Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: b0jutqE92vD7t/s+o6QFnkOaWgdzwNO6GdclJCjxWi4=
Subject key identifier: 01:61:9B:5E:77:47:4F:CA:E8:36:BD:00:85:3B:00:FF:DD:68:BB:97
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 01904868A4BB5341D21E3A86EBA58D255A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 049D
Signing time: Mon 24 Jun 2024 04:02:15 +0000
Manifest this update: Mon 24 Jun 2024 04:02:15 +0000
Manifest next update: Tue 25 Jun 2024 04:02:15 +0000
Files and hashes: 1: KAy7laKpLCI-nydxNT1tGu4a8t4.roa (hash: Op4fshISqulTDBTseXOsf1kksM/VoCgH71zs9tvGPcs=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: NkzPb5fpfOhu9tYDMMgoRQdkHOaheLQdV0Vs2O2AU5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:68:a4:bb:53:41:d2:1e:3a:86:eb:a5:8d:25:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jun 24 04:02:15 2024 GMT
Not After : Jun 25 04:02:15 2024 GMT
Subject: CN=01619b5e77474fcae836bd00853b00ffdd68bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:16:a5:3e:34:f1:e2:b9:4a:12:81:94:b1:
34:80:13:d3:6a:d3:94:8c:7c:68:61:58:82:58:e5:
91:c6:55:f2:d9:c1:36:3b:1e:1b:71:71:3f:bc:12:
41:d3:ac:a1:bf:c4:f9:14:e6:bb:27:f8:e0:75:80:
db:7a:e8:01:9b:0a:e4:97:a8:05:a3:f4:b4:73:7b:
1f:5f:92:4b:d1:ce:ca:37:d3:16:bb:b4:42:2d:34:
7d:23:20:d4:95:5c:6a:8d:6c:54:de:f7:b3:d2:b8:
c2:fa:a7:e5:d0:87:5b:7b:e1:d0:61:b2:33:34:82:
7f:be:dd:44:81:27:e3:1f:78:da:97:ae:4f:a7:97:
48:74:b4:53:3b:dd:30:e1:3a:fb:3a:df:fd:29:38:
6a:d0:c5:b2:b7:62:65:d5:30:93:e3:95:35:e2:f0:
24:51:d6:45:b2:05:6a:93:12:62:32:c2:8c:81:79:
7e:45:44:16:f7:e6:38:37:55:d5:70:31:df:18:a0:
b8:0e:89:ae:f8:14:cc:75:44:75:89:f7:79:d1:36:
fe:57:d2:8a:d5:2e:d3:a1:cb:44:7a:19:7a:b7:ce:
21:66:92:a8:f9:2a:85:32:fb:b1:40:5c:30:74:7f:
5c:e6:23:20:e2:04:94:26:fa:3e:63:51:d1:c2:12:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:9B:5E:77:47:4F:CA:E8:36:BD:00:85:3B:00:FF:DD:68:BB:97
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:4f:24:fc:e6:85:42:74:70:e3:08:c6:66:69:a1:dc:42:
92:81:2d:01:be:05:c4:99:f8:0d:2a:54:80:c8:27:79:cb:a5:
f8:8f:38:40:3b:62:19:82:b4:09:cd:46:ab:af:35:4a:30:a6:
d3:df:37:09:3f:22:39:23:88:59:64:fb:99:8b:c5:3e:ef:21:
20:43:49:2e:32:9d:c5:f9:85:d3:ff:05:a6:8f:c1:60:07:b6:
19:d5:2b:e4:e9:c4:33:a1:9f:10:ad:a9:17:76:2f:67:e8:37:
3b:05:89:2a:81:a9:b4:9e:fc:27:5c:1a:b9:e0:32:0f:c9:db:
e3:24:c5:94:64:01:cb:94:0d:cb:44:1b:a5:e3:e0:8d:e7:7c:
77:f9:eb:c7:20:05:6f:56:8b:d1:d1:85:91:7f:ad:3b:6a:5d:
c4:9e:72:1f:b4:cb:25:67:08:33:53:51:6d:73:46:89:1b:bc:
27:9c:2f:fc:a5:65:4c:76:79:f6:53:65:e7:f1:94:c7:0b:d9:
37:18:cb:ec:08:f4:f5:aa:fb:7d:d1:7b:cc:47:de:a2:9e:61:
0e:36:c4:6e:3b:c6:7f:22:a4:82:21:b2:6c:de:56:63:33:02:
65:01:8a:c9:f1:b2:b5:c6:04:67:ee:84:f2:8f:f9:12:8e:96:
93:9d:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:24:36 2024 by rpki-client on console-ams.rpki-client.org