Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: s9aybVRi36pq29TxXfR2mObAQR9T4btJYe8jazOj/Sc=
Subject key identifier: 2F:D0:78:3F:5F:CC:74:6E:E8:1E:8D:AC:9C:2E:EF:E6:92:61:C6:01
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 018F874924E51CAF1EABF01976DE894ECCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:01:08 +0000
Manifest this update: Fri 17 May 2024 16:01:08 +0000
Manifest next update: Sat 18 May 2024 16:01:08 +0000
Files and hashes: 1: WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa (hash: jdOJ6baUPje4Gr5Tcn3mxxHfT0Etu5YoePfzEZD5IrE=)
2: _16KtKwHIyoglK1plBQNQQDTIb0.roa (hash: IR9OKL6T6WlGdXJRgy89hl04sfMNq0zvsnXCPtBDDtQ=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: unoZ/KfPtaFGgnensoXq1uxdIxtrSt2l4en5pELRqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:24:e5:1c:af:1e:ab:f0:19:76:de:89:4e:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: May 17 16:01:08 2024 GMT
Not After : May 18 16:01:08 2024 GMT
Subject: CN=2fd0783f5fcc746ee81e8dac9c2eefe69261c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:f5:a5:72:35:30:3f:63:58:4b:e5:a9:5d:
a9:e9:21:90:f7:7a:78:03:8e:e9:00:b3:ed:96:8f:
ba:07:00:5f:f1:8b:20:19:ec:43:7f:58:39:ac:4b:
1c:bc:3d:28:45:e5:3c:06:20:a4:20:e7:8e:0a:f5:
fd:7a:2a:3a:39:cb:b2:58:3e:eb:d1:14:8f:cd:d1:
d3:42:01:0b:4e:61:c1:93:8e:cd:9b:c9:2c:c0:24:
68:cd:1e:0c:d4:5e:bb:18:6a:4a:b7:94:c0:78:d2:
03:8f:11:ce:7a:e1:f5:51:03:68:89:9d:49:1b:32:
7e:ee:fb:2f:1f:19:2d:db:47:50:32:f9:5b:fb:3c:
ae:82:5a:46:90:bd:fc:fd:29:8f:65:f9:6d:44:29:
35:50:25:ce:d9:3a:0e:54:10:93:46:3f:28:cf:f3:
2e:67:ee:41:9a:f0:d4:51:34:97:68:a3:bb:92:3c:
96:06:1c:74:7f:7e:57:40:6a:4d:ad:08:4b:57:57:
42:d0:e8:10:07:11:18:b2:5f:29:ef:62:ac:68:02:
85:df:7b:8c:f7:2f:5d:34:62:35:e3:bb:08:0d:9e:
15:fb:45:9e:c4:11:82:28:1d:4a:74:f4:4b:35:f3:
0b:58:c5:ce:c9:a5:be:7b:dd:e0:0e:a0:e3:99:8c:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D0:78:3F:5F:CC:74:6E:E8:1E:8D:AC:9C:2E:EF:E6:92:61:C6:01
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6d:b8:96:c4:3e:e9:96:80:0f:4e:c3:39:27:ac:1b:0b:fe:
c5:b8:74:1f:7b:b1:79:70:5f:13:1d:92:33:09:ba:23:aa:3d:
2e:b4:20:55:c8:67:cf:cc:9e:38:f5:ab:ab:ee:42:db:2e:c3:
0f:45:13:fc:1d:05:40:16:1e:a5:fb:eb:51:8a:96:44:fc:c1:
73:51:ac:c6:5e:46:12:13:95:bf:5f:d3:f8:f9:e2:d2:1d:c4:
fa:82:67:92:7b:ab:ce:8d:4e:00:8d:3d:82:6d:f0:1b:e1:80:
d2:a1:2a:72:4d:8d:80:a3:36:be:1f:be:f6:4b:66:2d:4e:80:
9e:7c:38:52:ac:77:79:c5:7e:b6:88:2f:b9:fd:ee:1d:d7:fd:
35:cb:2f:a7:d8:75:82:9a:85:2e:31:00:74:18:e8:0a:80:3a:
fc:af:a5:0d:79:ea:7c:09:c6:8e:3d:48:22:fb:15:5a:55:26:
3b:ac:86:b5:6b:9f:cf:39:47:0b:f7:da:db:69:0c:36:ae:08:
22:5e:7f:b8:ab:da:96:23:90:72:74:ca:1e:64:25:c2:da:6a:
fc:b0:05:48:92:0d:a4:09:70:95:d7:ea:a0:91:cd:b2:64:ea:
7d:e1:bc:45:ef:87:0d:66:e6:0e:ef:84:f2:a9:10:49:34:ef:
b7:62:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:01 2024 by rpki-client on console-fra.rpki-client.org