Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: S3mE+91LAJL+AWLih8e7QZJxg3wWQmE+qmgkiDgNWOU=
Subject key identifier: 03:03:F2:A9:92:A1:60:D4:04:69:ED:0E:88:D9:91:D1:4A:A8:9B:56
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 01938B1B0E4237113DA3A541D108F338347A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 0480
Signing time: Tue 03 Dec 2024 06:00:26 +0000
Manifest this update: Tue 03 Dec 2024 06:00:26 +0000
Manifest next update: Wed 04 Dec 2024 06:00:26 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: Q/YSpgb1lbiFpCNgQ/iVdbDKGYdtC/sHMBBc8ouewMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:1b:0e:42:37:11:3d:a3:a5:41:d1:08:f3:38:34:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Dec 3 06:00:26 2024 GMT
Not After : Dec 4 06:00:26 2024 GMT
Subject: CN=0303f2a992a160d40469ed0e88d991d14aa89b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:33:d9:94:d3:26:98:65:e9:9e:66:88:c8:
d2:56:51:ed:58:f4:7c:ca:e7:4e:05:9a:46:b8:a6:
bd:d5:eb:33:19:8e:54:70:51:9a:d7:aa:98:a7:fa:
3e:25:f2:fd:d8:6c:ec:08:54:33:92:d1:3c:87:77:
19:f9:66:94:d3:d8:32:18:9d:e9:c0:38:0c:8a:45:
ec:e5:3a:55:87:aa:89:dd:0c:fc:0c:82:07:03:0d:
5e:86:4c:e1:7b:02:d0:8b:85:2a:65:63:88:3f:c5:
72:08:b7:e4:52:24:ba:1d:30:49:d2:26:97:49:b5:
b8:2d:5c:40:6f:58:e6:d0:57:27:5d:a8:cf:43:9b:
02:c9:a9:b8:22:98:34:6c:a6:5c:8d:4e:bd:fb:bb:
4f:ba:95:8d:be:d6:ff:1d:9a:f5:76:51:93:2f:34:
dc:c8:36:90:81:d0:59:4d:0f:f0:e3:ff:f0:f5:f0:
a6:30:e9:39:45:31:32:1b:25:92:f9:ee:b1:b7:99:
63:8b:cd:0f:d1:ef:37:cf:34:06:14:53:5b:60:f4:
0f:f8:43:b1:0c:e6:1c:36:ad:43:d9:73:53:12:e9:
a1:a4:94:72:be:a6:5f:76:53:dd:9a:7b:3c:00:c3:
0b:09:4e:01:4f:9d:ec:1f:3d:e2:f9:08:b4:11:6b:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:03:F2:A9:92:A1:60:D4:04:69:ED:0E:88:D9:91:D1:4A:A8:9B:56
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:f0:8e:b6:27:46:51:65:52:87:c7:c2:84:bc:62:03:f4:
40:99:ce:e0:a1:50:2d:af:3d:f7:38:0e:51:5f:78:d7:ae:de:
a3:65:4c:37:3c:8c:65:5c:b3:4d:2d:6a:53:04:74:9f:f9:9b:
2f:14:3d:0b:61:8d:8a:54:cf:e5:8c:b0:e5:0c:68:c0:d7:de:
82:b3:34:11:4a:66:b3:e8:2b:00:5b:72:7f:18:8a:71:ea:18:
aa:56:d8:6e:75:51:7c:7d:dc:86:d0:b7:3d:57:77:4f:e8:5d:
e1:32:dc:ce:51:6c:da:03:dc:b7:b3:e8:0a:ab:9b:ba:d3:9b:
bd:36:a9:1f:9c:7c:85:36:75:10:b1:34:90:e5:df:6f:2c:24:
90:d4:99:cc:3b:f6:3d:b1:19:bb:2c:45:86:46:e2:1a:f0:d3:
ef:97:42:25:2d:e2:3c:0b:b3:ef:a1:33:dd:fb:06:8a:19:4b:
8b:68:cd:bf:1b:f3:d9:fc:7b:16:47:47:5b:1e:1f:18:eb:13:
e6:b8:55:96:17:44:ad:a2:94:b1:e8:fd:a5:63:c0:3d:4b:3b:
47:da:d2:4b:ef:65:e5:87:87:99:37:f7:5c:46:37:52:1e:90:
8f:a2:eb:d4:74:23:3b:4f:fa:b8:45:13:f8:52:de:cd:d2:0e:
7e:d7:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:34:11 2024 by rpki-client on console-ams.rpki-client.org