Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: vGppzzUPCUkuTyiaXgWfCvmi5GB2CaBkekAjm8U873k=
Subject key identifier: 09:7B:2D:7E:87:95:73:49:A4:0E:B9:B4:33:C9:FF:CA:14:C7:9E:5F
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 019355AD49017FE20EC06965FD52F504DC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 1303
Signing time: Fri 22 Nov 2024 21:00:39 +0000
Manifest this update: Fri 22 Nov 2024 21:00:39 +0000
Manifest next update: Sat 23 Nov 2024 21:00:39 +0000
Files and hashes: 1: DLn7puMB9c1QF952DSDa_BucbHw.roa (hash: +/CrC9j4bEl57mhlbYgGgF2tqHBnCmVYfme1XlmXPCs=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: +K/fqqvBmbktiEBFwAuEXM2rRA8rdo+O94ldz8NaPSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:49:01:7f:e2:0e:c0:69:65:fd:52:f5:04:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Nov 22 21:00:39 2024 GMT
Not After : Nov 23 21:00:39 2024 GMT
Subject: CN=097b2d7e87957349a40eb9b433c9ffca14c79e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:f9:89:91:65:87:8b:d5:e4:ba:3d:1c:c5:
8f:e0:04:3b:36:fb:0a:76:06:76:ea:76:bb:ef:37:
4d:ff:25:c6:fa:b8:5b:6e:ea:f9:89:46:a3:5b:7a:
32:47:d9:ab:d9:1e:33:5d:c1:30:7f:0a:d5:64:87:
e3:75:bc:89:8e:79:c2:f1:28:9f:af:ea:2e:76:50:
07:ee:86:69:e3:1e:cb:c8:a5:8c:0b:94:bd:60:aa:
cb:27:f0:0c:ee:6c:0e:25:16:b6:ce:ff:d0:a4:48:
09:1f:d9:23:33:1f:5e:21:49:f2:7d:04:fe:06:66:
a0:78:32:86:2c:d4:1d:cd:c9:77:fb:73:de:08:2c:
00:70:15:2f:b2:58:1c:e9:3a:92:9c:bc:35:dc:15:
ab:73:83:c0:e0:30:63:41:6e:26:1d:56:9a:65:b9:
88:ae:34:25:5e:cf:82:a3:6e:eb:52:ea:fc:64:78:
95:7a:01:52:1c:31:af:72:58:39:2e:f0:2a:59:f6:
76:7f:e4:55:3a:54:7a:e2:8c:2f:59:34:96:94:e7:
bb:5a:ba:92:31:9f:d7:9d:e2:f5:50:ab:3b:a1:4d:
c2:b3:8d:27:4c:8b:1a:8a:d4:18:05:6d:0a:df:db:
3e:3b:5b:11:e0:9f:05:a8:98:9b:ef:05:ff:4e:34:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:2D:7E:87:95:73:49:A4:0E:B9:B4:33:C9:FF:CA:14:C7:9E:5F
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:27:c2:9a:c6:75:64:b4:88:04:87:b3:5c:4a:91:2a:4d:a7:
6d:78:53:5f:8c:df:08:95:6c:8c:93:37:a8:f8:25:c5:cc:fe:
2d:5b:60:9a:dd:f4:8d:1d:bb:be:67:7e:26:b4:85:d2:c6:90:
88:4b:c7:55:ac:a9:e0:9b:44:b3:03:73:71:cf:c8:f5:ed:36:
7d:a6:e2:fb:ab:d1:32:ec:46:ce:c2:fb:cf:7f:03:2e:aa:84:
50:d4:34:9f:82:d6:0a:63:9a:b7:24:49:d5:e0:49:45:42:8e:
7b:53:76:9d:9b:d2:e7:0e:35:96:bb:34:ef:c2:a7:c2:b3:33:
5c:4e:75:15:a9:5d:22:a3:5d:65:da:aa:cc:8d:82:5e:34:92:
56:7e:2e:cd:0d:dc:5a:bf:2e:36:fc:31:7f:81:15:3b:97:fb:
c9:2f:ea:6f:df:d9:16:31:8e:22:89:6b:fc:b6:f1:c3:28:f9:
75:d5:9b:a5:f4:c0:74:dc:d1:85:e3:fa:63:ae:8b:08:30:99:
56:ae:6f:87:02:9e:b7:23:46:25:ae:32:83:46:a6:69:51:7d:
99:80:b4:c0:6c:f4:16:ab:d0:57:90:b7:b3:79:39:96:4f:f6:
9b:97:31:82:b3:9e:cb:cb:19:6c:a9:29:dd:a6:ff:46:ad:46:
d4:c2:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:21 2024 by rpki-client on console-fra.rpki-client.org