Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: 4o/eA8uPbV3zNwioIcB++u4MJLMGKmxN37UX2ryKolI=
Subject key identifier: 70:A1:9D:C0:CE:DD:2C:7A:74:56:73:E2:27:FA:F7:50:6A:BD:4D:77
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019075AD97BAD0CEE7F48B6C32C5BCE3CD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 11F3
Signing time: Tue 02 Jul 2024 23:00:29 +0000
Manifest this update: Tue 02 Jul 2024 23:00:29 +0000
Manifest next update: Wed 03 Jul 2024 23:00:29 +0000
Files and hashes: 1: DRAK1-lV17rDe2NYPueaLcl0D0E.roa (hash: 3DQMh3RYptf9vWQsVng5lbTXPzn5OjRacAcprcuco2g=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: GPNtMJcjCE3JBKdP2lmOdcN2c/dxlSWC6l6C1iIPa4A=)
3: wsyGDNri_u8T5Df_Q849pyoqk6g.roa (hash: b7KRy5fhKH5ka1/6Fggxx8Hu7ZPGDVsXDyxceWQ2flU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 20:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:75:ad:97:ba:d0:ce:e7:f4:8b:6c:32:c5:bc:e3:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jul 2 23:00:29 2024 GMT
Not After : Jul 3 23:00:29 2024 GMT
Subject: CN=70a19dc0cedd2c7a745673e227faf7506abd4d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:5e:51:24:89:42:39:69:69:45:a5:91:65:
44:91:aa:90:44:88:dd:a6:a2:f9:d8:ed:af:2e:ba:
25:25:22:b8:22:8a:3e:de:c0:d1:ea:db:34:11:b6:
f7:cc:5c:5a:e1:52:e0:0b:72:4a:9a:2b:95:7e:04:
da:f1:26:43:15:d9:99:08:8d:2f:cf:a1:d7:97:00:
62:ac:7d:56:7b:d5:28:53:1f:28:32:65:22:33:cd:
86:79:e8:89:7b:40:a6:bf:30:f4:8d:55:1f:fc:3c:
14:18:a3:de:5b:b9:b0:e0:47:66:bc:d2:20:79:9a:
63:db:7f:d6:87:56:d7:12:86:bf:df:a3:98:d7:45:
86:26:09:84:df:52:8a:71:21:1c:f8:f7:45:41:10:
71:9a:93:08:26:28:d3:0c:4b:d4:c4:59:40:94:63:
37:2a:5d:d5:2c:be:29:08:93:8c:57:32:61:0c:da:
5a:a0:39:03:1f:3c:1b:a1:74:9b:80:76:d6:f8:26:
d1:d6:eb:2f:d0:4e:c1:f5:7d:40:86:1b:a9:89:a7:
47:f0:8c:56:a8:61:9f:db:68:61:dc:a9:9b:0d:1a:
79:44:36:50:94:06:8a:2d:d9:fa:83:03:30:d7:78:
dd:b1:8a:fa:1f:14:a6:1f:8c:49:03:dc:ef:77:59:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A1:9D:C0:CE:DD:2C:7A:74:56:73:E2:27:FA:F7:50:6A:BD:4D:77
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:68:de:ea:ed:4e:d8:3a:83:94:8b:ad:2f:b5:78:ff:8b:46:
9b:7b:68:62:5a:a7:29:fc:46:94:10:27:78:0b:e2:73:5b:f6:
6a:d0:05:af:66:ac:a6:56:2d:37:98:d9:0d:88:12:1f:aa:af:
29:26:60:21:e5:79:9a:f9:42:e9:cd:5b:c4:d3:82:a1:7d:13:
6a:aa:1f:50:ea:60:2b:3d:3f:aa:ff:d7:b5:bc:28:91:9f:4b:
20:49:b6:c2:e2:d3:35:d5:d9:f7:d6:63:8c:42:3e:cd:5b:ab:
96:1d:32:5b:3a:f7:6e:1d:7e:3a:0e:63:2b:6c:5f:34:e8:92:
cd:8d:5e:69:06:37:74:f6:d6:c3:34:fe:d5:af:ca:86:c1:31:
5a:f4:7c:90:0b:b9:b7:86:71:19:5a:1c:3f:98:95:4e:d7:d7:
7d:f3:b8:a2:82:dd:43:e1:2f:35:81:26:13:ca:b5:bf:2a:cd:
39:bc:82:6c:27:e1:f7:33:90:83:35:d9:7a:92:db:5d:75:54:
51:a5:8b:48:c5:12:06:72:90:e7:2d:10:42:e5:fc:a3:bd:6d:
f2:83:ff:37:7b:d5:7e:f4:13:83:57:da:b4:15:2a:34:1f:1c:
1a:f2:1f:81:f6:e5:83:4a:90:74:86:40:27:8a:3b:4b:6b:5a:
ec:b3:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:53:47 2024 by rpki-client on console-ams.rpki-client.org