Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: erYt9ABgh2tmweckR2TnvPPeZ/xgn2Jda4KevXdWgI8=
Subject key identifier: 22:7E:3F:EB:73:59:5B:E9:FC:EA:04:8B:12:5B:59:A5:A3:06:EF:41
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0190486782B6B35866DBBDCC1881D2AAE9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 10B1
Signing time: Mon 24 Jun 2024 04:01:01 +0000
Manifest this update: Mon 24 Jun 2024 04:01:01 +0000
Manifest next update: Tue 25 Jun 2024 04:01:01 +0000
Files and hashes: 1: DGmqsOX1Nv5GoaEbq4HkpmK3eFk.roa (hash: Ou4i32BACHOGHN9CZeTUzBt3SSsk+Cvub6zwEIVCMpc=)
2: G6csjGOfpVSRz30i4mPQBgiOPJE.roa (hash: 4IZseF59buYu6hJrGWNEl4wk9Dn2hatCkBK+DRJcTgY=)
3: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: +pqp/UGt/ASqKD3IzhwRQqfWh4HbDeMneO0QfbXTKsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:67:82:b6:b3:58:66:db:bd:cc:18:81:d2:aa:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jun 24 04:01:01 2024 GMT
Not After : Jun 25 04:01:01 2024 GMT
Subject: CN=227e3feb73595be9fcea048b125b59a5a306ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:b5:46:65:c6:8b:74:41:91:0e:1a:08:71:
95:73:ec:11:40:e3:3a:66:8e:cc:14:3e:3a:96:df:
a9:8c:e2:6a:ae:55:3c:a6:ba:ce:a2:83:46:71:9e:
6f:ce:da:c5:f5:57:26:da:09:c0:6f:19:a1:ac:67:
ff:21:63:9c:e1:94:8e:68:66:47:27:41:fe:a0:53:
98:eb:65:78:9f:04:75:bc:92:ca:25:6e:14:e8:ea:
69:f0:f5:08:2a:f9:09:20:2c:c2:3c:4c:3f:9f:86:
e7:7e:57:a3:02:3a:28:4c:9d:85:2c:b8:1a:fa:bf:
d8:96:8c:c3:45:4c:42:c4:be:91:3d:1c:49:4c:63:
8e:62:ff:30:cd:dd:8a:54:56:22:51:14:f9:2d:2e:
ea:e2:f0:2f:a7:bc:4a:db:df:1c:1b:23:9d:a0:d2:
60:5c:d0:11:6e:a2:10:52:44:1b:a7:c3:1d:21:c1:
97:54:68:14:67:26:9e:e5:83:71:66:49:09:96:26:
d7:2b:ac:6f:66:7f:2b:20:d3:d8:d6:43:5e:17:d2:
ee:28:95:8c:3e:7b:c3:4f:17:29:e9:4b:f8:4e:33:
3e:4d:25:db:18:cc:08:87:f7:40:37:95:6b:ca:a6:
b8:ca:ad:bf:1f:86:0f:74:e0:4a:f1:5b:7d:41:8b:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:3F:EB:73:59:5B:E9:FC:EA:04:8B:12:5B:59:A5:A3:06:EF:41
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:b5:3d:ef:ed:8a:92:a5:e0:c6:9c:15:3f:bc:25:bf:b2:
44:4e:47:36:23:0b:23:70:95:89:83:21:25:b5:1d:4b:76:c3:
7f:c9:c6:6a:bb:f2:67:5e:a0:6d:9a:c0:89:57:31:81:d1:c5:
73:db:b2:0f:dc:eb:49:9f:46:3e:83:1f:e7:85:a3:40:af:f1:
37:49:24:5a:b7:90:80:ec:b6:38:08:69:a2:7e:a9:0c:74:42:
f7:8c:49:09:d7:19:9c:b7:ba:6b:40:68:4b:41:48:b1:ec:86:
6b:81:c9:76:d0:49:36:58:fe:08:57:62:50:44:10:fc:5e:fe:
f8:2f:a5:f4:bb:cc:b0:ee:e7:ba:9e:8e:af:9c:36:63:83:83:
e3:84:ad:a2:ff:16:e7:ba:24:e3:ab:b9:90:c8:c7:5f:11:b4:
aa:f4:1d:36:f8:8c:71:ba:c4:0d:67:0d:ca:a3:cc:bd:94:1c:
b3:48:c2:dd:3e:41:39:fa:87:f1:f0:21:eb:29:95:90:a9:30:
22:3b:18:ae:5a:75:0b:08:04:dc:8f:cc:c8:ad:f1:93:24:87:
bb:14:fa:29:f9:c4:23:e6:63:5d:f0:fa:c3:75:6f:b4:d5:e5:
85:47:b4:6c:0f:35:47:e7:3c:0f:28:5d:8b:20:e6:25:08:7a:
33:e0:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:04:05 2024 by rpki-client on console-fra.rpki-client.org