Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: LfhQhtHjrrA6k//g00PXFWia3RYe9STqO7y259DmLfA=
Subject key identifier: D5:A7:68:A9:44:2D:2E:D9:B8:C2:12:71:6D:2E:E2:DB:40:3C:02:58
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 01901DEB6ADC34C4D4D816046EA36DCE4266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 10F0
Signing time: Sat 15 Jun 2024 22:01:25 +0000
Manifest this update: Sat 15 Jun 2024 22:01:25 +0000
Manifest next update: Sun 16 Jun 2024 22:01:25 +0000
Files and hashes: 1: gim_mdmyBuYFGa2DEFjKszMlGzk.roa (hash: zxWg3ymErGM/h2zUYhAmaiboSXQKnoIMbGVLkLvbFI4=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: Rb2g/FANx88KredEStUeu027MsQEg/aFEx7s5g3iKz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:6a:dc:34:c4:d4:d8:16:04:6e:a3:6d:ce:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jun 15 22:01:25 2024 GMT
Not After : Jun 16 22:01:25 2024 GMT
Subject: CN=d5a768a9442d2ed9b8c212716d2ee2db403c0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:0e:8b:ff:e5:dd:21:5d:ff:99:1c:ee:89:
d7:c3:f1:38:30:a9:dd:e1:5d:e4:f7:6e:b3:9d:3b:
e5:e0:28:39:ee:e8:e7:5a:dc:64:92:0e:cd:c2:da:
c0:4c:b8:d1:53:c9:25:8c:6d:c5:4d:2e:5d:5b:f4:
25:8b:af:0c:73:3e:19:2c:6e:cd:02:4e:43:bc:6e:
a3:b9:d6:26:2e:98:c5:59:39:3c:da:ed:d4:b9:6d:
ce:37:90:48:e1:42:94:39:aa:77:58:5b:89:d5:f2:
72:19:66:95:b6:1b:4d:21:2d:49:aa:23:d0:d8:db:
c0:65:e9:a7:95:1b:1d:8a:1c:ef:a8:90:7a:6c:03:
a4:8a:2d:08:d9:3a:47:64:48:f5:ab:c7:85:a7:8a:
25:77:f8:36:d5:44:9f:25:f3:d7:c8:42:d7:1f:ee:
eb:78:3a:2b:3c:ad:e7:66:e8:7d:49:03:09:31:4f:
5a:44:d9:0c:e9:cb:35:1f:35:e1:8d:b6:d1:6a:6e:
c6:01:03:77:d2:d5:f4:3d:2a:39:4c:96:02:77:71:
d5:75:cd:98:32:fc:53:fa:a9:5f:d2:f3:65:69:8f:
57:3d:da:9a:5d:4d:60:b8:ce:ef:a6:28:31:43:d2:
36:8a:ea:4e:6b:87:89:43:81:bc:c6:8b:c1:a2:48:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:68:A9:44:2D:2E:D9:B8:C2:12:71:6D:2E:E2:DB:40:3C:02:58
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:84:04:09:93:40:45:c1:5c:21:17:c9:51:e3:8f:02:d0:
77:f2:f4:6d:52:93:4b:9b:8f:aa:f9:4a:5b:4f:8b:dc:3e:49:
8f:54:7d:e8:8b:0b:89:45:39:44:7b:40:f3:ea:5b:04:12:4b:
0c:cd:e2:d3:87:44:df:a1:0d:4c:cd:dc:39:5b:8b:c5:24:ae:
05:ff:78:51:f6:e2:c0:cb:cd:6d:34:44:16:15:9a:2c:5b:83:
e0:0b:fb:e0:61:f8:10:a2:d6:f2:c1:95:20:42:e2:94:a1:d3:
a1:36:19:3f:81:e0:71:cd:8d:7e:7b:c1:a9:84:ef:04:70:ea:
bb:fc:1d:f3:b7:14:5f:cd:48:8c:3f:4a:f3:7c:0d:54:9a:6d:
7b:db:25:35:80:da:4d:f6:07:bc:7f:22:32:3a:04:56:e7:41:
e5:3e:3c:f6:7b:23:1a:2b:dc:9f:f5:cb:99:19:df:8a:72:57:
ea:e3:ed:a6:f6:d0:42:d6:42:b9:de:bd:b8:25:a4:99:ae:da:
af:cd:e5:f3:99:f6:2a:50:53:54:ec:6b:ff:c6:dc:9a:ca:e6:
de:46:29:23:e8:d1:2f:6d:0c:ba:ad:7e:c3:0c:6f:78:28:b6:
ee:41:ca:7f:07:1d:f7:fd:5e:4a:dc:da:27:27:10:c2:15:57:
60:15:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:54 2024 by rpki-client on console-fra.rpki-client.org