Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: tNff0404oBrXuMVd/9kPB/7heIRnnrzbWBJZJSsNu5c=
Subject key identifier: D0:2C:DB:40:D6:C8:83:F7:2A:C2:05:0F:03:F9:D0:9E:48:58:BE:79
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019351D0C457052E1B9A7BE5C25FBFD27E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0D67
Signing time: Fri 22 Nov 2024 03:00:56 +0000
Manifest this update: Fri 22 Nov 2024 03:00:56 +0000
Manifest next update: Sat 23 Nov 2024 03:00:56 +0000
Files and hashes: 1: 2kzaGzMd7GZ0OtodJsm7VjQyk-A.roa (hash: tboPqK5N6JYERZoHs4srI0VgWvojgzA8OwlKwwV3Hkw=)
2: D2Xcg5HhL-0yof6WIyzY1SytPs8.roa (hash: AoXZPceZgUyneE+99qfiIlDfvkYtNZCRvBY+b8t8gbE=)
3: LCmUJzOC2WoRnB6EKWpuOIs0Ni0.roa (hash: pkq+ILjU79ezdTiDybRrTPB7CzOcR9l+7WVGSb6nHZ8=)
4: zVdth24X5nqjsfHBDas52yk14is.crl (hash: IRCgxsWW1IZB0MA5AgF0eD0FfHa52IOkWmLCCmzEi1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:c4:57:05:2e:1b:9a:7b:e5:c2:5f:bf:d2:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 22 03:00:56 2024 GMT
Not After : Nov 23 03:00:56 2024 GMT
Subject: CN=d02cdb40d6c883f72ac2050f03f9d09e4858be79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:ec:eb:a0:3b:e3:17:eb:c8:bd:bc:13:f9:
bc:fe:06:39:7f:d1:92:ae:f2:bf:b7:11:2f:c1:53:
94:36:d3:2f:91:47:97:4b:fb:ce:1f:51:03:cd:c1:
53:2e:06:7b:8e:57:0a:21:ae:ac:d1:17:d7:d4:cc:
82:35:ac:4e:8b:02:d6:36:d5:b0:be:e6:28:42:af:
ca:eb:cb:90:cc:6b:26:9e:c8:ac:30:2b:26:97:27:
34:bb:56:a9:de:0c:11:24:35:b3:8b:16:62:94:52:
a6:df:16:e8:55:2b:b9:20:c8:f8:15:ca:af:a7:73:
b7:bf:fa:1d:f4:a7:af:54:d1:76:e6:3a:83:4a:9c:
20:d5:56:82:e4:4e:63:1f:02:3e:9f:de:ba:c3:ad:
c5:7f:72:f2:14:84:fc:40:82:bb:bc:e5:a6:fb:50:
ac:93:a9:24:0f:63:71:dd:4f:1b:9a:94:d6:07:4c:
c2:fd:72:77:7c:3a:35:5e:3f:7c:ab:1d:42:ad:3c:
e9:37:4a:cb:be:8e:17:6d:b1:28:cd:55:b6:f1:a7:
0d:a5:1e:f8:b7:bd:c1:c3:54:89:67:d4:a6:fa:e8:
f0:a9:d0:e0:3f:7c:f1:14:0f:4e:58:52:cb:f9:c4:
b0:8f:69:a8:2d:8f:18:fd:bf:6c:c2:f0:8a:27:6f:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:DB:40:D6:C8:83:F7:2A:C2:05:0F:03:F9:D0:9E:48:58:BE:79
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:3c:18:04:8c:0d:90:a8:ec:4d:be:a5:e8:f1:72:3f:d0:
51:8d:22:5a:d8:b1:a2:18:95:c5:74:b5:91:ca:42:17:8e:08:
8c:50:d6:3b:12:56:cb:86:97:ad:52:bf:f9:e9:eb:be:11:a2:
9d:c4:87:79:c1:8d:a4:f7:7f:c9:02:5d:0f:75:35:f9:66:31:
15:1b:63:b8:3b:55:45:4d:18:9a:97:ce:a6:24:07:e6:59:33:
7f:88:5d:c9:08:5d:81:fe:81:ca:ea:30:b7:99:c9:81:cb:5f:
2f:8a:6a:12:11:fc:83:2c:5a:32:ae:2f:20:17:3f:04:aa:de:
0f:9e:0c:a1:9f:94:32:95:58:2e:e4:63:0f:22:32:40:ed:0b:
28:15:0a:3d:7b:fb:e4:58:f0:41:13:10:b4:6b:e1:b7:25:9f:
a9:2f:bf:1d:68:60:22:af:43:d7:ef:43:75:79:c7:07:f6:04:
0d:b5:8e:d2:8c:d9:eb:95:92:1f:60:ba:bb:11:0a:3f:bc:ba:
3b:c3:ab:94:6b:dd:12:db:01:ee:32:e9:ba:21:47:e7:9f:2a:
f4:98:41:2e:2f:4d:2e:a5:43:9e:2c:13:30:b4:e9:e8:c0:27:
4b:d8:b1:c9:bd:96:3d:d0:25:d8:32:c7:99:9f:16:c3:f5:78:
3c:9d:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:38 2024 by rpki-client on console-ams.rpki-client.org