Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: +JPEv961CGiwNGCbrIe7dV1DzNDvdBORJMxRKYqlNuc=
Subject key identifier: 52:CD:E8:50:F2:D0:37:BF:FF:78:B8:F1:D7:A0:58:74:E0:A6:01:AD
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019364B2C6516A435C4992ADBAB6EC97C3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 1288
Signing time: Mon 25 Nov 2024 19:00:57 +0000
Manifest this update: Mon 25 Nov 2024 19:00:57 +0000
Manifest next update: Tue 26 Nov 2024 19:00:57 +0000
Files and hashes: 1: FpRGKRR2p-fa90OrKJFuHY5unhI.roa (hash: Qbnr2/e2vYQeQVMFrITbHj+s662018RGd3dbKFl3uFk=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: 9oG5iIibHUW3syOgAFQ9SCUq4U2Q0nwsyQzZMK/a8AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:c6:51:6a:43:5c:49:92:ad:ba:b6:ec:97:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Nov 25 19:00:57 2024 GMT
Not After : Nov 26 19:00:57 2024 GMT
Subject: CN=52cde850f2d037bfff78b8f1d7a05874e0a601ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:dc:79:9f:1e:1f:e8:3d:d3:0c:f6:e5:c9:
9f:08:12:c1:32:bb:c1:f1:f4:e4:5a:08:02:78:7e:
20:06:0b:74:b8:3f:b2:9e:66:29:5f:0a:4f:95:0a:
9b:ca:f2:c6:3c:47:b5:bf:34:73:84:b0:2e:70:80:
f4:a5:62:24:54:62:19:e2:23:6b:51:8a:e4:f5:f2:
9f:7d:54:51:4e:13:d8:2c:a7:fb:ac:68:4a:39:ee:
aa:34:a7:39:1e:81:42:44:58:30:58:a6:cd:1d:21:
54:b6:5d:06:32:36:0d:86:bf:24:61:05:44:8e:d9:
37:08:ae:dd:e5:57:de:03:10:7e:c0:0a:94:cc:39:
33:15:c7:87:b7:2a:69:db:f5:29:28:b2:6f:9e:ec:
29:80:8f:df:86:f9:02:86:aa:72:6f:ad:de:c2:c8:
b6:f0:91:28:a5:c8:c0:6f:26:30:6c:c3:5c:3e:25:
cd:1d:da:9c:7f:b4:d8:59:69:1d:47:67:47:55:4b:
bc:2b:dd:af:89:1c:19:5b:5b:73:70:3e:99:a3:5c:
f9:e6:fe:30:96:85:1b:ae:06:fa:b0:34:3b:ed:06:
a7:ab:77:77:eb:75:e8:f2:74:00:cb:94:c5:f6:83:
b3:7f:bc:e4:e8:8d:60:bc:2f:88:c0:a0:d6:23:b8:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CD:E8:50:F2:D0:37:BF:FF:78:B8:F1:D7:A0:58:74:E0:A6:01:AD
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:08:99:5c:fe:5b:51:16:c7:43:58:14:d5:c2:61:0d:c3:e8:
14:b0:a3:de:fb:8d:11:bd:b9:05:18:f7:dc:c3:f7:6d:3e:50:
5e:f0:09:35:35:5d:20:10:a7:e9:9e:ec:cc:44:5a:08:87:70:
bf:08:e2:ca:09:28:9c:b0:07:0e:33:b8:ef:3a:f6:17:47:ee:
cd:29:7b:94:69:54:61:28:91:69:31:96:64:a8:74:f6:5c:40:
18:3b:fb:65:b9:69:fa:6c:cc:e3:f1:1c:e4:34:48:32:46:3f:
31:98:e6:74:80:d6:df:e7:f6:61:b3:d1:b6:e2:fc:d7:00:f4:
e1:0d:64:2e:a9:85:64:09:87:32:c9:0f:02:97:ed:44:03:fe:
dc:c3:8a:1b:3d:52:3b:0e:c8:ac:ed:4d:db:bd:50:4b:9d:9e:
b8:77:bc:51:af:02:79:ef:4e:8e:f4:ba:4c:8a:d3:0f:0f:86:
49:d4:08:27:1b:80:f8:2b:c0:6e:87:27:b8:3a:f3:b2:6f:d4:
22:39:dd:f3:93:8e:18:65:ff:10:86:b3:e0:90:15:1a:39:57:
61:60:92:ec:19:09:9c:83:24:d2:66:7f:46:dd:8a:40:b1:04:
96:d0:27:96:64:a0:1f:25:92:3a:76:e2:f0:dd:ae:35:7a:78:
a3:16:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:43 2024 by rpki-client on console-ams.rpki-client.org