Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: riECUWt5l2F6p1ihXGYrEo2HB3bcrSGZG1AQxA77oos=
Subject key identifier: 8F:C2:AD:9A:BD:2A:97:43:50:0B:41:EA:68:3F:AF:BC:52:E8:EE:5C
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 018F8635F7A952FF58754C8AED61A5D9EB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 108D
Signing time: Fri 17 May 2024 11:00:34 +0000
Manifest this update: Fri 17 May 2024 11:00:34 +0000
Manifest next update: Sat 18 May 2024 11:00:34 +0000
Files and hashes: 1: 5LSfJS95La-elYsRiHdxSEFEGpc.roa (hash: myzvUgjHPH0DHizHLkaq8Q0TBR/BQzto/Fjm1pWKiGw=)
2: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: VCi5VlNEGrTdTj5L6GTSgJYWllEmODiqQFXKRqKiW3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:35:f7:a9:52:ff:58:75:4c:8a:ed:61:a5:d9:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: May 17 11:00:34 2024 GMT
Not After : May 18 11:00:34 2024 GMT
Subject: CN=8fc2ad9abd2a9743500b41ea683fafbc52e8ee5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:9d:6c:cf:86:0a:00:d7:3d:5e:0e:65:32:
2f:96:af:e1:af:9c:5e:2d:ed:41:17:e2:39:ca:cd:
99:99:e5:1c:fe:b8:04:46:3b:19:de:c0:c3:5d:33:
d1:65:70:19:d0:d5:80:fa:a5:1e:24:ba:d3:f1:ec:
dd:db:02:68:ad:4d:dd:00:d6:67:cb:4d:0d:be:94:
86:51:6b:ff:b7:7a:51:a8:14:e0:e8:52:95:2d:32:
8b:a9:c5:c6:a7:65:60:4b:6c:31:f5:57:e8:95:e1:
09:fd:f2:40:94:67:50:c5:e0:f7:e0:b1:5e:32:39:
51:8b:b0:f5:30:99:e2:57:19:49:40:03:ba:29:90:
a8:13:55:f8:92:46:b8:3e:49:1e:d9:e4:04:e6:92:
be:3e:49:d1:31:97:57:22:82:83:10:82:0e:a3:55:
4b:72:d4:83:cb:15:e1:55:d0:90:c2:74:4b:b4:17:
06:1c:62:3e:7e:44:86:7e:3f:86:56:a8:d4:96:0c:
f3:9c:1f:3d:20:f6:bb:89:7b:85:23:93:00:76:30:
1e:e1:f7:9d:fc:ea:15:5a:fb:dd:f1:50:54:b5:7f:
79:a8:ce:d4:30:70:af:0e:4e:a5:e5:21:f3:3b:74:
84:b0:b5:85:60:bd:74:5f:1c:60:0b:a0:cf:5b:cc:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:AD:9A:BD:2A:97:43:50:0B:41:EA:68:3F:AF:BC:52:E8:EE:5C
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:df:c7:dd:bf:67:46:d7:a3:00:67:91:bb:bd:9b:f3:c2:
6e:1f:0c:58:66:c2:dc:89:b6:e9:64:b4:04:05:a6:68:a6:75:
b0:74:27:f0:53:37:02:96:2b:e9:f7:74:70:ba:72:b7:e4:cf:
74:73:ab:c0:34:1f:9e:64:11:87:ff:ce:79:a0:5c:94:53:3d:
26:e1:64:65:fe:88:d5:1b:42:81:df:25:24:61:e8:f8:af:30:
08:7b:06:ee:29:27:24:48:bb:09:bf:c5:b3:2e:c7:ff:87:f8:
12:39:5c:08:94:72:31:70:ed:5b:a5:ae:4c:6a:b7:aa:d4:c3:
b7:5d:2a:b4:ae:a0:26:e5:55:c4:fb:5c:12:b7:44:2e:60:9d:
8e:c7:df:4e:76:3e:56:43:7c:3a:fa:2a:ee:aa:37:54:04:fd:
06:72:6f:64:0a:df:cb:21:68:8a:40:90:67:0a:15:da:68:e4:
fe:c8:4f:09:f8:f4:1f:19:9e:60:cf:19:7d:df:3a:b9:63:ef:
eb:63:80:13:ee:69:c1:ff:5d:cf:8c:1b:1a:06:2b:af:4c:b9:
b6:52:35:96:28:10:8f:ef:3d:e8:38:eb:10:b1:cc:ea:a4:4b:
ef:cb:8d:40:d2:94:0c:b9:42:87:c6:51:f9:df:bf:e8:1c:9c:
28:41:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:34 2024 by rpki-client on console-ams.rpki-client.org