Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: u3bxblQhNUDaPUPztqSVFVvCucbJZmuYzAKGUnm0wvA=
Subject key identifier: 24:9C:0E:3E:B4:3B:04:A7:99:C7:55:FD:E4:0F:F8:73:EC:6B:CA:20
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 01936B22B7A31D3F5A25D239093833334763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 10B5
Signing time: Wed 27 Nov 2024 01:00:57 +0000
Manifest this update: Wed 27 Nov 2024 01:00:57 +0000
Manifest next update: Thu 28 Nov 2024 01:00:57 +0000
Files and hashes: 1: YbJzPsGJ_O0XO9f0P0jX-j_hrdY.roa (hash: i+Lli+jDPl9LVWSHyuYZJJ8Iy6VthPkatd3+3TIBCNM=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: WdNpxhBCqRAu0Rlz6cGja2UdWDu2u5ZnFnon/q1rN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:b7:a3:1d:3f:5a:25:d2:39:09:38:33:33:47:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Nov 27 01:00:57 2024 GMT
Not After : Nov 28 01:00:57 2024 GMT
Subject: CN=249c0e3eb43b04a799c755fde40ff873ec6bca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:94:0f:39:39:02:83:e1:f9:18:83:d0:42:
90:61:da:42:69:43:4d:ce:ad:c9:0e:b0:7a:4a:05:
45:7f:af:f8:2c:45:cc:77:72:89:db:01:10:e3:05:
87:e0:0f:ad:9a:91:19:41:77:f6:9f:88:19:3f:98:
2f:5e:ea:0b:92:75:8d:fa:c4:d6:87:23:40:03:96:
ae:e9:2f:75:04:a1:0b:a7:c8:bf:57:0d:3b:57:79:
70:f7:a4:22:67:51:85:43:ce:a2:7b:b3:40:da:2b:
e2:a2:50:8e:20:71:a0:27:7b:6f:7e:24:35:58:c9:
75:a7:3f:71:b2:43:81:c7:c6:44:82:38:22:66:25:
ba:cd:b2:76:7c:af:63:36:a6:a2:cb:9a:3e:fb:8b:
b8:e5:88:66:8c:e4:e5:d9:e9:8e:1f:4f:84:8b:6b:
15:06:b1:9e:a2:93:e2:1d:ca:27:8b:94:04:a6:b8:
74:af:3a:e9:56:6d:0f:02:56:ce:ae:f2:0d:cb:d4:
db:cc:f5:3f:8f:06:73:9f:95:33:fe:bf:86:c4:d8:
9e:a3:d8:dc:d1:cc:7d:dd:9c:2c:de:3b:4e:d6:26:
a2:c3:f8:ed:ec:02:1e:65:fb:69:74:76:83:11:14:
06:6f:c4:2c:7e:5e:39:55:d5:11:67:51:09:9f:02:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:0E:3E:B4:3B:04:A7:99:C7:55:FD:E4:0F:F8:73:EC:6B:CA:20
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:a3:31:c2:1a:50:e8:1c:a0:1c:62:07:1c:4e:60:ef:69:
26:d2:c6:d3:97:c2:74:de:b4:18:1d:cc:88:d9:a2:6d:52:9c:
36:c4:4a:91:cb:c8:f8:cc:f0:09:91:5f:04:4b:36:fc:18:88:
3f:8c:b7:dc:75:21:ef:fa:d1:6c:4f:36:18:d6:9e:1a:70:72:
89:db:3c:2e:fe:98:a6:77:60:6d:95:a7:e0:c1:93:43:1a:1c:
5e:eb:42:c7:6f:1d:c2:dd:d8:8d:38:77:93:7a:74:8a:0a:c4:
22:75:4c:24:57:4b:33:dc:85:64:5a:08:82:f4:1b:c7:66:63:
03:e9:21:4a:34:3b:3f:0f:a9:b4:ef:9d:73:67:33:f0:f8:d4:
6a:12:d2:29:9f:9a:43:53:c7:85:09:9b:85:4e:9e:ab:f3:30:
b1:c9:3c:33:b5:76:fa:4c:6a:4d:7e:3f:6d:1a:f6:b6:e3:ef:
f1:d7:94:fb:f4:64:91:13:10:40:18:9d:b6:98:f1:a8:68:f9:
b9:1c:14:ea:78:fa:a0:2a:1b:e1:f2:18:e6:46:9a:38:70:32:
35:60:12:39:7d:a8:c5:25:48:30:ec:4e:1b:6d:bd:c2:5f:24:
0e:b0:40:53:a0:83:ff:07:01:bd:cb:3f:38:cf:ca:70:df:47:
7d:8c:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:36 2024 by rpki-client on console-ams.rpki-client.org