Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: 6NI04vLnX3KSgN6Bq44xQF6uxxbP7/UYS+yl7oZB9eI=
Subject key identifier: FA:46:BC:2A:23:F1:EC:37:EC:6C:75:6F:10:D9:77:B6:09:BD:E4:61
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0193591BE1F3F96F1ED1226A4C6D63439935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 13:00:19 +0000
Manifest this update: Sat 23 Nov 2024 13:00:19 +0000
Manifest next update: Sun 24 Nov 2024 13:00:19 +0000
Files and hashes: 1: y_hkAEXEzVup9N_jtoDogHEzl1E.roa (hash: gtJYbb0wyrFQ5wYi2CRJinlHC18eHqkvEm9XIQkvbLE=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: Gp0veWAEXXVCrbQOWSW2aLrXLnAt2B3NnMBWLEfcCec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1b:e1:f3:f9:6f:1e:d1:22:6a:4c:6d:63:43:99:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Nov 23 13:00:19 2024 GMT
Not After : Nov 24 13:00:19 2024 GMT
Subject: CN=fa46bc2a23f1ec37ec6c756f10d977b609bde461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b6:21:36:89:05:7e:35:a1:e8:bf:7a:fa:
f2:dd:f0:f5:23:50:5a:df:d8:f3:24:44:9b:fa:0d:
5d:da:26:f6:0b:6d:19:8b:9c:5f:18:9f:8c:82:6d:
59:1c:c1:cb:5e:3c:9d:bf:73:e9:8a:98:83:a3:3d:
d6:5e:29:9d:4d:2c:2a:d3:9f:e8:08:d9:d9:b3:0b:
1b:d6:cf:57:55:08:1a:a8:e6:b5:c8:56:c8:53:41:
cf:72:de:a7:d6:8e:91:cf:45:1e:60:e1:2a:50:53:
e4:c6:8c:23:d3:70:ee:0e:a4:62:d3:2a:0a:7a:f9:
09:77:b2:59:60:f9:38:a6:05:e4:b1:b8:60:74:97:
c4:d8:01:4b:b2:95:3f:98:43:aa:7f:85:33:95:46:
f4:95:46:60:1a:92:a3:29:00:56:ce:38:70:04:dd:
c6:11:69:1d:69:c0:a6:59:3f:25:74:f7:0a:11:be:
0f:70:03:d4:cc:11:d6:cf:2f:a3:01:9a:44:82:19:
07:90:f1:a0:0a:d8:20:8c:96:58:6c:82:28:d0:8a:
e7:4c:71:28:68:a4:59:0f:6b:18:4f:32:ff:3a:c7:
88:28:6a:2d:a4:1a:7c:4b:5c:7e:d3:e2:ce:c4:78:
6b:ed:07:26:95:57:29:90:a0:69:80:11:e7:6c:72:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:BC:2A:23:F1:EC:37:EC:6C:75:6F:10:D9:77:B6:09:BD:E4:61
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:93:5e:90:7b:2a:c3:56:d5:19:c4:79:d0:d1:b5:7e:c4:6c:
45:c1:d5:1a:56:4d:6c:cc:8b:06:0c:1b:00:eb:9c:2a:6a:e5:
e7:42:19:7c:6b:9f:75:39:7e:21:74:10:b5:a4:a5:e7:3b:a9:
53:8a:ad:d1:d0:cb:87:a6:55:1b:53:4e:0a:01:b6:df:7e:d3:
66:bb:f8:87:2e:17:5e:74:39:6e:27:b1:1b:85:d2:55:b3:55:
2e:5d:22:0b:38:ee:24:3a:00:7e:26:18:44:ec:16:31:f3:c9:
cf:2e:b9:6b:4c:da:36:b5:cb:f2:05:93:20:c6:e1:e6:25:a5:
42:32:09:1a:37:a6:99:1b:39:b7:69:aa:36:27:f2:20:55:88:
4c:c0:07:9f:17:58:97:8f:12:da:00:22:81:5e:74:43:2a:f1:
de:75:aa:a6:aa:b8:f8:1a:15:f6:af:8f:d4:15:ac:41:62:f9:
ac:b2:44:09:2b:c3:d1:8b:8f:c0:7a:26:ac:76:0e:5c:04:78:
42:87:50:56:f8:c8:11:ad:7b:94:30:d3:1a:2a:3b:f7:97:46:
25:c9:35:07:9d:91:04:fa:c3:68:5e:e3:87:64:04:73:c6:c7:
49:e4:bd:03:20:f4:e1:d8:1d:d6:cc:37:26:f4:76:1f:02:72:
33:d1:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:04 2024 by rpki-client on console-ams.rpki-client.org