Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: 6FaFE+p/6SDvh/SAANZSWmf0WvS4AhACXYgC/DwzdGs=
Subject key identifier: 16:CA:1E:3F:58:AB:FE:EF:ED:84:52:EE:A1:B4:E8:95:3A:91:34:5E
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 018F874A8CD1904E8A8601EEF0DE0D7D98CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 066C
Signing time: Fri 17 May 2024 16:02:40 +0000
Manifest this update: Fri 17 May 2024 16:02:40 +0000
Manifest next update: Sat 18 May 2024 16:02:40 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: KizTt4I8v+gSJK5R4f/z93/BNE6oMuP0P119T+tSMWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:8c:d1:90:4e:8a:86:01:ee:f0:de:0d:7d:98:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: May 17 16:02:40 2024 GMT
Not After : May 18 16:02:40 2024 GMT
Subject: CN=16ca1e3f58abfeefed8452eea1b4e8953a91345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:5f:15:5c:5a:9c:ae:3a:de:24:00:27:ea:
1c:13:3e:9e:2a:a1:5f:1c:6e:5b:57:29:83:2a:92:
09:b8:c8:16:d0:40:36:c5:33:3c:10:7f:df:00:55:
10:14:04:4e:97:ac:a8:36:63:67:58:49:c1:c7:4b:
9e:34:74:82:74:e0:4b:2e:79:32:94:92:c8:24:5a:
84:21:e5:e1:69:5c:ed:d0:50:e0:38:65:47:c3:8e:
55:73:82:ee:8e:5d:cb:bc:bc:89:3a:6d:57:c4:d4:
2e:c2:78:50:54:7b:fa:2d:b5:55:c2:18:84:ad:f7:
90:52:9a:1a:e5:f4:2e:23:a1:15:73:ab:2f:ce:11:
db:64:72:41:d5:86:1c:72:2e:1e:20:b2:37:19:fb:
2d:f1:8a:d3:5a:40:7e:d3:bf:95:1e:fe:e2:de:90:
c0:eb:cd:cc:a6:2d:f7:59:c1:56:61:2a:b5:fb:2e:
40:9c:ef:86:c7:5d:3c:46:0c:66:aa:fc:97:16:08:
00:84:bf:b8:b8:9b:cd:f6:59:86:27:06:31:36:2e:
2b:a2:ed:c9:58:14:d0:b5:08:11:ba:cc:65:20:9f:
ef:1d:30:68:61:d7:a8:81:08:69:9f:16:81:13:40:
ab:e5:6b:a9:27:94:83:5e:51:64:69:ea:be:ae:ae:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:1E:3F:58:AB:FE:EF:ED:84:52:EE:A1:B4:E8:95:3A:91:34:5E
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:97:c5:10:08:fe:52:7c:f7:eb:43:9f:db:30:4a:43:b9:7f:
62:e7:84:ec:05:b8:6b:38:3e:45:ba:a7:7c:62:e0:59:e2:f8:
62:7f:ae:5d:24:db:e9:27:bc:80:02:e0:5d:08:76:a5:6c:c9:
86:03:c3:45:41:d3:12:37:50:9c:87:48:79:9b:09:15:fa:a6:
61:27:74:f9:44:27:3c:da:73:1b:26:af:ed:61:80:64:9a:0f:
3d:90:03:70:5c:fd:89:0d:70:3d:24:d0:63:6b:01:5f:03:1c:
42:fc:a4:02:b6:8a:42:42:c2:6d:a5:13:44:77:6c:5f:0c:e0:
23:09:a6:8d:0d:9e:b0:fe:38:22:b0:97:75:2e:3c:8d:e5:b6:
85:19:c9:d2:55:d4:67:0a:73:81:a4:94:14:af:1b:ca:47:bd:
02:35:5f:0e:cc:58:fb:a2:89:9f:7f:04:ad:b0:4a:45:80:80:
18:f3:3c:08:ff:41:1b:fa:ef:53:39:a2:09:09:e8:2a:3f:0c:
b9:71:98:c2:b7:ba:96:14:5e:6e:83:5c:9b:46:69:74:03:21:
7e:bf:5a:f4:9a:de:7a:34:93:3e:a6:24:93:2a:a1:08:f5:e7:
8b:62:34:ea:aa:20:c9:f8:21:53:4a:c2:58:36:63:dd:69:47:
c6:03:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:36 2024 by rpki-client on console-ams.rpki-client.org