Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: cKHEY19lMt3zAzxkP0TkcvwAVSGUNUx76zIG728t9ho=
Subject key identifier: BA:FE:EC:7F:AA:F5:30:F7:B8:1B:E3:FA:5E:D8:31:3C:B0:74:11:16
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01904F7C9082D09C107EC5252CB233676661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 11DE
Signing time: Tue 25 Jun 2024 13:01:21 +0000
Manifest this update: Tue 25 Jun 2024 13:01:21 +0000
Manifest next update: Wed 26 Jun 2024 13:01:21 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: U0L4f+9W3hgxYsrP/5VDFSvdU28MdElqh3tQcJDJAtA=)
2: azY1hz_2wS8KX1dKjwcsPdvJPuI.roa (hash: SOxR8l9MN+54vmOuFrL6MAfhBxOF8N/Ygp+G9+Fp+3U=)
3: oJW6ASsURMYSfzLxAE_s1LjhP7s.roa (hash: JpQaQ7nCa6ynkpGewMESmDjngVGw+vS8qUiZ05Qolpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:7c:90:82:d0:9c:10:7e:c5:25:2c:b2:33:67:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 25 13:01:21 2024 GMT
Not After : Jun 26 13:01:21 2024 GMT
Subject: CN=bafeec7faaf530f7b81be3fa5ed8313cb0741116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:b0:87:02:03:9e:bf:ad:3b:fb:39:c1:1d:
99:d3:ec:fa:d6:55:a8:01:da:17:13:0e:dd:aa:37:
77:0a:a2:14:34:5a:df:1f:42:d2:32:8e:c9:de:3a:
87:7a:79:74:ad:ae:3b:ce:f3:9b:d5:33:a6:08:27:
12:43:c8:8b:b9:6a:55:6e:8c:e2:13:40:a8:e5:1f:
d8:be:b2:80:2e:b7:4f:45:44:89:e0:a3:c5:88:fb:
64:01:bd:e2:f5:d7:cf:8e:3a:1b:b4:1a:97:16:2e:
ca:91:00:5c:3f:92:8f:43:fd:cf:94:9a:02:89:7d:
60:fd:90:47:1c:85:9b:2d:cc:2b:ff:49:b7:a5:ed:
5e:f7:91:d7:10:29:40:e5:75:16:b8:b8:40:f0:ea:
99:a1:43:37:4d:6d:16:57:29:ef:7b:10:a9:3b:d7:
f6:d8:53:fb:c9:6c:21:89:29:94:b2:d9:e8:46:b7:
2f:73:ed:dd:88:76:e5:3e:de:2c:bf:1a:a8:1e:d4:
38:e2:9e:8b:23:d7:2d:9b:f7:9e:67:fa:fd:19:2e:
e6:db:9e:5e:d5:78:45:3f:8f:4b:73:86:db:76:24:
9c:15:da:a9:17:b9:71:b3:68:83:f3:41:68:ea:7b:
25:fd:53:95:82:e6:31:ed:10:33:f4:56:86:de:e6:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:EC:7F:AA:F5:30:F7:B8:1B:E3:FA:5E:D8:31:3C:B0:74:11:16
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:49:c6:90:c0:fe:25:74:cb:d2:30:ff:2a:55:9c:c4:41:
30:92:d3:77:f9:a9:f6:84:88:ce:29:6d:de:8e:b7:bc:7d:1c:
0c:bd:d7:b3:05:f8:6e:28:93:dd:3b:f4:8f:fa:87:cc:46:ff:
26:cf:d9:23:8c:ce:8c:e5:f2:6c:c3:24:df:7a:2c:ef:f2:5c:
e6:57:21:42:bb:95:34:e9:ad:0e:c1:03:3c:7a:36:7b:ed:7b:
99:3c:b3:0f:c9:fd:5c:d3:8d:1b:55:fc:a2:88:2e:35:64:ca:
d2:67:72:c7:d0:b8:7d:f3:7c:ef:d8:37:5b:ff:84:ea:7e:f1:
de:f1:ec:0c:3c:3b:75:fd:5c:a0:99:6d:cb:20:ed:1c:13:fd:
df:31:ad:1b:1c:a0:c0:fa:99:07:d4:17:9e:f2:2a:13:c6:c6:
cf:8a:fe:16:a5:a9:e7:20:2d:df:04:41:4a:9d:6f:3a:bb:21:
b6:e8:7f:fb:6d:e4:45:5c:f0:1d:0b:c5:ed:5f:c1:b5:de:d1:
f3:c8:a8:de:5f:99:9a:bd:9b:6b:0b:86:a1:07:74:4b:8e:ec:
45:89:bb:cb:83:89:40:22:63:28:bb:8a:5a:5b:7e:78:e2:60:
77:77:90:65:89:a9:8b:e6:e1:7c:f4:e8:13:12:83:42:96:e5:
70:76:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:57:57 2024 by rpki-client on console-ams.rpki-client.org