Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: 8PDGnVZtHORW5zSAhnl2CG0GR8EEshqr6qXUtYDI1Co=
Subject key identifier: 14:2C:65:AD:22:DA:71:44:5D:1B:51:C0:64:34:82:DA:DA:32:67:55
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 0193579B633B73C7F14389B6EBC15BDB3FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0CDD
Signing time: Sat 23 Nov 2024 06:00:21 +0000
Manifest this update: Sat 23 Nov 2024 06:00:21 +0000
Manifest next update: Sun 24 Nov 2024 06:00:21 +0000
Files and hashes: 1: 2h6TQGJDG48pSJd4LQ5wRmeGsfk.roa (hash: xAgRxDHDqw3hMGQxRaTu8YWnOZj75MJjZkgZeMiP6ks=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: UNocNfgnUS//ybdHQuEm4QuWgt5OnA1Y5w9zt7+Hic8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:63:3b:73:c7:f1:43:89:b6:eb:c1:5b:db:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Nov 23 06:00:21 2024 GMT
Not After : Nov 24 06:00:21 2024 GMT
Subject: CN=142c65ad22da71445d1b51c0643482dada326755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:28:50:de:ee:62:13:33:39:35:85:39:96:
fa:45:7b:5c:8d:7d:43:38:ee:c2:41:db:e9:50:26:
05:4c:65:25:1e:a5:5c:e2:90:c1:93:eb:11:42:85:
0f:80:cd:28:bd:b6:22:45:f9:66:5d:aa:86:b2:d8:
de:e9:e0:81:c3:dd:67:76:90:e9:42:7b:d6:93:e0:
ac:e3:2c:4f:23:b6:7e:c8:6a:2a:90:c8:ec:d2:44:
f6:f0:36:72:de:a8:71:75:a3:94:00:06:c5:9d:45:
cc:09:56:e7:46:5d:f7:6f:29:18:a9:26:1f:fb:b8:
44:b6:e8:49:bb:0c:a1:18:b7:bd:70:c1:49:49:7d:
4e:a0:55:d2:82:7d:af:b2:11:27:d6:79:f2:f0:ee:
50:de:d3:cc:ac:48:53:57:61:8a:b4:60:11:33:39:
bd:09:bb:bf:4a:cc:62:5a:09:66:4f:ea:3a:f9:ef:
47:a9:9f:73:ac:48:cf:7a:b1:4e:b2:e1:04:bc:d4:
c1:37:a7:d7:44:85:19:f8:86:5a:c6:72:9f:78:c7:
72:ec:56:19:cb:a0:46:b0:9f:8d:6e:60:5a:e0:2e:
76:0a:77:5c:01:f1:50:7e:9e:0e:96:0e:35:6c:62:
2c:59:40:fb:57:a8:72:09:02:1b:88:eb:09:b2:a6:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:65:AD:22:DA:71:44:5D:1B:51:C0:64:34:82:DA:DA:32:67:55
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:b2:d3:8d:19:26:ed:6b:72:4a:86:0c:8a:73:cf:07:8d:
4f:63:ac:05:90:49:6e:a3:73:df:63:ee:69:ce:3d:17:56:6d:
1d:6b:17:00:f4:37:64:c6:50:87:4a:e6:d5:89:ce:cf:b9:5f:
8c:20:e9:c8:91:b2:37:f9:66:8f:63:aa:12:17:dd:a1:14:47:
7c:56:da:cd:41:ef:e4:b4:a4:12:37:50:96:c8:51:85:4c:5c:
37:89:c8:08:38:22:25:11:57:d2:fb:2c:65:63:c3:c8:60:bf:
ee:71:12:69:1a:d7:be:4a:65:69:33:86:f7:35:3b:b4:21:b6:
03:77:b0:52:5e:42:08:78:d3:fd:7d:b7:a6:4a:e8:18:2d:7d:
f6:0d:b6:9c:10:b4:9f:eb:22:a1:cc:f9:60:cf:01:78:4a:77:
d1:2d:06:89:61:85:00:57:7d:06:d9:ba:a3:c7:39:0d:67:dd:
03:04:77:b8:ab:5d:c9:d1:d6:2d:36:3b:14:80:28:93:84:ad:
e7:42:cb:65:ff:df:c8:8b:41:31:88:29:e0:c5:6e:b3:f6:1d:
04:0d:d3:6b:e7:4c:5f:e1:76:c4:c8:e7:84:db:25:88:26:3b:
c9:c9:fc:7a:1f:49:72:8a:ca:25:5c:a4:89:ce:7d:e1:a7:91:
59:03:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:50 2024 by rpki-client on console-fra.rpki-client.org