Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: EJAZOy+4cNpBewu3tkhmhAJJ11SmpYaktS4i9qzpbl8=
Subject key identifier: B5:F6:8F:7B:EC:33:39:69:40:8F:3B:C6:45:B4:40:A9:37:E2:10:24
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019352AC9CBB1D001C43B282AFA69CAA00BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 0F24
Signing time: Fri 22 Nov 2024 07:01:04 +0000
Manifest this update: Fri 22 Nov 2024 07:01:04 +0000
Manifest next update: Sat 23 Nov 2024 07:01:04 +0000
Files and hashes: 1: DG0MDFaVPMaf8eAc8cu7Lr4D2-k.roa (hash: LvojZLVUPHfRduTmbyWUKp49vpKIYFv8O6Yui4N6zCg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: SGpOUWw9eCae97BXfWHpTL+2OR84eDj9d22RROtRmic=)
3: bnboJeV6hquO4vlPQIfjPbVPBtk.roa (hash: S6auoKpR0m5fisai/RHp5ib/WbJ3ogfkODVs1Tn/3sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:9c:bb:1d:00:1c:43:b2:82:af:a6:9c:aa:00:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Nov 22 07:01:04 2024 GMT
Not After : Nov 23 07:01:04 2024 GMT
Subject: CN=b5f68f7bec333969408f3bc645b440a937e21024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:55:3e:eb:c4:4b:86:a8:c6:fb:03:d3:6d:
06:45:a3:37:b4:2c:c4:aa:3c:71:33:c4:9a:81:d4:
29:18:2b:61:1f:e7:c8:32:d1:17:b2:53:61:21:8f:
f0:03:86:34:f5:09:6b:ff:2e:77:91:e8:ef:53:38:
58:5d:bf:49:8e:af:9b:13:20:40:92:d1:d2:82:a1:
ce:e4:ea:07:9a:42:6d:d1:13:ef:7e:73:94:92:60:
41:50:48:b8:3b:c8:a6:91:8a:de:28:a4:b5:16:cd:
37:c8:51:d8:77:de:f5:73:bc:e0:b4:3c:cd:f4:9f:
4f:74:08:80:64:18:d2:59:fe:af:bd:fb:cc:1a:fc:
28:d8:6a:d6:e3:56:4c:62:74:f8:cf:37:95:84:a4:
ad:49:d1:45:9a:84:ff:4d:8b:fc:a1:51:ab:3f:92:
39:83:1b:98:30:c2:c7:da:20:fa:7c:8f:b7:25:3e:
fe:fe:16:87:9e:ac:af:5c:46:96:97:74:61:3e:6c:
4b:a9:72:eb:c3:42:a4:62:86:08:f7:18:0f:1a:88:
91:b7:52:3f:e5:8b:5b:8b:fd:9a:5a:b5:b1:4d:70:
bb:17:a1:5b:e9:e3:e0:23:eb:db:89:ad:56:83:a0:
82:b5:c5:a2:05:a5:c1:51:ce:6b:4a:57:b1:d8:84:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:8F:7B:EC:33:39:69:40:8F:3B:C6:45:B4:40:A9:37:E2:10:24
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:e4:75:9f:57:1a:55:56:d9:a0:c1:3b:90:3c:e8:30:77:
62:63:68:5a:d6:08:a5:bf:2c:05:b8:1a:36:4b:7a:64:81:d6:
2a:60:65:3d:ab:c6:88:62:23:6b:a7:71:f8:be:58:6c:7f:ad:
19:3d:08:89:4a:8d:7f:6e:67:b4:cf:a6:f7:b9:1e:c6:ea:5b:
2a:12:03:89:78:f1:d1:c0:fa:1e:e1:83:bf:fc:09:8a:ec:bd:
73:1b:be:13:16:01:4e:d7:6a:79:e9:76:89:f9:bb:1b:64:f1:
da:ff:e0:76:a1:b0:9d:42:ea:71:59:99:54:68:d9:6f:23:d7:
63:d7:9c:bb:ef:d7:90:a1:6c:0a:fa:cf:a3:e8:21:f8:8e:b6:
67:59:10:86:30:81:b7:44:07:70:b1:31:86:26:45:15:6d:bc:
94:75:93:86:ad:a2:de:e6:18:b8:87:e7:e3:e4:de:c7:89:b7:
61:80:4c:6e:3b:a1:d8:d8:5a:f5:de:34:07:50:56:2b:e0:13:
e1:1b:0b:65:9b:e0:3a:da:67:ae:d3:65:14:22:ef:20:d8:a8:
5c:a4:01:7b:80:a9:75:2b:30:06:53:41:97:b1:c3:1d:ae:46:
ac:c0:ff:a5:0f:da:8e:6b:b5:8b:05:d2:2f:bd:18:42:50:d7:
74:f3:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:55 2024 by rpki-client on console-fra.rpki-client.org