Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: EA2FZ/vpf36TyxIeRXlAirw8WKje5Z22ICQkbCcXQzQ=
Subject key identifier: B9:66:64:DB:34:E6:0A:C1:B9:44:3E:3A:3C:16:65:2E:32:23:E9:C5
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 01935689E7D558D2ADBCAF42360291C638A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:38 +0000
Manifest this update: Sat 23 Nov 2024 01:01:38 +0000
Manifest next update: Sun 24 Nov 2024 01:01:38 +0000
Files and hashes: 1: 1BeoqBw7D5I9p9Pegs5nZQONow8.roa (hash: sXoXEIaBr2aLlplwmiokJ7+UmFxiLYR5j1Qny4u0zWQ=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: UjbJafgOTt23T1qOUXAcp1QdFPRSaB+BEtsFlELuS0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:e7:d5:58:d2:ad:bc:af:42:36:02:91:c6:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Nov 23 01:01:38 2024 GMT
Not After : Nov 24 01:01:38 2024 GMT
Subject: CN=b96664db34e60ac1b9443e3a3c16652e3223e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:f0:d7:e7:2c:8d:89:e6:4a:ab:24:80:dc:
86:26:eb:02:f0:a1:ad:dd:55:4b:2b:19:32:b6:06:
4c:81:60:02:a8:79:12:a1:d9:0f:f7:ac:92:5d:dd:
20:36:d6:94:0d:1e:8d:20:d4:a4:7c:67:9d:6b:c1:
df:f6:99:6e:97:12:91:0a:b0:93:da:5c:5b:e2:ec:
a4:ee:14:9b:bc:89:c3:61:08:43:f0:3d:75:15:53:
94:76:49:94:98:0a:fb:69:b3:6b:48:f7:92:78:eb:
04:36:56:e3:2a:5e:58:6e:a1:c6:b8:5c:f4:13:a0:
ec:df:1d:1c:f1:7a:e8:96:83:f6:a5:1f:e5:86:70:
16:11:6b:25:e5:2d:22:2a:e9:42:58:45:7e:b5:18:
a6:db:ac:ed:79:80:8c:cf:62:2e:3a:1c:26:fc:90:
e1:0c:c2:cf:5f:b2:89:c2:2d:d9:2a:3e:88:5e:d4:
7f:77:a8:36:9d:59:3e:30:51:bc:fc:e7:b7:1a:a1:
7c:a2:65:5f:ec:35:22:83:14:bb:5b:40:25:e4:e3:
9f:63:2a:be:c8:5a:f1:91:10:2d:97:55:1b:7c:58:
b7:a4:84:57:3c:4d:8f:9f:8f:cd:bd:ad:c6:b4:92:
89:ad:4d:44:f8:ae:78:5e:e2:51:b1:60:7b:08:43:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:64:DB:34:E6:0A:C1:B9:44:3E:3A:3C:16:65:2E:32:23:E9:C5
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:be:93:d5:5c:ec:f4:c1:cd:81:c1:9d:f9:5c:4e:00:10:
16:52:62:6a:53:71:3a:1f:c5:f6:a7:36:42:1d:9c:ba:ec:2b:
31:ab:8e:d6:41:13:ff:48:42:94:58:bd:fa:47:9d:89:f7:18:
3f:aa:0f:08:a8:5d:57:b0:4d:78:73:80:36:db:5d:6b:5c:db:
1f:e2:01:da:fb:83:5c:11:4b:8c:df:b3:fc:ed:bc:16:66:7f:
1f:4d:17:f1:9f:ed:b1:16:41:58:99:c8:47:0c:73:07:d5:bc:
20:d3:67:90:58:1f:77:a5:47:07:9b:3a:20:b5:36:6f:1f:01:
a9:35:2a:51:83:05:53:bf:10:c9:b6:4b:a1:c4:30:b8:3d:8d:
9f:60:e7:51:ec:74:25:36:61:8f:f6:42:ca:9d:1b:9f:78:55:
6e:3d:ef:b3:27:3a:ae:bd:0c:65:a9:4b:21:1d:a5:3f:e2:a6:
36:ff:1d:a9:90:34:41:8d:70:36:2e:49:be:f4:27:00:5f:61:
23:dc:af:8d:82:f7:92:49:e7:f2:d8:d4:e0:6d:44:11:50:63:
d3:e1:f7:b3:7b:f9:b8:7c:be:de:f6:f6:fb:19:a0:4d:12:85:
a8:42:7a:d9:da:2a:bf:33:3f:60:75:cc:b1:e5:b4:62:c9:d6:
6d:8f:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:24 2024 by rpki-client on console-ams.rpki-client.org