Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: lzFHScmDBWvlB0lpxlOxqNrWmwaW0mnZkLa3sYhRdR4=
Subject key identifier: 8E:0E:9D:85:AD:6B:25:7D:34:1C:67:F9:EF:29:85:28:54:0E:C1:F6
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 018F8748316BEC973BF11E2FC0592F48EBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 117B
Signing time: Fri 17 May 2024 16:00:06 +0000
Manifest this update: Fri 17 May 2024 16:00:06 +0000
Manifest next update: Sat 18 May 2024 16:00:06 +0000
Files and hashes: 1: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: ah6+dQwzEoZjm4OIjgQFJH9jCI2b4+9vgg/48/I0DAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:31:6b:ec:97:3b:f1:1e:2f:c0:59:2f:48:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: May 17 16:00:06 2024 GMT
Not After : May 18 16:00:06 2024 GMT
Subject: CN=8e0e9d85ad6b257d341c67f9ef298528540ec1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:62:d0:64:a7:b4:6f:20:3b:c0:ab:95:39:
f9:b7:36:ae:fe:a8:d6:30:9d:12:9b:7f:24:99:b6:
b3:a9:16:df:4a:48:7d:2f:0f:bb:d8:1e:07:e5:34:
15:c4:ec:f4:95:f4:3a:bc:a9:c2:2c:65:86:c5:69:
04:77:08:f6:ef:03:61:1a:58:be:3e:ea:48:78:ae:
73:7d:6e:1c:cf:ab:ef:6f:c4:b3:17:d1:e4:cf:c9:
13:63:db:1f:0c:78:7f:83:83:47:e6:34:99:27:54:
23:c5:81:04:ab:da:26:69:4b:14:ef:84:e4:8f:44:
6f:d0:f7:8d:7a:c3:da:99:29:19:7e:dd:d2:89:55:
82:4c:2c:cc:4a:3d:48:50:53:b5:7d:9d:c1:3b:3c:
29:8a:51:a7:fc:dc:ed:d5:ad:42:a7:42:64:4c:33:
53:75:4c:a1:c6:ec:7f:91:c7:fe:be:be:a0:4a:84:
84:15:af:ef:cf:64:38:0f:bd:7a:fc:cb:da:20:3f:
c3:07:2f:2e:4c:e1:87:72:53:48:fb:84:73:7e:60:
46:0d:4b:88:62:b2:36:8e:db:cb:42:80:e3:55:4f:
cc:00:92:d1:14:7e:78:6f:c0:38:b7:55:c6:b5:d9:
85:8b:ed:47:1f:15:64:4e:2e:4f:0f:2f:b6:51:60:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:9D:85:AD:6B:25:7D:34:1C:67:F9:EF:29:85:28:54:0E:C1:F6
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:77:16:d6:b3:b0:c2:90:8b:09:29:ce:59:c4:ff:ca:ea:
d2:9b:2e:a4:0f:7c:6c:ea:f4:c7:b2:1a:ec:09:8c:36:27:6d:
e8:13:75:cd:7a:2b:e7:66:e7:1a:e6:1e:c9:29:0e:d8:b7:b5:
6d:14:22:9a:12:b4:09:86:d5:10:44:20:5a:bd:5e:63:d8:da:
ac:1d:47:f4:75:f6:cd:8f:74:af:45:16:35:fb:a1:4f:f7:4b:
5c:40:14:e3:94:b1:2a:54:86:7f:ae:81:f4:1f:2b:db:4a:7c:
1e:8b:6a:ed:15:4d:a4:09:49:b1:54:84:e6:46:37:c9:05:87:
24:10:68:82:a6:07:e5:3c:fc:9d:13:6a:4a:75:9f:69:fa:9a:
da:b1:b2:aa:05:16:9d:f5:de:56:38:0b:85:15:1e:21:92:5f:
3e:5e:94:8f:3a:44:45:53:58:c6:47:59:37:ce:04:27:28:87:
39:66:35:1c:95:15:ab:b6:59:1b:7f:55:43:48:d0:80:02:bc:
2b:2a:16:ff:c5:6c:70:8f:28:a0:66:72:fd:f0:98:db:58:dd:
87:24:33:95:77:6a:f5:3d:87:ab:80:08:80:35:2e:d4:31:fd:
3d:63:8b:9f:98:ae:74:56:e3:a0:f6:7a:61:6f:39:33:87:0d:
a1:10:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:31 2024 by rpki-client on console-ams.rpki-client.org