Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: ug1LCpTY/5nHlqjSVisQ991S/tSyneawyQHamz1ZRuE=
Subject key identifier: B4:5D:24:6D:15:45:1A:23:84:41:72:EC:DB:75:B6:5D:2C:A3:82:14
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 0190478B8BF2B845B4F48F7D5BEE3A69A927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 098F
Signing time: Mon 24 Jun 2024 00:00:45 +0000
Manifest this update: Mon 24 Jun 2024 00:00:45 +0000
Manifest next update: Tue 25 Jun 2024 00:00:45 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: KYev8Dv2JdPbD54I6RbHG5ydwf2Whz7tL80N3VRq9Xs=)
2: CF2zTsUFTkirniuPESCfIwVGX8A.roa (hash: lhsadmi0EMTClpSmcHocXNZXRWQzRbrqLYg+b14VL/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:47:8b:8b:f2:b8:45:b4:f4:8f:7d:5b:ee:3a:69:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jun 24 00:00:45 2024 GMT
Not After : Jun 25 00:00:45 2024 GMT
Subject: CN=b45d246d15451a23844172ecdb75b65d2ca38214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:f4:ce:c8:f2:6f:20:c8:98:83:0e:7e:e9:
d4:d7:ba:80:85:3d:37:af:44:55:63:00:b9:fc:25:
24:e4:c6:f1:e1:51:db:f7:79:b1:cf:2d:de:d1:51:
11:3e:16:a8:2b:bc:8f:f4:ec:bd:50:ab:a8:05:91:
b6:17:1f:66:b7:fa:3f:d4:95:c6:9f:b9:0a:b7:56:
34:53:51:3a:79:5f:b2:73:aa:7f:1b:6a:b0:fa:18:
83:b6:45:5a:f4:a3:62:2c:98:40:21:96:46:ad:eb:
1a:55:c6:26:61:1a:63:d3:e1:1c:a7:8d:bd:6e:7e:
29:22:0c:9d:de:b6:c8:1b:a3:76:7e:87:1c:45:84:
f4:8c:2d:14:1f:42:b0:86:87:fb:9f:ae:59:3d:bc:
73:91:34:7b:99:f4:22:26:b7:78:7f:2d:ae:84:f7:
75:2a:c4:c6:6b:ca:bc:c5:35:db:ee:50:74:a7:b1:
03:29:cc:ee:4b:94:6d:d0:6a:a6:d0:70:57:17:ae:
24:99:f2:76:85:38:22:4a:27:32:d1:41:b5:a7:d2:
22:45:53:c5:97:27:10:75:49:c6:a5:5a:0c:f0:aa:
87:98:16:82:1d:af:bf:86:4c:12:8d:69:9f:1e:f9:
80:b4:b0:ec:1a:a0:ca:6b:89:23:0a:32:37:23:51:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:24:6D:15:45:1A:23:84:41:72:EC:DB:75:B6:5D:2C:A3:82:14
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f7:6f:56:79:50:1d:ec:db:95:6e:16:23:2d:c7:e0:dd:bd:
0d:e7:dc:70:a7:a6:a9:a6:a9:4c:d6:5f:ef:60:2d:f7:ce:da:
55:0f:8d:d3:99:cc:54:4e:04:1b:8f:e2:97:91:a9:74:4f:ba:
77:4b:b8:53:fe:ce:02:46:2c:83:2c:df:d2:92:2e:02:c5:73:
82:b1:5d:d9:47:bb:2e:e2:d9:dd:3e:b9:78:5e:d3:c1:77:af:
44:a9:d7:59:80:f1:a4:13:17:17:f4:37:01:d5:c6:e1:39:18:
d4:34:f8:30:f6:fb:f4:3a:1d:28:1f:6e:97:b9:0b:8d:3c:37:
0e:3b:3b:60:cb:74:e2:cc:de:a0:72:ed:8d:1e:7e:d1:6b:48:
ae:36:2c:57:b0:47:d4:21:cd:9b:43:c6:9a:59:de:55:0f:c3:
48:e8:3f:4d:c0:ab:a2:ef:0d:5e:e1:07:48:ea:a7:5c:79:21:
86:89:ad:40:96:96:72:23:20:80:90:34:57:ab:d3:fc:3f:4e:
9b:86:25:7a:e8:c4:63:28:ca:ca:b1:c2:a6:d3:b2:e3:e3:5e:
95:4e:a4:cf:ea:75:a7:92:a8:b2:d4:ed:6d:89:b2:81:eb:7b:
68:e9:db:86:50:1d:93:82:d2:aa:f8:57:2b:e5:84:36:9c:9b:
7d:38:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:30:23 2024 by rpki-client on console-fra.rpki-client.org