Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: Az77TvpvFqAxySbAteR2qXzsOHQshMw8rRdEYr+Ss48=
Subject key identifier: B3:02:FD:10:AC:3C:00:E0:DB:BA:CA:FA:6E:72:E3:F0:97:6C:16:72
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 018F9B741EB06E4C0901A8266187E7E53130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 07AE
Signing time: Tue 21 May 2024 14:00:29 +0000
Manifest this update: Tue 21 May 2024 14:00:29 +0000
Manifest next update: Wed 22 May 2024 14:00:29 +0000
Files and hashes: 1: WlxasG-BTt9LkAJWxrdjqnEmCSA.roa (hash: n1W7pHw1uoyFDkY7v7R8QIoARwDtkYlpdDWBd8Id0g4=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: 0JCvYfBTMxQpfEOThZypYiQJ8YP6qEwOEsByGf5Kw5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:74:1e:b0:6e:4c:09:01:a8:26:61:87:e7:e5:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: May 21 14:00:29 2024 GMT
Not After : May 22 14:00:29 2024 GMT
Subject: CN=b302fd10ac3c00e0dbbacafa6e72e3f0976c1672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:31:52:63:7a:2a:1b:0f:5b:7f:d1:86:78:
02:c2:15:e3:81:0f:ec:b6:08:52:df:4b:4c:b6:0c:
aa:d5:8d:74:06:3c:20:ae:88:a0:61:e0:69:f2:5d:
42:5b:1d:15:8d:6e:0c:7d:9f:00:9f:77:58:58:d2:
2d:f4:58:01:2c:4d:b6:3f:d3:be:33:20:e3:71:9b:
29:35:d5:d7:6b:d0:82:18:bc:b3:52:e3:60:67:e3:
c7:8e:9d:41:e0:0c:95:79:ee:fb:38:93:ab:9c:79:
ce:22:2a:b3:3f:ad:dd:bf:ab:2d:7e:dc:27:57:76:
d2:86:7b:4f:e7:ed:53:c9:2c:2b:5b:b1:90:27:54:
de:5b:4a:61:81:b1:92:05:3d:05:e6:1d:23:61:7a:
28:6c:bf:18:ef:56:a0:8b:cd:e2:0e:85:b7:92:a4:
9a:70:1e:af:63:4a:2a:01:5b:4c:76:8e:64:64:f8:
06:d8:54:bf:36:b7:d3:f8:8b:be:cf:9d:3f:68:78:
d0:d5:65:d6:50:99:06:4d:ff:7b:e8:cd:89:4b:2b:
e9:4c:a1:f7:2b:f2:97:52:6b:bf:2b:2e:ff:57:e1:
1c:8a:36:cf:b5:ab:7e:95:9e:54:40:2a:7e:df:8a:
95:7a:bb:49:06:b0:80:ca:2d:4e:fc:2b:cc:2e:e4:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:FD:10:AC:3C:00:E0:DB:BA:CA:FA:6E:72:E3:F0:97:6C:16:72
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:50:ec:4b:12:c5:25:dc:fb:ef:8f:73:c4:53:a7:e0:9a:
24:a7:4a:63:ce:de:17:b3:94:7d:be:6d:88:6f:77:c2:d7:fa:
01:a2:a9:bd:a1:44:7c:35:df:05:e6:0d:91:3a:cd:6d:96:b6:
1d:44:07:a6:4d:8f:a0:b8:5a:30:8b:ee:95:5d:0b:47:5b:6c:
93:76:8f:08:07:f5:da:fb:6c:d1:4d:05:c9:09:42:89:9d:d1:
34:ba:da:9e:48:54:5c:6c:bf:92:50:a6:c2:b9:1e:7c:cb:ac:
f9:5b:26:a7:69:a6:08:1c:5f:c3:5b:88:e7:bd:1d:79:0d:7d:
be:92:e2:b5:de:28:f8:bc:32:b1:b1:7f:16:ca:96:e1:30:4b:
29:ac:e5:b1:bf:ff:db:4a:0c:3c:a5:e7:1d:54:0d:bd:3e:06:
99:34:21:eb:17:b4:fb:f7:f2:62:40:80:23:38:de:4a:42:37:
95:55:29:cf:d3:17:ae:d8:91:25:b7:30:3b:c3:b9:de:6b:3b:
a0:e3:79:00:98:fe:60:05:ec:f8:55:ac:4b:a5:df:c5:aa:38:
6d:6b:94:ff:94:72:bc:4e:67:64:f4:7e:81:fe:56:1c:bd:82:
17:e0:6d:85:af:e7:4e:8e:d5:c7:d4:e5:7a:0f:67:6c:ef:00:
14:78:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:21:43 2024 by rpki-client on console-fra.rpki-client.org