Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: NhtA/fhHzU5xMih2QHbGa9yiSPP0KyM6isVgrPVoOiY=
Subject key identifier: 29:CF:E1:DB:FA:D4:11:36:8A:87:69:09:C3:79:54:3F:ED:A7:E8:4B
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0190448D559DC6B5AB82F1851B7DBD44F14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 11D9
Signing time: Sun 23 Jun 2024 10:03:51 +0000
Manifest this update: Sun 23 Jun 2024 10:03:51 +0000
Manifest next update: Mon 24 Jun 2024 10:03:51 +0000
Files and hashes: 1: W1PyWWcOfiA1DfJKUpq96o1H6yU.roa (hash: ldIyTzLSbHABe+MZKW3Z46fv1qjwmz8xIW/Ek2P7cl8=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: RLFQ0syQTeWGtl8+0O/IA4mdobN/lVqMTStY4LW/ZAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8d:55:9d:c6:b5:ab:82:f1:85:1b:7d:bd:44:f1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jun 23 10:03:51 2024 GMT
Not After : Jun 24 10:03:51 2024 GMT
Subject: CN=29cfe1dbfad411368a876909c379543feda7e84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:b2:0a:76:22:20:74:37:e0:18:c2:1d:c5:
49:21:c6:21:e3:a4:99:4c:77:9d:70:96:0b:8a:40:
e0:a8:00:58:24:4a:ce:0e:53:e4:6b:e7:15:3c:16:
05:4d:48:b0:bd:e5:7c:1e:68:e7:fb:5a:fa:50:58:
eb:71:87:c7:67:f5:7d:ec:82:58:e6:00:cd:81:79:
94:dd:d2:32:de:cb:1b:00:7d:9c:a5:e6:e4:39:7e:
62:8b:46:98:4f:5f:30:61:33:e7:fe:81:eb:b5:05:
cf:8b:ec:05:ab:a5:71:e0:ff:5a:b4:90:18:9d:22:
4b:32:c3:bc:79:fc:fd:30:21:c3:2a:08:7d:01:db:
40:9c:a7:84:74:44:9a:14:fd:81:52:8c:4c:15:5d:
31:3e:b0:2b:aa:64:8f:50:e8:00:cb:ab:bf:4e:c8:
e5:a8:44:09:c2:53:77:34:fe:ff:46:78:71:74:d3:
b8:bd:fb:39:69:64:1f:a2:fb:94:77:68:e5:e0:5d:
e3:e7:4c:18:5e:97:49:06:3a:47:0c:fa:e5:63:bd:
a1:c4:e5:0c:76:d2:4d:ae:fa:67:1a:fe:f1:31:fe:
f4:aa:d4:0f:b6:e0:b5:74:43:88:45:7d:b2:12:4d:
4c:4e:e4:e3:be:25:fe:86:23:b3:11:df:e1:80:6b:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:E1:DB:FA:D4:11:36:8A:87:69:09:C3:79:54:3F:ED:A7:E8:4B
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:cd:ed:3b:00:c3:44:18:ce:e8:fb:1b:35:7a:47:39:1f:
68:ae:c9:98:dc:ad:c0:9b:0c:ad:38:38:e4:77:0a:1d:48:82:
b9:a1:d0:85:b3:49:41:14:3e:49:22:80:1d:0c:04:cc:ae:06:
73:eb:5e:a9:69:72:c4:cd:03:e7:cb:98:74:ac:72:68:5e:75:
b3:3c:aa:e7:01:4f:8a:f1:34:a8:b2:77:50:25:9f:42:aa:4c:
97:a4:67:00:91:8c:1c:51:e6:17:b4:11:64:0a:83:49:96:1a:
85:ac:5b:76:50:1c:ce:c3:92:bf:30:78:5f:a8:46:d5:f8:31:
99:7d:dd:ee:8d:d7:ea:cd:ed:75:7e:04:72:f5:97:a6:d0:23:
c2:a3:15:0d:1b:4b:fd:2f:a9:72:9c:ad:0a:e4:ae:03:fe:fe:
3b:04:4d:a2:91:dd:f4:df:02:e2:80:1a:3c:40:75:72:49:b1:
63:77:7c:13:9d:89:eb:7e:98:53:5e:35:e3:7e:56:99:8a:66:
1e:d7:9b:d9:6b:da:a5:73:82:6f:f6:d4:71:33:d6:fe:08:2a:
9f:d8:3f:87:19:8d:00:18:91:b2:e5:d1:fb:fc:77:de:33:1c:
62:1f:51:f7:7f:8f:41:65:d6:6b:f7:27:9a:c6:51:ba:cc:71:
7d:06:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:56:14 2024 by rpki-client on console-ams.rpki-client.org