Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: juuKkJ9++L0fybLu2IPEuiUU2Fzcw9NR4iAapWRAPno=
Subject key identifier: D3:DB:6B:33:D7:06:BF:80:5C:FD:D4:24:72:C4:8F:37:EE:68:AE:11
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018F934CB39FCFC0C7BA60A9D9417833B92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 11A7
Signing time: Mon 20 May 2024 00:00:28 +0000
Manifest this update: Mon 20 May 2024 00:00:28 +0000
Manifest next update: Tue 21 May 2024 00:00:28 +0000
Files and hashes: 1: DdSuzVrnQuEz_GME-nJwDwNPNhs.roa (hash: 89I5SCNHp+5BqwMRXk62zbJcFzfKtfXp5TpByYKv6mI=)
2: HFgx3Od64Q3tjLHQ_xEFGphlFFQ.roa (hash: 9MlA1vRyYeBqIFb2xdG5n9AqmEq6CXjjOLR0lETupaY=)
3: Jz4_3LJfhjGJ8A28OdtsyTTqAI4.roa (hash: sNE6CLALbMwmz56DpzavC9QThbouUFpmKO/uM07gX90=)
4: Po69f-KQr3bInlHXMKKO1uJ0zFs.roa (hash: N7PEEx2FQ4eDG6ZDMvAqMbxJr23ZsKb4tEvV0JwnszI=)
5: RDbvzDX5JYdPDwPeV6ioG6xLZuM.roa (hash: oTaJ6927xUsd2AJELjVpRo4BsBoo0+xMH8AFX4Ssz8o=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: ysOKb64HIAC0RrCLPo+t4rpT1cSqPAGTSEXSWwlWRxE=)
7: qSGma9mRcaAnlqhpG_Wu9n6s9Cc.roa (hash: J25rBIkF5/dJA+rYoGVRJ8hW04kT0p4HDWTHMpTKXRg=)
8: zMQrfXsMQO3Wag983QgrwS6mZBM.roa (hash: aXSp/CGhOyC8unYcXBbTnxMIVitcuMaY7BDnicLTJAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:4c:b3:9f:cf:c0:c7:ba:60:a9:d9:41:78:33:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: May 20 00:00:28 2024 GMT
Not After : May 21 00:00:28 2024 GMT
Subject: CN=d3db6b33d706bf805cfdd42472c48f37ee68ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:25:48:f8:8b:58:15:bc:88:8d:2b:3a:37:
cf:da:ae:e5:e1:67:42:79:28:05:1f:c6:4e:1e:24:
0b:14:7e:e4:2d:e0:44:59:35:60:0d:f5:12:d1:d0:
45:6d:cf:44:0b:c1:ba:2c:27:ef:3c:c3:c4:61:5a:
31:55:cf:a0:d8:77:91:10:83:90:c0:f7:c4:3c:b3:
cb:ad:0b:27:ad:02:7a:a4:c9:80:88:be:f9:e2:7b:
7e:3c:1e:d8:8a:b4:7d:c7:3e:d0:76:9f:60:71:7b:
18:2f:bf:1d:b5:e5:d4:31:f9:2b:be:d9:24:f0:a6:
ea:15:0a:24:f3:f4:e6:ae:b0:07:b7:eb:94:03:d2:
e0:43:4c:a6:0e:0f:4b:8a:80:3f:20:e8:65:22:db:
e5:ab:3f:16:47:3c:43:44:99:ac:84:68:54:49:2f:
d1:04:4b:bd:c2:8d:a5:99:4b:23:c6:f0:16:64:ea:
12:83:6b:12:52:86:44:bb:02:6e:ff:0e:c4:92:d9:
bc:1b:eb:34:52:32:3a:95:c3:17:09:b8:7f:d9:f0:
38:33:c5:bc:59:a3:34:08:d9:a2:0a:9b:93:f3:c2:
a3:e5:61:87:d3:c5:5c:62:08:20:76:38:20:23:8c:
df:40:df:72:91:7f:c9:f1:55:d7:39:df:76:a6:41:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:6B:33:D7:06:BF:80:5C:FD:D4:24:72:C4:8F:37:EE:68:AE:11
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2b:ba:70:4a:5f:c7:44:d2:be:b1:70:86:54:00:1f:89:3d:
8b:51:d7:ec:25:17:11:62:dd:40:30:08:02:c6:79:5a:fe:67:
d3:8d:1d:53:ac:b1:82:3d:4f:c3:66:4a:1f:74:06:a6:67:a6:
9f:1a:30:ff:5f:70:10:bc:18:db:e2:ae:f6:af:a3:06:06:fd:
19:0f:76:f4:d3:0e:54:cb:fc:68:08:29:a2:af:ab:e6:5b:63:
cc:c3:3c:55:21:f1:55:97:88:eb:e5:5a:8b:7a:c5:8f:59:db:
f3:4e:7b:5b:e4:22:68:5b:eb:04:b3:51:6e:ef:e8:a2:d3:e0:
92:1a:27:26:37:be:26:ff:8b:36:6f:81:59:6d:41:b0:a0:7c:
30:99:d4:92:68:4f:97:87:a2:b5:2c:79:00:54:54:f2:24:46:
04:c8:f2:b4:d8:fe:2a:e3:af:f8:90:9b:b1:ac:48:46:cb:61:
e6:8e:0e:70:5c:f3:12:89:58:6b:4a:76:15:99:77:ff:ad:bb:
e6:ef:50:f2:14:1e:c4:41:78:92:52:c6:18:75:2c:19:a6:69:
f9:21:80:a9:a0:26:af:8f:44:00:1b:d0:ca:a0:61:77:12:c2:
ca:d9:ab:71:35:23:b8:2f:18:aa:24:5a:8e:cf:e0:d5:31:3f:
4e:30:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:01:18 2024 by rpki-client on console-ams.rpki-client.org