Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: VpMDyN6sMvCeDKgWbnqxWilBNUtfowuPgBPaZTZwNuw=
Subject key identifier: 89:57:FA:1D:E8:8C:16:C2:1A:B2:20:14:3F:9B:A0:CE:BC:69:C2:75
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 019359532D5E5757915A90D3A41F82D84265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 03E5
Signing time: Sat 23 Nov 2024 14:00:43 +0000
Manifest this update: Sat 23 Nov 2024 14:00:43 +0000
Manifest next update: Sun 24 Nov 2024 14:00:43 +0000
Files and hashes: 1: xGjFPWOWK5JbnB1zW68TPItDAj0.roa (hash: QFmYFD9bB/H5Y9oV11eb0kanEIR1dZekgS2y53i8Ugo=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: lqyENU+iunOXbs3Df+/VeVkfO1X5kmqnPCR6QxtsfLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:2d:5e:57:57:91:5a:90:d3:a4:1f:82:d8:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Nov 23 14:00:43 2024 GMT
Not After : Nov 24 14:00:43 2024 GMT
Subject: CN=8957fa1de88c16c21ab220143f9ba0cebc69c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:18:7c:5c:96:c1:b4:71:fd:eb:a1:23:7c:
8a:21:27:cd:fd:27:72:f0:c6:f0:e8:e7:54:6b:4b:
1d:a3:a0:fa:c8:5e:b5:85:fe:f9:07:45:c8:13:b5:
e2:67:c3:1c:50:8d:6d:2d:af:e9:ca:e3:4e:aa:72:
c8:8d:a7:95:dc:38:f1:f9:eb:4a:42:ff:a2:e9:ce:
3e:8f:59:b6:1e:73:54:9b:a2:ae:2d:49:da:24:9d:
c0:6d:46:60:c4:7d:3c:ee:69:0b:6c:02:27:cd:4d:
30:34:5d:2d:84:36:4a:c8:4c:a8:af:d3:76:5c:43:
5f:9b:67:b0:c5:b9:d7:8d:ec:d9:b6:c4:e3:1f:ac:
2f:73:a8:3f:d3:26:de:7d:3b:58:db:73:c8:9e:f4:
d0:39:dd:99:b2:c3:a8:a3:36:9d:16:f7:fb:e1:59:
a7:4d:db:67:c9:0a:d0:b7:a7:c0:cd:b0:04:43:26:
b0:5f:9b:db:f7:97:dc:ed:e9:14:5b:23:76:28:07:
d5:6e:38:73:24:c2:be:e1:af:73:f4:27:72:a4:8d:
17:96:43:df:80:4a:a3:07:fe:13:da:d4:cc:da:f1:
e3:ee:f9:be:24:8d:fa:59:12:a5:1f:c0:f9:66:e8:
ae:06:fd:de:26:2c:af:94:e0:92:65:92:f4:8a:4e:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:FA:1D:E8:8C:16:C2:1A:B2:20:14:3F:9B:A0:CE:BC:69:C2:75
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:36:94:73:cb:ac:70:3a:6e:d2:04:f6:6b:57:e7:f7:b4:
cf:25:b8:6b:dd:97:63:44:cd:83:6f:ef:5c:c8:99:1d:7a:09:
25:6c:70:04:ec:1e:b9:5e:d7:14:02:9d:01:db:a5:5d:a1:37:
dd:73:5a:6a:35:b6:cd:d6:92:f0:71:a6:09:0e:b3:57:d2:5d:
33:a4:b1:0d:92:21:da:39:9a:e5:fe:0a:42:b5:f3:ab:5d:fd:
1e:58:5f:09:1f:3b:ac:66:9d:e7:3c:cc:84:2e:c0:2d:d3:83:
a9:34:b9:1c:46:1a:79:5e:df:dc:92:65:34:96:bd:e1:cc:70:
65:4d:5d:30:65:00:5f:83:cc:53:2d:0a:4f:54:9f:cf:d6:d5:
f8:d1:ea:00:cd:ba:32:e0:b7:4e:26:19:36:a3:c3:31:2f:37:
98:9e:f6:d6:f0:5d:e3:a9:d6:b5:8b:77:a0:55:88:e7:c9:c4:
94:a3:70:e9:7a:14:81:30:da:6c:02:6e:9e:1e:49:ce:e6:06:
0b:19:ab:cb:dc:9a:6a:37:eb:5b:20:f6:22:6b:e0:44:8a:c5:
d6:a2:78:e3:b5:a5:6c:17:26:8c:33:6f:4c:26:a1:11:fc:76:
2a:35:f2:bf:51:ea:5b:1d:33:cc:81:67:d8:d0:5f:06:12:87:
4e:5d:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:35:20 2024 by rpki-client on console-ams.rpki-client.org