Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: PA/PvF0jLGYv2wf5UFSzyEVObVEZ/PrunKFkGI0AAUs=
Subject key identifier: B4:B4:6D:20:57:DB:79:97:CA:B5:A5:4F:70:13:39:E8:91:9F:A9:85
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019356896F6C912464FA0CDDE31DB84AF441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:01:07 +0000
Manifest this update: Sat 23 Nov 2024 01:01:07 +0000
Manifest next update: Sun 24 Nov 2024 01:01:07 +0000
Files and hashes: 1: L-IgO97tvYvE3c4q3VeG1tWDinY.roa (hash: 9R+51sGm98JEPtR3FnReXmdDmvJTP4KhW9acEf+MH5s=)
2: TcxSRGXWMKMzQoQPacE2Vfjsr90.roa (hash: p9jam/5lKozVPpdV5K2BhVx1OU5ZxEwJ9sXfgxDJF10=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: QdgkQGitOSGUO5GkvV7lQFNuFzR/mYVd1IfuSt3ra1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:6f:6c:91:24:64:fa:0c:dd:e3:1d:b8:4a:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Nov 23 01:01:07 2024 GMT
Not After : Nov 24 01:01:07 2024 GMT
Subject: CN=b4b46d2057db7997cab5a54f701339e8919fa985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bd:30:ee:a7:69:8c:52:99:f7:fe:a9:cf:b6:
c3:85:96:10:df:5f:e2:78:c7:d8:81:a8:9f:ec:53:
4f:a4:fd:2b:22:07:53:7e:97:9f:ed:a9:81:df:36:
96:6a:67:6f:b9:08:d8:c8:b8:cb:09:56:fd:72:fe:
ee:30:40:a9:4f:f8:aa:61:cd:bb:80:9b:00:5e:15:
63:0a:6d:35:32:06:9f:30:da:8b:bf:cc:e4:ab:e1:
32:c2:ae:e8:1e:bd:6c:38:b8:53:eb:6b:2a:1c:30:
b5:0a:a8:7e:f2:e9:60:a7:7d:2e:3b:31:01:54:83:
13:b2:ec:af:43:48:82:93:87:88:67:ca:8e:01:b0:
93:93:df:20:83:d4:b6:2b:28:4d:9b:1e:bf:db:35:
32:7b:af:2d:02:0d:d4:6a:7a:3e:15:89:77:78:0e:
e8:4b:2b:a7:29:a4:0d:fb:99:8f:bc:36:03:31:09:
c7:d1:e1:3b:7a:6b:7e:71:e2:bb:cd:f3:51:7a:25:
c0:78:38:dc:41:d4:77:08:18:bc:f4:ac:f0:85:98:
21:3e:bb:79:04:8e:e8:4f:e9:9b:fc:cc:bf:b2:e0:
20:84:2d:e0:53:f7:e9:cc:bb:b2:7c:07:af:13:60:
e7:d4:cd:b6:04:a2:4c:48:36:47:4b:91:03:fb:43:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:6D:20:57:DB:79:97:CA:B5:A5:4F:70:13:39:E8:91:9F:A9:85
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:2c:56:3e:b3:1e:9a:fb:f4:65:b5:af:14:b4:16:c5:94:
20:ee:18:1f:a3:59:c5:db:a2:8c:04:c7:7c:af:fd:97:0e:a1:
c9:95:68:a6:21:d8:f7:4a:03:8d:1b:7d:a7:2d:c8:01:65:a3:
4f:6c:a6:ae:ca:6e:06:02:a4:ce:98:b2:b5:3c:64:c1:35:04:
ce:10:6e:c7:5f:bd:6c:4b:2c:bd:ce:00:a0:40:a6:a0:9a:f5:
8f:09:9d:96:68:b5:8e:9a:d1:d8:f0:e8:d3:1e:c0:ca:4e:c5:
99:72:c0:bb:64:09:d7:1b:c1:d4:ec:16:e4:2a:d0:ec:cd:ae:
e3:24:0f:c7:ab:7f:5c:6b:48:bf:c5:ba:ea:f7:b7:c5:73:9f:
a8:7e:fa:02:96:e6:91:e7:c5:9d:99:50:51:4f:7d:55:f5:0c:
98:71:d1:a2:07:65:e5:9a:04:f9:61:5c:77:d8:80:ba:d0:05:
a6:b4:7f:94:c8:9e:e2:2d:54:06:14:1b:76:72:db:63:44:9e:
6d:8c:6f:eb:78:21:e7:bb:43:45:68:63:97:74:2a:31:4e:95:
ed:1f:16:c8:29:39:14:35:d3:0b:ed:36:13:40:4f:01:08:24:
8a:b9:5c:32:1b:30:21:41:8a:44:14:ef:ca:5c:67:e1:5d:a1:
4c:98:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:14 2024 by rpki-client on console-ams.rpki-client.org