Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: B32OK32IOzflhKkVik1M06+FHgJjHKdWQMpBUUatrAU=
Subject key identifier: 66:73:A4:6E:E0:CB:79:DB:8C:6C:62:25:5A:61:AE:6F:BF:34:3B:DD
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019041F77FBCC4B27103669147612184ADDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0815
Signing time: Sat 22 Jun 2024 22:00:57 +0000
Manifest this update: Sat 22 Jun 2024 22:00:57 +0000
Manifest next update: Sun 23 Jun 2024 22:00:57 +0000
Files and hashes: 1: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: im32kgoy5f8kwrnfJGItY5NMzeZ0UMDa//atapxAkTs=)
2: rpXzzQqo1NF3dX9pFS61JkDNiNY.roa (hash: pLgHmlwb9frHbbUK6rzU2+3pnLWqMCgVCa6x+QGE99Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:f7:7f:bc:c4:b2:71:03:66:91:47:61:21:84:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Jun 22 22:00:57 2024 GMT
Not After : Jun 23 22:00:57 2024 GMT
Subject: CN=6673a46ee0cb79db8c6c62255a61ae6fbf343bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:21:6f:ac:ae:76:4d:cf:24:09:f2:03:dd:
0b:a8:2d:59:08:15:98:be:a2:b4:45:1a:85:11:f2:
4b:b6:5b:fe:ed:fa:dd:b4:2d:d8:1f:4a:d0:c4:6f:
7c:21:05:a9:f0:5f:62:ba:8d:c4:b8:30:eb:73:42:
69:7e:a4:7b:6a:e4:99:9b:36:87:b4:1c:04:3e:a4:
67:ce:cd:71:ef:ff:18:fe:a8:08:bb:16:75:b4:b8:
23:96:80:63:64:c5:b0:f6:a0:3f:7f:4f:54:de:29:
6b:87:0f:00:e7:21:fd:0c:80:16:b4:e1:c4:3a:2e:
7b:a3:8a:6e:0f:73:a7:dd:2a:ae:31:2b:a2:4f:49:
65:43:a9:58:e6:14:b2:5c:6f:b4:55:c1:2e:b0:a3:
f9:3a:cc:4e:2f:fd:3e:79:19:2c:35:d9:8a:7d:90:
59:3d:e6:26:fc:ec:72:f6:8e:a0:49:ba:fe:48:fb:
30:14:8d:6d:ed:32:1f:fb:d6:bb:40:d7:6f:19:a0:
93:19:ae:e6:b8:f5:ad:09:c0:b8:b0:be:82:6d:e4:
96:6c:91:0e:5d:81:5e:2c:a0:99:e2:87:5e:9d:96:
26:c7:a0:fe:e2:a8:f1:2d:b0:33:1a:70:a8:d8:e0:
d1:65:91:e1:53:10:77:9e:ac:81:f7:0b:da:34:3b:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:A4:6E:E0:CB:79:DB:8C:6C:62:25:5A:61:AE:6F:BF:34:3B:DD
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:13:27:0b:41:2e:f4:00:67:36:53:79:e4:1e:40:cc:c8:
d1:35:d8:65:c2:f6:ea:a5:ba:fe:f5:a6:fa:9d:4c:02:70:91:
e7:d9:1d:98:04:ae:5f:22:1f:44:e7:90:96:29:c6:79:2b:09:
46:b7:fb:64:e8:76:93:7b:15:4e:cb:8d:e5:ba:08:ee:25:3d:
b6:18:60:4a:c3:53:fb:a4:70:04:80:bd:c4:e5:52:e5:b7:f6:
fc:5f:57:22:05:98:86:50:c9:f3:1d:de:29:6f:6d:48:db:40:
b2:d6:14:f6:62:35:9b:0d:af:52:a4:a6:0d:b8:a2:1d:9d:55:
2e:c7:cf:c7:b1:88:00:9d:f2:5a:47:e9:02:5a:d0:aa:d5:59:
13:29:80:a0:41:6e:bf:94:a1:bf:c5:a4:1f:8e:93:7b:6e:e4:
2b:18:84:fb:4c:70:41:06:2d:68:fd:91:56:6f:15:7c:b3:f0:
b4:ee:23:cd:ef:5a:4b:b5:49:c6:46:a2:e3:b6:1d:fa:e7:aa:
50:8b:cb:14:4c:e8:4f:22:26:45:70:f9:15:b8:c0:a4:39:1e:
4b:e1:55:93:2b:54:69:98:15:76:9c:bf:d2:e7:69:c4:79:c3:
5b:11:21:ec:54:7e:2a:01:9d:b9:b2:e1:56:57:7d:81:49:c1:
5c:0f:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:45 2024 by rpki-client on console-fra.rpki-client.org