Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: lKhzhOJ/E5Z4hQhgTwSXUvedO0GtvK9ffv3quGz32Mk=
Subject key identifier: DC:9C:F1:81:80:4C:9E:43:D1:7B:BE:A3:91:92:55:35:33:01:0C:56
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 018F87ED746F03139B37DB9C8B92C35BE658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 110A
Signing time: Fri 17 May 2024 19:00:37 +0000
Manifest this update: Fri 17 May 2024 19:00:37 +0000
Manifest next update: Sat 18 May 2024 19:00:37 +0000
Files and hashes: 1: BWkkTqw-jJBRPisw_cClaMvRu38.roa (hash: 39zcG6TiTehQWTNjeWIi5QL/uV9ur2Jq+npdVuiKgaU=)
2: RWIrmC7PrK1RlMKLQAOtBdVPWdw.roa (hash: lbXNbD8owt/IAbUrPs4UHh9Z+nNa2IeuiGKVaUDcVyc=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: g7mpMz3iZMWgY41JjyirTLe6EclK8mDuzhb8VOLwIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:74:6f:03:13:9b:37:db:9c:8b:92:c3:5b:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: May 17 19:00:37 2024 GMT
Not After : May 18 19:00:37 2024 GMT
Subject: CN=dc9cf181804c9e43d17bbea39192553533010c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:6f:ce:3c:9e:9c:32:85:a8:b2:d3:69:30:
58:75:fe:6c:ab:25:dd:db:09:79:35:a2:3e:d0:45:
f8:78:d2:1d:f1:76:b5:3f:ec:d9:9c:65:27:85:2a:
65:fa:36:47:a2:57:00:2d:95:da:c0:6f:d1:f8:69:
6e:50:4a:61:42:8c:c9:b9:17:5b:33:11:07:01:f2:
fb:77:8b:ae:ce:a4:30:a8:ab:f2:f2:f7:b6:e7:7d:
f6:d5:45:c2:09:2d:1e:1b:fd:37:e7:59:eb:a9:af:
9c:fe:69:65:6d:dd:4d:55:05:5f:6c:4d:17:a0:8d:
30:e9:2c:a3:37:3d:3b:64:a6:c8:f5:e1:02:dc:e0:
90:b4:99:85:cb:24:af:8f:03:c2:4a:0f:4b:b1:a8:
46:c1:d8:c2:d6:3a:e3:cd:05:ca:03:11:b1:ef:8a:
ca:f7:8b:3a:24:33:c9:ac:e9:d3:89:30:d9:2f:5b:
2b:d7:d8:43:d8:c0:2d:d3:15:f4:5b:6a:c7:0c:dc:
d8:46:51:19:de:86:65:0c:f8:ff:a5:0d:d1:ce:75:
49:01:53:c9:e8:72:2a:2c:1b:fe:56:f6:57:bd:b8:
95:83:02:68:4a:08:ff:96:5a:d0:07:2a:27:26:2b:
ef:67:d8:eb:bb:de:9a:73:46:26:6b:58:66:52:01:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:F1:81:80:4C:9E:43:D1:7B:BE:A3:91:92:55:35:33:01:0C:56
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:53:12:58:eb:4d:28:d1:f6:9d:cc:80:76:91:00:c7:ff:dc:
06:d7:c4:f6:4b:f3:14:10:d4:52:7b:a2:58:06:4a:fe:1d:41:
7d:60:7f:9a:a6:eb:a8:ea:f7:40:d8:3c:f2:d5:50:eb:ba:e4:
83:58:6f:e6:8e:12:71:d5:19:83:f8:71:ae:b8:5a:1d:07:4d:
7f:e9:d2:05:2d:4d:d3:2d:25:93:ef:45:f5:b3:8e:74:c1:0f:
1b:de:df:94:4d:cf:f2:13:81:85:08:ef:4d:4d:a5:47:5b:94:
30:5f:e8:25:07:23:86:5a:19:28:b5:9f:43:38:6f:02:ec:e8:
12:cd:21:bc:61:30:25:1c:48:f6:ee:59:d3:33:4d:d0:09:5a:
cf:83:ec:4f:e6:28:f8:34:63:f9:05:20:72:c5:6f:46:a1:d7:
70:ae:1e:92:05:b1:87:2c:d2:6b:16:d7:68:37:f8:5d:9d:0b:
7e:84:b6:3f:fa:37:87:0d:bd:3e:41:a8:a3:62:bb:58:52:13:
76:eb:93:3f:1b:fc:09:c7:49:1c:67:b2:95:b3:97:f7:49:e9:
b3:41:e5:59:f0:d9:c4:77:49:95:17:53:8a:57:70:f0:a9:e4:
b1:01:14:12:4f:d6:69:51:d8:33:6d:83:04:af:c1:65:f2:90:
a7:b6:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:59:20 2024 by rpki-client on console-fra.rpki-client.org