Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
File: ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json)
Hash identifier: B6HF5rT1TbrYVaAFTIf/QE7MNipGJu+EbDkmsrplvck=
Subject key identifier: A7:31:0C:61:1C:7A:A1:9F:7E:E6:E3:0E:E2:AA:80:D1:CF:D6:3C:A7
Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
Certificate issuer: /CN=64b90f34525f80025ea77cb618e7519982ab8592
Certificate serial: 01935877C87A389DACB810DF8D47ECC5CF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 10:01:05 +0000
Manifest this update: Sat 23 Nov 2024 10:01:05 +0000
Manifest next update: Sun 24 Nov 2024 10:01:05 +0000
Files and hashes: 1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: K6WHB+nkwI7cykXjLbuCRrzIrxSlk6ULcalmcWfb3Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:c8:7a:38:9d:ac:b8:10:df:8d:47:ec:c5:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592
Validity
Not Before: Nov 23 10:01:05 2024 GMT
Not After : Nov 24 10:01:05 2024 GMT
Subject: CN=a7310c611c7aa19f7ee6e30ee2aa80d1cfd63ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:f7:0d:4c:a5:30:65:48:cc:ed:b1:58:d2:
7e:0e:60:69:42:18:46:e0:3d:1e:79:c8:12:56:57:
ca:ff:44:2f:61:c5:2e:41:72:e1:20:0d:f4:0d:85:
4b:0e:7c:0c:1c:76:aa:85:db:e8:24:c8:43:ec:4e:
44:f6:7c:94:7c:39:b0:ac:e0:d5:ad:d3:eb:87:b0:
1b:da:1b:cd:f8:4b:5e:f3:a9:00:9f:62:07:3e:a8:
7e:d3:44:18:1b:00:17:cf:7d:5e:01:ba:62:0d:0f:
5e:37:5d:2f:2e:be:b3:23:60:33:71:27:d2:21:08:
02:e1:0a:b3:62:bb:a6:ac:97:f5:90:77:40:00:5f:
98:74:73:f0:e4:88:3f:ae:bb:17:fd:ed:ce:df:fd:
6e:98:7b:d9:77:e8:dd:2f:4b:48:77:60:f1:98:14:
8c:09:23:39:c4:0e:8b:a7:11:1a:32:39:00:cd:bf:
b1:1f:88:81:7a:53:ec:5c:9b:02:44:06:89:76:16:
11:5b:6d:e4:5d:22:b6:a7:37:95:70:05:22:17:7f:
83:a6:df:52:68:bd:16:49:3a:84:d2:65:89:42:1a:
37:f3:e1:0f:9d:c9:6f:87:25:5d:eb:39:1e:7e:8e:
44:fe:88:af:6f:13:99:41:ae:79:1f:44:5a:7a:eb:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:0C:61:1C:7A:A1:9F:7E:E6:E3:0E:E2:AA:80:D1:CF:D6:3C:A7
X509v3 Authority Key Identifier:
keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:23:c3:a6:c1:0c:15:2a:b2:b1:3d:a9:b8:ca:a1:3a:3d:b9:
bd:4a:63:fd:e8:e9:61:06:23:a3:1b:4b:3a:91:a6:36:a2:bb:
8b:2d:31:67:17:cb:c8:d9:82:c4:d4:17:cf:3b:04:1e:21:61:
b2:92:f6:3f:52:99:16:d7:7e:44:85:be:bb:9b:59:66:9c:c1:
b8:8f:2a:08:7f:30:98:5c:48:52:d2:02:9c:94:28:4b:33:dc:
6c:07:16:db:4b:d3:1b:5e:5b:dc:18:16:13:85:b1:a3:0d:b7:
af:9b:92:a1:a3:f0:37:72:8e:62:9f:00:15:d5:0e:89:0b:1e:
60:8d:92:af:2f:b9:9a:36:53:be:b5:8d:25:94:e3:d9:fa:54:
35:42:5f:08:ea:ec:3e:82:79:a1:d2:07:76:fe:6d:c6:ce:95:
ed:d4:94:bf:30:bb:d7:cc:02:e9:a5:b0:06:03:48:2e:a0:92:
13:5a:a9:ed:15:1a:23:a6:aa:38:15:db:57:54:32:63:fa:4b:
ac:90:a0:55:91:b1:ce:d0:f9:94:f7:28:87:b2:5f:d2:ac:af:
ef:21:3a:ab:93:9a:6f:1f:de:ac:c8:c1:b3:49:64:8c:63:83:
cc:f7:dc:70:fd:6f:13:fe:f9:01:fa:53:51:86:54:fc:b4:96:
e8:13:4d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd8h6OJ2suBDfjUfsxc9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjkwZjM0NTI1ZjgwMDI1ZWE3N2NiNjE4ZTc1MTk5ODJh
Yjg1OTIwHhcNMjQxMTIzMTAwMTA1WhcNMjQxMTI0MTAwMTA1WjAzMTEwLwYDVQQD
EyhhNzMxMGM2MTFjN2FhMTlmN2VlNmUzMGVlMmFhODBkMWNmZDYzY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvb3DUylMGVIzO2xWNJ+DmBpQhhG
4D0eecgSVlfK/0QvYcUuQXLhIA30DYVLDnwMHHaqhdvoJMhD7E5E9nyUfDmwrODV
rdPrh7Ab2hvN+Ete86kAn2IHPqh+00QYGwAXz31eAbpiDQ9eN10vLr6zI2AzcSfS
IQgC4QqzYrumrJf1kHdAAF+YdHPw5Ig/rrsX/e3O3/1umHvZd+jdL0tId2DxmBSM
CSM5xA6LpxEaMjkAzb+xH4iBelPsXJsCRAaJdhYRW23kXSK2pzeVcAUiF3+Dpt9S
aL0WSTqE0mWJQho38+EPnclvhyVd6zkefo5E/oivbxOZQa55H0RaeusZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcxDGEceqGffubjDuKqgNHP1jynMB8GA1UdIwQY
MBaAFGS5DzRSX4ACXqd8thjnUZmCq4WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQt
N2JkYjY3MmUwYzU0LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQtN2JkYjY3MmUwYzU0
LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliPDpsEM
FSqysT2puMqhOj25vUpj/ejpYQYjoxtLOpGmNqK7iy0xZxfLyNmCxNQXzzsEHiFh
spL2P1KZFtd+RIW+u5tZZpzBuI8qCH8wmFxIUtICnJQoSzPcbAcW20vTG15b3BgW
E4Wxow23r5uSoaPwN3KOYp8AFdUOiQseYI2Sry+5mjZTvrWNJZTj2fpUNUJfCOrs
PoJ5odIHdv5txs6V7dSUvzC718wC6aWwBgNILqCSE1qp7RUaI6aqOBXbV1QyY/pL
rJCgVZGxztD5lPcoh7Jf0qyv7yE6q5Oabx/erMjBs0lkjGODzPfccP1vE/75AfpT
UYZU/LSW6BNNIQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:00:42 2024 by rpki-client on console-fra.rpki-client.org