Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: y5+JFCukKd3zY4wdPcZ/llImreMzHJTvS6LskWhcWx0=
Subject key identifier: C3:2B:D5:02:F8:E5:87:AE:D1:76:10:C5:ED:F1:E3:90:C7:18:FA:26
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0191F96BFEFDDC281CF9F719C211BEEFB125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: A3
Signing time: Mon 16 Sep 2024 06:01:29 +0000
Manifest this update: Mon 16 Sep 2024 06:01:29 +0000
Manifest next update: Tue 17 Sep 2024 06:01:29 +0000
Files and hashes: 1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: KJDBcRKwjIwlQ2EW4dUsuBRjHbtdMNtRlG/RckbFSJc=)
2: xRirJw20mGq4hdey4bo1AGOouDo.roa (hash: Ohk1UIjHlV2oeua2tCZCTr3haFOXdI2oFr8xuiRrAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:6b:fe:fd:dc:28:1c:f9:f7:19:c2:11:be:ef:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Sep 16 06:01:29 2024 GMT
Not After : Sep 17 06:01:29 2024 GMT
Subject: CN=c32bd502f8e587aed17610c5edf1e390c718fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:a8:1f:f1:62:42:93:1a:c3:0b:80:4e:6d:
88:f5:6f:98:c5:8d:5c:f3:ac:e7:c9:c3:1c:3f:c4:
59:63:07:39:93:7b:a1:af:38:8f:db:dd:ba:80:23:
f3:ac:82:32:42:86:06:b3:75:5d:4f:69:47:2c:07:
cd:86:c6:e0:42:22:cc:12:98:de:88:8e:14:42:a1:
2b:eb:2f:f1:18:c0:1b:9b:dd:67:d9:1c:fb:b3:b6:
c3:c7:3e:00:a5:3e:02:81:22:fc:4a:1a:69:79:0b:
c8:fd:88:fd:b3:d0:7b:3f:12:cc:c5:81:48:a8:9c:
60:50:c7:a2:9a:a5:29:0e:a3:70:dc:41:14:fb:ec:
11:ac:02:4b:62:c2:91:a1:01:3a:38:c7:d6:bd:3f:
a8:92:76:f8:63:1e:56:25:34:e8:f7:36:b7:4e:8e:
41:1e:06:b4:cc:c7:77:e6:9e:c9:e0:17:aa:90:9f:
75:42:f4:bc:58:49:50:90:86:a6:ab:64:7a:28:81:
f9:20:3e:7c:60:ff:9b:56:b9:34:7f:d2:96:5f:10:
e3:92:be:0e:62:1b:27:2f:76:3e:04:0d:93:ee:d6:
0f:89:a8:45:b0:9d:a9:7d:9f:6c:8b:61:0e:5e:e0:
64:97:28:41:61:0f:2a:38:7c:45:51:67:80:0c:83:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:D5:02:F8:E5:87:AE:D1:76:10:C5:ED:F1:E3:90:C7:18:FA:26
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:83:f3:83:1e:93:51:77:89:56:d8:5f:47:2b:0c:e7:a6:
ea:d2:f2:99:66:db:68:94:f7:94:57:3f:de:a0:ba:fc:4a:28:
19:c5:14:98:d6:ec:0f:9d:7c:71:36:6a:cb:60:49:28:26:91:
93:ac:24:6b:9e:70:cd:12:26:e4:99:87:dd:07:cc:64:5a:14:
e1:34:34:0d:ca:af:aa:dc:54:47:07:f3:10:f3:b0:aa:71:cc:
b4:01:5c:81:98:b3:9c:c2:0b:6b:e0:c9:90:be:65:49:39:f6:
5a:10:66:f0:eb:38:92:2b:c5:74:d3:37:64:c9:a4:1c:ab:5f:
1b:02:2d:96:ee:dd:5e:f9:71:88:c6:64:d2:54:46:37:5f:f1:
bf:b7:86:64:af:70:2e:3e:98:3f:c1:32:9e:7f:e7:6e:f5:69:
dc:16:bd:c0:2d:4b:5e:a1:53:b1:8e:a0:06:b7:01:52:6f:77:
de:01:d7:51:68:79:19:99:9c:a5:2e:65:31:da:13:84:9a:7a:
a6:ec:2c:2b:e5:80:f6:69:29:7b:4a:d6:e1:d5:81:78:89:aa:
4d:b4:7d:62:e6:1c:23:41:2c:21:06:91:32:64:da:74:5a:7a:
29:ab:b7:80:1c:25:f7:35:e2:76:43:70:15:30:a0:fc:26:6f:
34:3d:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:20 2024 by rpki-client on console-fra.rpki-client.org