Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: /3c/bitJUgJfwDD/yItaBTbl2XG5cPToPt2kVId53m0=
Subject key identifier: BB:95:C9:62:24:42:24:A0:ED:B1:71:AA:B8:BA:BF:EA:C7:B5:13:A9
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 018F94291456D631488B750F415090550725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 072C
Signing time: Mon 20 May 2024 04:01:11 +0000
Manifest this update: Mon 20 May 2024 04:01:11 +0000
Manifest next update: Tue 21 May 2024 04:01:11 +0000
Files and hashes: 1: 8DYb5ImMvNLSbyaBmd6CELL0iao.roa (hash: P3lJT6NAio9susCOwEr+V7hxwLZObBrwDWkYT5EGi44=)
2: uCr3wsSV16niwIIIeWHNsUKb9nk.roa (hash: gNT5KD7dUwXhuvbp+i1N7ysjJiIfUMghIEA3N1JG3Mg=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: nlvM71TQZS7vQtCHA4AXr2NdJIr5jEwLBzNN7pdHtq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:29:14:56:d6:31:48:8b:75:0f:41:50:90:55:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: May 20 04:01:11 2024 GMT
Not After : May 21 04:01:11 2024 GMT
Subject: CN=bb95c962244224a0edb171aab8babfeac7b513a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:1c:b7:61:21:88:32:ef:58:9a:ec:fb:c3:
d1:7c:50:9b:9f:84:a9:b8:ec:4f:fb:ec:45:01:34:
ed:5c:fa:f9:dd:44:4e:b8:82:62:ff:58:c0:9c:3c:
96:38:65:95:9b:6f:ff:1e:32:23:40:c6:a4:54:95:
db:80:6b:d0:43:ee:76:35:f8:c1:b3:6d:79:b4:c2:
ed:50:29:8c:67:20:0b:24:fd:86:36:fd:a4:f8:9d:
48:e5:ae:67:ff:0b:16:92:40:56:8d:22:3a:fb:3d:
36:cd:45:d6:c6:7f:90:37:c5:ba:18:dc:b5:c0:a0:
e8:32:0e:83:fd:8d:8b:95:b4:8f:2c:b0:84:e1:bd:
bf:6b:20:aa:44:34:88:c4:51:fc:80:a5:80:09:1c:
28:1c:75:7d:13:62:e1:d7:1f:09:8c:06:07:01:32:
bc:d1:ff:53:e8:18:10:ad:bd:30:21:04:1d:99:ba:
5b:9d:1e:7e:48:8d:0d:05:28:0b:ef:db:0c:a7:84:
52:fa:a9:bb:b2:33:e5:6a:11:d9:1d:ce:24:a1:98:
a9:ec:0b:7e:1b:b9:8b:43:97:90:07:89:18:4d:1c:
20:ef:58:c1:4b:40:46:f1:c6:83:d7:a7:fb:bd:d0:
d6:dc:33:67:78:be:21:18:5e:61:6d:e4:30:d8:28:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:C9:62:24:42:24:A0:ED:B1:71:AA:B8:BA:BF:EA:C7:B5:13:A9
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:29:80:1a:a2:0f:f7:fe:bc:93:67:b4:e3:cc:cb:84:39:
d4:77:fd:31:15:ba:cb:db:72:78:4d:b7:0b:a6:a6:de:79:b4:
87:63:5b:49:f8:40:a0:cc:17:a7:33:c7:8d:ac:79:0d:de:44:
b7:b2:d6:6c:57:7f:45:00:c6:4b:87:09:b7:09:d4:77:4d:60:
d6:31:e6:d2:c2:e2:b8:0f:35:e6:9e:f2:59:ad:76:a4:51:9a:
9c:bd:4e:c4:1a:d1:2f:01:df:7b:22:f0:f7:da:bc:1e:55:9e:
82:2a:ed:50:78:b6:18:be:8b:23:e5:80:7a:66:4a:1f:d7:f8:
15:88:b9:81:f4:aa:ee:75:53:84:82:2a:16:e9:5d:e5:77:74:
ef:75:b5:0a:0c:59:36:60:08:d1:12:1c:9d:fe:50:44:c1:a8:
b0:da:69:77:2d:51:4b:fa:65:59:f0:a0:8a:d9:03:75:2f:17:
25:6d:f0:94:1a:5c:fc:b8:43:f0:3d:10:c4:75:a1:3d:ad:13:
b4:ac:4d:be:05:de:d1:22:67:21:f0:9c:55:22:cc:71:1f:3e:
9e:75:6c:c2:87:45:8e:eb:dd:fb:63:6a:3c:2b:a1:62:7b:f4:
40:ba:15:c8:40:42:fe:cc:1a:8f:77:cf:a4:ca:06:2c:48:80:
83:01:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:55:53 2024 by rpki-client on console-fra.rpki-client.org