Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: OSuhamdm8O3rP5VhGQwxB3CnuQKI4qBS7H1C0fVQ4+M=
Subject key identifier: 8F:03:C3:25:26:FA:3A:46:5C:14:75:09:9A:AC:A9:A9:A9:06:FB:55
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 019234DD5C3D22D0477AEC46B1F8B5C57703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0724
Signing time: Fri 27 Sep 2024 19:02:55 +0000
Manifest this update: Fri 27 Sep 2024 19:02:55 +0000
Manifest next update: Sat 28 Sep 2024 19:02:55 +0000
Files and hashes: 1: 4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa (hash: IwkubWuBTYakpLwOJDAE02Ri3SqlzyWG512qAnEfALY=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: les8+7gdx5OBX8iCSFmTn46RPrxe7g5OhTe/DxeXcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:dd:5c:3d:22:d0:47:7a:ec:46:b1:f8:b5:c5:77:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Sep 27 19:02:55 2024 GMT
Not After : Sep 28 19:02:55 2024 GMT
Subject: CN=8f03c32526fa3a465c1475099aaca9a9a906fb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:88:ae:fa:5a:93:af:2b:2e:00:c6:1d:ef:
ed:5a:ab:43:4c:5c:a3:18:7f:3d:29:f3:a9:ba:70:
55:09:43:96:01:e9:4c:1f:59:46:d9:67:fe:74:ad:
94:ab:cf:bf:d1:22:eb:af:c4:f0:1e:c7:c6:41:15:
83:5f:7e:ff:e0:84:64:71:02:92:57:6c:2e:d0:b5:
e4:93:e5:46:73:0c:ab:fa:8a:fc:9c:8b:1f:b5:15:
4e:95:85:fe:81:a0:17:48:38:d1:f3:2f:59:62:70:
b6:b0:f8:b1:17:22:60:d9:f1:62:34:d3:a9:6d:43:
f6:93:af:9d:54:00:72:42:42:9b:65:ab:f7:88:28:
dc:03:0b:15:cb:a6:ea:25:bc:4d:14:1d:26:51:46:
1d:49:40:6b:ec:f3:8b:12:96:b4:00:7c:c1:fb:53:
05:82:87:3b:f4:b7:d4:d1:d9:a0:44:37:33:50:c3:
3b:2f:dd:55:3f:39:f8:52:5e:24:d8:f1:a1:85:1c:
75:9a:ea:8e:44:6f:44:50:e4:74:d1:bc:cd:ff:8d:
20:92:96:43:24:2d:b4:6f:6b:32:87:e8:90:6e:87:
af:69:88:79:82:9a:41:18:40:1c:1b:85:ca:ef:74:
ed:2d:b6:bb:75:90:97:8f:86:0f:3b:1e:19:91:85:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:03:C3:25:26:FA:3A:46:5C:14:75:09:9A:AC:A9:A9:A9:06:FB:55
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bd:e3:88:47:fe:49:ae:5f:ca:79:a4:eb:ad:c1:3c:72:f8:
08:a9:2a:da:1f:df:2f:aa:fe:b8:d0:59:ac:98:3d:23:86:23:
e2:60:7e:15:92:59:a1:ff:45:c9:65:21:de:ae:1f:3b:95:d0:
eb:1d:56:bc:78:39:9b:58:df:f6:2e:c1:0f:24:8e:d8:1c:27:
59:2d:3b:3b:d0:76:2b:36:33:f1:e8:5c:bf:56:fe:db:f2:0a:
06:94:c9:91:a6:76:02:f1:6e:67:a6:b9:05:62:e3:90:d2:74:
92:a5:0f:ed:fe:80:f0:d0:7b:73:52:79:d8:cf:3b:7b:5b:e5:
0c:c3:75:f3:f0:a7:e9:9b:ff:aa:2c:e5:fd:d4:09:32:a4:a9:
c0:8a:ad:c3:a4:85:3c:05:f9:15:50:04:da:ba:b4:01:5a:95:
7e:88:cb:de:a7:53:75:e4:91:1b:14:3a:fa:3d:92:4e:58:87:
12:5a:55:29:8f:fe:de:6f:db:81:a7:08:9f:7b:d6:a1:00:fe:
f7:45:01:91:1a:97:c5:f3:09:93:1f:16:b4:8a:c9:11:a4:bf:
f7:98:5a:91:0b:fc:78:e0:88:59:c3:8e:a9:c6:b8:bc:46:cc:
d5:13:d6:83:39:9d:12:0f:87:ae:98:48:fe:ec:d5:0b:1f:87:
f4:8a:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:00:14 2024 by rpki-client on console-ams.rpki-client.org