Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier: Ui3fNUbeBfWRLnT/qKVgH/XqjZSI/qvbWFdI0uYsibw=
Subject key identifier: 59:76:43:11:CC:39:23:1E:86:22:CF:88:EF:1D:3A:4C:A6:CE:69:8F
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 019356BFB53E12F3FF060946465B0D504243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number: 1394
Signing time: Sat 23 Nov 2024 02:00:24 +0000
Manifest this update: Sat 23 Nov 2024 02:00:24 +0000
Manifest next update: Sun 24 Nov 2024 02:00:24 +0000
Files and hashes: 1: HkYWxsMLQeA0Bqj5QYfWhviq8sg.roa (hash: Lm5Bfe4rbihiE/y9Oo6Eh1uZbgfyI2CaQ3IqYGwgJ7E=)
2: I5ePMhMkGxa7xS15mA11fvVwwbY.roa (hash: n6O9TN05rqxjXOtC9RZiuqydBUJ90eysmfSmqgC4tvw=)
3: K3mFAL-m8Lw50py5QFODsNNuYVM.roa (hash: 1pWTJjQrmHDLW0HGtXzVUlo3Idd4MiXI0AYXghDHqDE=)
4: KoW9YRneAGDvw6gSqqA8-u2Uz7c.roa (hash: Cg/FTGgvCtgwr8O6+8shaYQTNZpoNZmCh1AK1G5RjXQ=)
5: bVV7j90v4pFNdccG3XpSTi7oQZI.roa (hash: 7vAFRd0E6K+DqAJw797qW39vId01gwgzkeym0i4HAMo=)
6: jziUocfwwH9YlYLW-BO-D75CP8Q.roa (hash: 3KIIhi01mRlObfSnmtk4tbUKq8wdoKyRT2o6topB8YA=)
7: olOg_xWYeEx8gCURefGsx5zf1Ec.roa (hash: PdgKZjS3DXUWnI0En857vO9DUXAha2MPvYy98aQwLPQ=)
8: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: +w3qslgM5er87b+qxYpx1zICqKK2Vg1LAEkeeL63dDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:b5:3e:12:f3:ff:06:09:46:46:5b:0d:50:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Nov 23 02:00:24 2024 GMT
Not After : Nov 24 02:00:24 2024 GMT
Subject: CN=59764311cc39231e8622cf88ef1d3a4ca6ce698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:ad:d3:9d:35:8a:0a:fb:80:3c:b6:c7:e2:
b4:02:a1:07:1a:7f:7c:ab:74:04:f9:be:47:31:03:
58:f1:36:85:f9:81:56:9a:81:b1:3c:e1:16:df:de:
1b:a7:90:2a:5a:88:f6:93:91:2f:95:2f:72:48:c8:
de:60:0a:ba:95:f6:eb:6f:b5:f0:47:0c:b8:db:ee:
06:67:98:8a:78:47:61:86:a3:46:d8:69:ab:4d:be:
f5:2d:f2:9f:5e:b6:b3:f7:c3:e4:47:8e:94:1b:3d:
f2:3b:7f:ef:db:2b:6f:b3:09:af:db:aa:38:c7:e4:
49:45:eb:b0:f7:df:17:55:c1:67:6c:34:21:d9:86:
8c:1c:e9:24:03:4b:77:ac:b7:df:0e:2b:e1:bd:ad:
27:ff:67:5c:e5:6e:c1:a6:5a:79:d2:69:d9:2b:e8:
c4:19:c3:b9:58:7d:2e:79:98:03:60:80:42:60:9d:
4f:c4:f6:2e:e0:39:40:b2:60:d0:19:4a:45:3b:c6:
48:34:35:96:f1:8c:33:d9:40:fe:55:cf:8f:88:1c:
a7:4c:e0:05:c1:7d:bc:3d:33:b3:26:70:96:6b:6c:
8d:52:e3:90:b6:0c:06:fd:a1:6e:a9:71:6e:57:ce:
8d:7f:d0:d6:5a:6f:6e:67:f2:91:2f:49:9b:ef:a4:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:43:11:CC:39:23:1E:86:22:CF:88:EF:1D:3A:4C:A6:CE:69:8F
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:2f:43:a4:9b:6a:9c:67:8c:16:53:e6:7d:ab:16:60:b3:
ef:92:fa:17:46:e1:b3:73:ac:8e:71:c5:e3:a5:5f:2b:2f:1f:
4b:30:35:80:04:13:e4:9c:d9:da:80:d1:5b:d5:d8:59:3a:d2:
45:f5:db:83:3a:ac:53:9c:e2:55:af:e4:3e:c5:ae:02:11:ab:
83:35:05:f1:f6:5b:73:17:8d:59:57:49:6e:f8:53:a7:25:ba:
1c:65:c0:ac:88:38:3a:44:34:2b:d3:aa:08:73:7a:fb:6e:52:
79:61:eb:c6:ab:20:c7:2d:e3:2b:17:0e:4d:75:e3:3b:67:48:
9a:ea:1c:e5:d9:db:9a:f6:89:6d:bf:ac:3f:7b:3d:9b:d2:e8:
68:d2:45:43:32:6d:52:85:56:3c:ed:61:64:15:77:84:92:be:
20:d0:bd:7f:2e:09:f7:c3:95:be:36:f1:13:b6:68:b6:2d:ee:
6d:66:a9:a4:62:fb:6b:7b:74:73:a2:b1:ad:fa:82:65:a5:a0:
3d:30:31:46:cd:54:6f:d9:b2:d0:28:8e:aa:bc:55:66:6e:e8:
fb:33:46:98:83:d7:a0:45:cf:53:72:e4:40:0b:ef:a0:d2:ff:
e3:57:d8:e7:8c:03:5a:13:61:39:14:0b:94:38:0b:46:62:ba:
ef:08:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:57 2024 by rpki-client on console-ams.rpki-client.org