Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: 5NWLuFu3k6wqRDnmV0TyqMc8HRi1n9YJVv+mcUzOIMM=
Subject key identifier: ED:4D:BD:EC:1C:00:C5:10:C0:99:F7:C7:DA:E6:05:BA:8F:6E:00:F5
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 01935840457042939175906CD2356ECDA441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: FA
Signing time: Sat 23 Nov 2024 09:00:27 +0000
Manifest this update: Sat 23 Nov 2024 09:00:27 +0000
Manifest next update: Sun 24 Nov 2024 09:00:27 +0000
Files and hashes: 1: 40x67T2_9t2QWcJ5twgWtjH_7NU.roa (hash: tujsQjZATAw5NEkcihJ7ihAQl3MDoY5UwDKI8A6A98k=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: 6Q3SZTH9XruLlqMr5bhb4QUyXtaoTEpBKRucJ3R9ea0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:45:70:42:93:91:75:90:6c:d2:35:6e:cd:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Nov 23 09:00:27 2024 GMT
Not After : Nov 24 09:00:27 2024 GMT
Subject: CN=ed4dbdec1c00c510c099f7c7dae605ba8f6e00f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:a3:42:71:b2:09:72:a7:5d:20:39:c8:27:
67:17:17:4a:2a:1f:df:6d:b3:13:8b:9f:7d:29:72:
b6:61:f8:c2:e4:46:5f:b3:1a:02:ec:9a:4e:cb:b2:
03:34:63:c2:34:96:f3:e7:11:d0:dd:57:c9:a8:49:
84:d4:fd:d4:2b:e0:0d:05:c3:d8:cc:2a:30:f2:6c:
e4:99:03:af:0d:a2:fc:75:a1:48:eb:4d:12:fc:46:
7f:66:8d:34:ca:51:ec:9f:8e:91:ef:36:ee:15:45:
2b:a8:5c:8c:d3:ad:02:8c:3e:54:a9:73:df:78:92:
26:75:9e:33:df:b7:15:4e:b4:d2:3f:09:a7:b7:7e:
3e:b2:92:4e:69:b2:62:a8:d8:e5:d0:9c:67:38:b3:
1e:81:5a:84:44:b1:85:06:1e:9c:06:ba:ad:19:1c:
ca:dd:50:4c:54:d0:f3:0d:4d:7f:e4:63:fb:7a:c8:
f6:12:1c:b2:a3:39:3d:00:ab:71:9c:c0:2c:0a:70:
2d:df:ab:09:10:d4:a1:4c:ea:97:d8:da:b0:36:a7:
3a:5d:63:3f:10:d8:79:a0:94:40:50:70:36:ad:d8:
d6:1b:dd:71:e2:20:4a:33:da:fb:cc:aa:f5:c0:93:
2d:d0:01:46:c3:e9:78:0d:b8:26:57:7a:a7:61:71:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:BD:EC:1C:00:C5:10:C0:99:F7:C7:DA:E6:05:BA:8F:6E:00:F5
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:09:64:52:c6:f7:e7:5a:53:00:84:76:60:a8:4f:2c:08:
eb:98:64:b5:87:e0:e0:f2:5a:f0:80:10:1f:04:64:bd:80:a0:
f8:5a:f3:04:31:80:a5:00:7b:fd:11:12:d4:59:f1:8f:6a:3a:
7f:c1:c7:33:87:80:0f:da:16:5f:e1:ee:f5:57:3a:ea:72:b4:
7f:65:e2:ba:63:2f:82:a3:0d:8b:1d:80:96:37:2b:11:93:51:
ad:ac:24:b7:c1:1b:a2:ab:82:b0:95:41:8d:7c:cf:f4:d1:9c:
f9:39:d8:00:fd:19:8d:08:2c:ef:7d:15:2e:71:c0:41:bd:d1:
d4:d9:5d:44:6b:f3:63:81:a8:f3:46:10:32:71:4a:c5:e0:e0:
ec:42:80:c9:6f:1e:87:2b:29:c0:26:84:20:de:dc:96:45:87:
21:e6:84:3d:60:77:66:96:ee:da:19:bd:9b:f2:b3:77:cc:12:
e9:82:f9:85:95:41:4f:36:ff:00:11:2b:cc:a6:e8:81:e0:bc:
91:3c:5a:84:28:b7:79:76:e0:62:40:5f:63:24:d3:01:40:4f:
db:d9:3a:34:62:25:ab:38:10:e9:c8:fb:d5:a2:61:88:82:ee:
00:c5:a5:74:d1:94:84:14:3a:e2:89:3d:e9:a8:e9:87:71:a3:
60:59:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:02 2024 by rpki-client on console-ams.rpki-client.org