62:bf:
5c:bc:80:83:1c:94:77:8b:f1:9d:fe:d1:2c:33:ca:eb:11:61:
99:bc:76:37:90:58:66:90:78:62:ad:c6:6d:66:02:f3:2e:16:
7c:00:80:a0:44:73:22:60:e5:1b:61:5a:0c:f8:82:a7:fe:9c:
43:ed:98:aa:e1:6c:9b:c3:a4:c5:0f:53:e5:4f:40:17:0b:14:
03:3b:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:49:00 2024 by rpki-client on console-ams.rpki-client.org