Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: pKvloGVoMDVNLLO/7450kx+zkmIisZq6HAkdbnewOJs=
Subject key identifier: F1:B9:2E:50:06:4F:33:CA:56:87:F4:42:5C:D1:37:A1:3E:F1:D4:A8
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 018F87ECF6EC934B80BB831BC60B6C5D7CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0B70
Signing time: Fri 17 May 2024 19:00:04 +0000
Manifest this update: Fri 17 May 2024 19:00:04 +0000
Manifest next update: Sat 18 May 2024 19:00:04 +0000
Files and hashes: 1: D2Xcg5HhL-0yof6WIyzY1SytPs8.roa (hash: AoXZPceZgUyneE+99qfiIlDfvkYtNZCRvBY+b8t8gbE=)
2: zVdth24X5nqjsfHBDas52yk14is.crl (hash: ZeHGGeBP/62z7dvXaSKqY2LFQxLuw67FJHQmxQjCkXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ec:f6:ec:93:4b:80:bb:83:1b:c6:0b:6c:5d:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: May 17 19:00:04 2024 GMT
Not After : May 18 19:00:04 2024 GMT
Subject: CN=f1b92e50064f33ca5687f4425cd137a13ef1d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:74:d8:66:83:e4:26:4b:9c:7c:3d:2f:42:
4f:00:ff:7d:77:6c:bd:78:89:ef:8c:bc:e5:ba:fb:
11:74:9f:00:e5:b4:83:7f:f9:f6:36:bc:b7:4a:01:
94:f9:48:6a:c9:01:59:62:66:e8:e8:6b:e4:8e:8f:
67:11:c2:35:a6:ab:ec:18:ba:7b:8f:59:06:56:34:
b9:45:cd:b5:f9:75:bd:ae:cd:a9:93:57:d0:29:dc:
10:be:a1:4b:3e:73:30:99:7d:a0:ba:ec:89:55:2e:
33:0f:50:3a:ec:ea:ad:35:63:8c:75:58:7a:7b:9c:
a6:f0:31:be:e9:10:68:69:a4:10:0f:b2:7d:ff:73:
1a:3e:f2:9d:ca:00:d6:91:63:01:c5:64:c0:65:7a:
f3:3c:e3:87:89:e8:2a:50:60:58:3d:0a:dd:70:6f:
ab:ec:ea:86:33:72:ca:6f:42:7b:81:7c:96:d6:98:
fd:72:f9:86:31:53:86:8d:ab:18:70:63:69:55:1f:
de:f0:a9:dc:f3:3b:96:9c:fa:fe:92:86:11:e3:2b:
10:b9:52:d4:e0:24:95:76:2e:db:d8:1c:71:28:9d:
35:6e:00:d3:20:db:19:df:95:06:23:0e:55:7c:2a:
2d:39:f7:eb:6b:eb:7c:95:98:37:b4:3b:cf:f8:fb:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:2E:50:06:4F:33:CA:56:87:F4:42:5C:D1:37:A1:3E:F1:D4:A8
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:70:0d:bd:72:c5:bd:c6:77:22:3c:7d:07:07:96:45:9d:
8c:b8:f3:e7:06:92:72:e5:24:cb:f9:c4:dc:aa:78:8d:8e:24:
72:19:38:5f:a3:46:50:e1:3b:a2:dc:89:c6:3d:9e:ec:26:63:
da:1a:8b:a8:d6:93:bf:92:b8:24:9b:26:f6:64:94:c5:6d:80:
d0:04:ec:55:df:66:5d:ec:b3:5b:38:f2:ef:e5:59:03:ae:5a:
9c:f1:1c:a0:6d:ac:aa:18:c4:f9:23:90:8a:96:4b:43:86:9f:
8c:f3:19:ac:d4:c0:16:43:45:9e:67:ca:31:2d:e7:ad:bc:a2:
07:2b:ec:a6:4e:37:d7:fc:fb:0b:48:50:b6:d3:f6:3c:77:cb:
d7:48:cd:9c:aa:3a:2e:6b:36:2e:1c:7c:c7:db:ab:67:5b:28:
b3:b7:8d:b0:d3:e1:be:08:da:b9:1a:c8:24:47:c1:ab:2d:5f:
89:8e:a6:df:b8:ce:5a:2d:42:8c:0c:2a:a1:3e:f2:7b:f0:0b:
fe:93:62:b2:43:43:a1:4c:8f:77:c2:c0:4e:fb:1a:21:99:d6:
f8:88:1e:25:76:c1:09:21:51:d2:f9:43:bf:c8:99:33:a8:49:
6c:31:9c:8c:21:6d:1d:79:83:53:37:7a:bc:ad:37:72:79:48:
e3:0c:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:02 2024 by rpki-client on console-fra.rpki-client.org