Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: DZau8Wq2ZPDfQPkvPoVbzW5wVaRTtz0N6O7fNFdyLwU=
Subject key identifier: BF:19:17:7D:87:19:BD:3C:5C:A1:57:79:73:16:F1:96:5B:6D:59:56
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01935689B1D38DCC61D9A989AEA972E6ACB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1303
Signing time: Sat 23 Nov 2024 01:01:24 +0000
Manifest this update: Sat 23 Nov 2024 01:01:24 +0000
Manifest next update: Sun 24 Nov 2024 01:01:24 +0000
Files and hashes: 1: _FAcvg_sKZhxTtm21UCsjqmo8jk.roa (hash: bysFRYzX3wKRfAq+CIqTE+9zxAjKo5pF4PPrHVc4Pys=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: yhQMRjzCTysv9iRQGIDq50Al8PFWhzLBpFO8VAzzIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:b1:d3:8d:cc:61:d9:a9:89:ae:a9:72:e6:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Nov 23 01:01:24 2024 GMT
Not After : Nov 24 01:01:24 2024 GMT
Subject: CN=bf19177d8719bd3c5ca157797316f1965b6d5956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:27:2e:7c:e4:f5:2d:2b:2e:6f:ae:94:7f:
0d:f9:14:d8:89:48:2d:db:01:53:58:17:55:ac:ab:
fc:ec:52:92:68:04:8f:13:a2:15:b2:6b:43:ab:81:
ea:24:57:81:3c:9f:64:79:8c:d3:8e:05:50:d0:b0:
97:cd:69:52:fa:8e:eb:70:92:82:4f:b1:7e:a1:e8:
23:06:92:96:59:91:56:ca:62:e1:eb:41:f3:a5:9c:
71:ae:c8:8c:b6:6f:72:ac:06:13:d4:9f:06:7d:39:
2b:0c:5c:3c:a7:a7:2c:99:12:f5:78:0b:d9:37:4e:
c4:61:30:a8:c1:27:20:d5:dc:80:6b:83:84:ba:8c:
2f:8c:a4:9e:89:18:12:e0:2c:7f:8b:f4:a6:6f:88:
f6:4f:15:27:f8:70:e0:db:f8:51:c8:b4:ec:12:e7:
fe:88:5f:a9:f8:f3:29:c5:95:39:17:1b:57:c4:97:
5d:c1:90:28:52:53:52:0b:64:bd:99:98:3c:f4:d9:
be:74:5b:56:10:cb:c9:73:a0:00:33:43:8a:0e:c6:
94:99:c2:ce:38:7e:d7:a9:9d:de:74:80:e8:ff:b1:
10:9b:03:94:f7:6b:28:72:1f:2c:bf:f2:ea:f8:a5:
74:64:c2:3e:b3:5c:f3:1b:55:d4:7a:26:0b:af:57:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:17:7D:87:19:BD:3C:5C:A1:57:79:73:16:F1:96:5B:6D:59:56
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:aa:8d:98:b3:4a:18:72:5d:85:20:78:09:d5:67:35:a2:7c:
78:0b:51:0d:d6:ec:95:59:b0:9a:7d:72:52:f8:e3:4a:a2:3a:
a5:ff:3d:03:3e:ce:ec:f4:cf:88:f0:c9:87:65:cc:d0:fd:48:
f7:11:bc:01:1c:ad:14:92:6a:95:a8:f9:20:ce:ac:3c:fb:6c:
5c:ab:a4:05:c3:36:82:06:63:e9:76:78:3c:25:59:c3:e3:a1:
d6:f6:81:6c:90:2f:cd:89:83:42:b3:8b:3b:7d:4a:40:d0:1f:
58:51:8c:7b:b8:19:da:c9:b4:c1:3c:95:85:a4:31:db:79:b5:
45:ee:17:32:52:ef:cd:3c:34:7d:96:32:7b:27:c3:7b:9a:c1:
2f:66:a6:02:09:3d:ad:26:c1:c5:d7:a3:44:7a:96:e0:72:55:
41:a4:26:6e:40:f3:c6:18:3b:e9:41:1a:7f:2d:4c:79:74:3d:
79:13:66:be:b8:b6:11:e4:92:1e:b2:aa:b5:6a:0e:30:57:fd:
b6:e6:f4:a9:06:85:83:57:76:c4:04:ac:48:02:5b:56:93:f9:
69:4c:78:00:7e:ab:a4:aa:da:e2:1e:48:ea:91:b8:f0:bf:e1:
9a:f8:18:2c:6d:a9:9c:9f:27:4c:93:73:ca:29:9c:5e:04:46:
f7:86:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:00 2024 by rpki-client on console-fra.rpki-client.org