Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: l5kVMbxiy6sF7zqaSg9YGaYYBkoZMQD4NcnNvNj6O18=
Subject key identifier: EA:99:00:5D:26:3B:8A:BD:72:10:BA:B1:30:CF:26:C5:8C:22:0F:55
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 018F6F77E0825F3659212B60244E03A132A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 116E
Signing time: Mon 13 May 2024 01:01:18 +0000
Manifest this update: Mon 13 May 2024 01:01:18 +0000
Manifest next update: Tue 14 May 2024 01:01:18 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: GFr49WNKJ3ngobgGH66eby/9VuTQJ7iKMh4I0YrcBDY=)
2: UWvkX5bcvTbnLCMaPd17WKECPzk.roa (hash: yQUEq3i9d0XIP6QRsNnRoG6OqENQWGvOOS7clhit4dk=)
3: lxy1nMDqeZzPbZj97iXXujAI0cQ.roa (hash: lI/sI8wwjyLPElcZNtOB27hMw9sYes8FuQBJ8flHlrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6f:77:e0:82:5f:36:59:21:2b:60:24:4e:03:a1:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: May 13 01:01:18 2024 GMT
Not After : May 14 01:01:18 2024 GMT
Subject: CN=ea99005d263b8abd7210bab130cf26c58c220f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:c5:c1:b4:8e:76:d0:e5:94:b3:75:97:26:
a9:67:b4:cb:69:cf:1d:ed:5d:95:e2:4b:b4:62:9f:
9f:42:0e:ac:40:d7:14:61:4c:2e:2a:b5:f5:b6:4f:
31:1a:4a:9a:67:bc:15:6f:41:26:70:ae:9d:f9:18:
00:d3:ff:f7:03:f6:fb:f1:d6:a7:7b:84:a9:1f:88:
be:2b:4a:e2:80:fe:73:4f:7b:1c:43:a5:ad:5f:e2:
e9:d6:e7:0c:44:62:9b:73:de:03:55:83:c7:a3:a9:
c7:97:07:10:71:2e:30:54:8a:aa:40:8f:32:e5:32:
9a:7c:86:eb:08:05:94:ce:e6:7f:80:43:4b:20:19:
74:75:ab:dd:7c:e7:02:99:dc:14:20:c5:42:00:41:
8a:ee:20:33:eb:51:a2:80:7b:52:21:5c:70:42:32:
77:53:92:85:d8:c4:ee:5d:f7:3b:d9:bc:4b:2c:3d:
f1:ca:c0:bc:d0:67:18:15:f2:10:ab:2b:15:02:fe:
51:80:e8:09:4d:01:25:d1:9c:51:50:f2:32:2d:7e:
4c:63:72:ee:b0:f1:0c:25:f7:50:c0:e6:a3:b4:63:
6f:b0:3c:67:5c:80:14:c2:79:98:2b:c1:c7:de:25:
c1:7d:90:9e:b6:0f:e1:1f:76:6c:a8:6c:01:3e:18:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:99:00:5D:26:3B:8A:BD:72:10:BA:B1:30:CF:26:C5:8C:22:0F:55
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4a:f3:0b:3c:23:65:2c:f4:ea:bd:a5:43:d1:00:fc:92:92:
93:8c:3c:27:3a:76:70:7b:57:cd:ea:cd:69:63:b1:09:7f:25:
da:b8:e5:66:f8:08:2b:9d:0a:37:fd:87:3e:b7:f1:ae:66:0e:
c3:45:df:d3:91:88:6b:d4:b1:4a:67:c9:5e:aa:45:46:c6:d3:
27:56:20:da:4e:4a:77:f1:db:d9:73:5a:87:75:80:9f:e6:14:
6d:d4:59:84:09:1b:8b:13:6f:e2:3a:2f:fc:35:e0:1f:23:3c:
11:e7:da:70:ed:e3:3a:56:9a:59:b7:04:bc:7f:d2:ee:91:a7:
d1:cc:d6:ae:b3:9c:17:1b:d0:a9:bc:f3:e9:ca:9e:b3:b1:d4:
b6:1e:25:1b:1a:09:f1:85:ff:b1:f6:b1:f8:29:bc:32:5c:76:
da:37:4b:7e:82:e1:6f:a3:69:27:3e:a6:48:07:4c:57:d4:c2:
87:1b:19:fa:d5:00:d6:d9:11:d2:16:ca:ac:1a:66:03:1c:72:
20:41:80:fa:9b:5e:47:6d:cc:60:25:fa:75:89:0e:bb:2c:a2:
ea:21:5f:b4:00:42:df:4f:22:be:d0:53:77:8b:18:a9:67:0b:
13:e3:de:ab:d3:64:eb:e7:8d:ab:2f:dc:5e:d7:d6:de:2d:51:
d6:dd:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:52:22 2024 by rpki-client on console-ams.rpki-client.org