Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: LETAasP0GS0p18AQayfvbeMjaxoVvIJYfIO3BmdDIcw=
Subject key identifier: AC:42:4E:F4:9F:5B:24:11:01:C0:2F:4B:84:3A:34:EC:08:14:A7:50
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 018F87ED90AD6F4E2DB3DE00BA9C6C9B19E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 10B7
Signing time: Fri 17 May 2024 19:00:44 +0000
Manifest this update: Fri 17 May 2024 19:00:44 +0000
Manifest next update: Sat 18 May 2024 19:00:44 +0000
Files and hashes: 1: FY0h06ON8EJRgYOpw112Fe7lQPY.roa (hash: wSOpqGKxU0M3P9JulY3TIPJrRAc3rHCyqulInI22dRs=)
2: dxG_lnXEA_BmYObUwnk8YKqzsgE.roa (hash: Uzqvc37wHw9m3JIGWlVr5GsfYeKOtXkY+1s2hzz50gs=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: KW1rkk7XSdFvfdh0xTpkZKnCfOPTPZomnXLEu1SSF0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:90:ad:6f:4e:2d:b3:de:00:ba:9c:6c:9b:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: May 17 19:00:44 2024 GMT
Not After : May 18 19:00:44 2024 GMT
Subject: CN=ac424ef49f5b241101c02f4b843a34ec0814a750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:a9:4e:1d:13:4b:f0:d7:ee:3d:38:bf:53:
ee:ff:23:65:d2:10:17:02:5e:46:67:03:33:90:fe:
5e:61:12:7b:61:87:f3:dd:06:70:f9:ba:f1:dd:79:
21:3c:18:fc:8d:15:8a:10:87:c8:1d:28:29:70:c4:
fa:c1:36:5e:32:47:bf:0f:8e:cc:47:5d:34:13:9f:
df:e6:ac:3f:fa:7f:eb:81:d8:73:0d:a2:15:fe:04:
cf:c5:7e:a8:f0:d1:d7:7c:84:42:94:6e:b6:ca:8a:
b5:18:ef:df:87:ce:6a:67:57:12:53:9e:1d:08:5a:
92:d7:f4:c9:45:1a:4b:ad:26:49:92:cb:53:e7:a6:
5b:db:34:a3:3b:d6:f1:62:4d:0e:3e:1f:c0:e1:21:
c3:e8:fb:ac:96:2c:46:81:5d:a3:dc:63:26:db:f4:
15:8a:2a:76:3c:fe:ac:dc:69:55:2a:da:30:49:60:
11:54:df:93:42:26:f3:5f:d9:ff:7b:de:08:11:d4:
ec:bc:81:ef:ef:6d:53:07:9c:93:23:79:32:69:ce:
7e:31:37:7b:f3:39:1e:31:c1:bc:96:c7:5c:f7:c3:
5d:a8:e6:02:d7:cc:ba:ee:54:c9:80:2e:ca:21:9a:
36:cc:c4:77:78:b7:68:87:bd:a5:1f:b3:19:e4:02:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:4E:F4:9F:5B:24:11:01:C0:2F:4B:84:3A:34:EC:08:14:A7:50
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f2:43:00:86:97:d3:d1:01:1f:9a:64:55:67:fe:c6:25:d1:
00:ab:b9:bc:6f:dd:d4:b1:bb:e5:5c:78:cc:96:dd:da:e6:c0:
ff:2e:27:9b:18:ee:42:98:03:d4:cf:83:2a:65:95:ac:60:ac:
57:6a:0b:9e:63:b7:fb:a4:da:8c:ad:33:18:d4:1f:e7:e0:18:
d9:d4:c3:c2:08:8c:e2:1d:7f:a8:8a:37:8d:9c:91:5e:5a:55:
82:79:d6:98:b2:4a:87:2e:07:9c:89:47:e3:67:92:df:ff:ad:
99:be:a7:d9:0e:a0:77:f3:42:1c:74:02:d1:56:1f:a8:c3:4d:
4c:50:bf:b1:45:f8:f0:62:e8:27:7c:22:25:f7:7a:e9:38:64:
ec:e5:d1:16:c6:27:02:59:0c:69:07:64:43:76:3e:cf:08:63:
20:b0:0c:50:dd:15:6b:e3:f3:c2:7b:2e:9a:08:c6:ff:67:e6:
5a:da:e1:86:2f:db:24:b0:0a:aa:ab:8f:b8:9a:2f:77:1e:b1:
bb:75:6a:83:c9:20:1c:d2:a3:56:a6:e9:c2:2f:4f:20:a6:aa:
56:1f:a6:b3:8b:3a:50:12:b7:4e:98:c8:7a:2d:12:a9:dd:9c:
6e:c6:f9:1c:aa:26:17:16:60:b1:4d:f3:66:2d:8f:2e:56:83:
60:e8:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:31 2024 by rpki-client on console-ams.rpki-client.org