Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: r5YA3HYqtjul9qb8tLdmUAv+EYg+ktcKfyu3dB8JDrk=
Subject key identifier: 5F:B2:31:FF:7F:1F:CE:DB:DC:3B:CF:EB:C7:9B:37:9D:ED:47:4E:F9
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 0193549C45E57DB9E54C4F939008B010509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 1301
Signing time: Fri 22 Nov 2024 16:02:27 +0000
Manifest this update: Fri 22 Nov 2024 16:02:27 +0000
Manifest next update: Sat 23 Nov 2024 16:02:27 +0000
Files and hashes: 1: OvUKxOax2sAQ8w_8JGJzI2hOQeA.roa (hash: BdbCSen5vGa1p3z39Jx/h4n0Te3tOkFSN4XHAjoFrSg=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: vPhbopCWfUAQMNN7kKlpqcgdbmbksXo7QfRrdGRJdyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:45:e5:7d:b9:e5:4c:4f:93:90:08:b0:10:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Nov 22 16:02:27 2024 GMT
Not After : Nov 23 16:02:27 2024 GMT
Subject: CN=5fb231ff7f1fcedbdc3bcfebc79b379ded474ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:10:51:de:60:29:3a:14:e3:19:82:ba:4f:
cf:d9:39:cf:66:9d:ff:39:e3:a8:06:5c:f8:4b:b4:
34:cf:00:22:98:45:3d:79:d9:75:a9:1b:b8:95:c4:
f1:85:9c:58:e1:8c:87:82:5d:5e:05:34:3b:32:85:
33:72:04:82:e0:8f:17:16:12:1d:2f:4d:b5:b0:88:
af:86:46:70:23:9f:42:6b:e8:e9:38:17:40:21:e0:
af:78:26:d3:55:30:70:16:0c:e8:dd:b7:4d:8b:1c:
60:b9:67:cb:5e:9c:ab:e8:33:33:d3:05:b7:f1:9c:
14:57:68:69:57:60:d5:44:af:96:92:7f:c1:68:78:
85:7e:40:99:9d:51:c8:46:80:a5:e8:c6:28:12:79:
32:07:3d:93:ae:de:df:21:1b:4e:9b:b8:8b:b7:cf:
dc:41:0f:8b:8b:0a:7b:16:35:fa:9b:18:16:22:27:
e9:5a:5f:2c:82:db:2a:78:55:47:06:44:4b:d1:5c:
04:8a:df:38:08:52:bc:14:a0:89:bc:d1:6f:1b:a9:
b7:47:5c:7f:1b:a4:f8:17:91:ab:86:4c:64:8f:e9:
4e:8e:95:2d:4e:66:31:58:71:b0:f5:2a:33:97:f4:
03:00:80:c8:2d:d4:f1:ed:d6:56:e4:f3:11:91:8f:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:31:FF:7F:1F:CE:DB:DC:3B:CF:EB:C7:9B:37:9D:ED:47:4E:F9
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:95:60:7b:66:12:b4:1a:21:65:8a:a8:a9:73:0c:00:2d:
7a:19:af:32:b7:d8:1a:4a:e9:36:0a:f1:1d:f0:52:bd:9a:a7:
f0:49:a2:ac:6b:b3:a8:0e:59:33:5d:f8:e0:a6:d0:ac:ba:7a:
9f:34:92:ff:b5:0f:50:e5:84:d0:86:46:2b:1a:12:b5:94:a9:
83:20:7e:d6:1e:66:5c:b8:45:fe:10:68:13:44:87:8c:87:0b:
10:e4:db:6b:19:20:d0:b9:d7:65:03:d5:0a:e7:d9:4e:2c:d9:
9a:b5:21:2c:31:b3:c6:ec:95:c8:00:fb:02:f7:55:ee:2f:0b:
dc:e6:5f:4c:86:3c:a4:a3:58:ed:99:2d:03:d5:5b:ce:48:39:
8a:0b:40:52:f8:9e:cb:d5:e5:dc:c7:f1:04:07:dd:89:83:f3:
29:f8:66:5b:2e:99:e5:46:0d:3f:3b:ca:67:47:22:28:37:34:
d7:5d:60:82:73:3b:31:92:57:a1:8f:8c:73:a7:33:fa:09:20:
7f:4f:5e:b3:5a:2f:e9:ca:cd:5b:6d:0f:3f:d3:01:0a:dc:83:
1e:d0:19:4d:5a:b7:d9:27:ab:d1:ba:27:8a:25:90:b0:ae:c6:
2f:27:d0:0f:95:b0:db:2d:b4:8e:6f:5d:a7:ec:ff:d3:41:6f:
54:eb:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:26 2024 by rpki-client on console-ams.rpki-client.org