Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: tu/q1tJCvomI9uqzU/n1Cl8iJHTaMVTW03YCdRL55ic=
Subject key identifier: CD:77:7E:FF:25:7A:35:36:A0:2A:FC:B3:A4:C5:15:41:42:78:6B:13
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 01936A7DB31828CA85FA1EED88821F8D753E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0BDA
Signing time: Tue 26 Nov 2024 22:00:42 +0000
Manifest this update: Tue 26 Nov 2024 22:00:42 +0000
Manifest next update: Wed 27 Nov 2024 22:00:42 +0000
Files and hashes: 1: X_nS6aX0gybOBxxzSnTI5vEkz58.roa (hash: jRFkWiERcfNCmSMFyqqTorP2NWXlXklsMIAw3T/kPpU=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: zXe+hzFB1pmHr89ox2lMj5nI2XxkdApDEfwApZwOSFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b3:18:28:ca:85:fa:1e:ed:88:82:1f:8d:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Nov 26 22:00:42 2024 GMT
Not After : Nov 27 22:00:42 2024 GMT
Subject: CN=cd777eff257a3536a02afcb3a4c5154142786b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:62:e9:71:98:46:ca:de:11:da:03:1f:19:
a7:e1:13:ab:1e:aa:3b:95:1d:c7:64:fb:00:f1:62:
1d:ff:c1:24:02:1e:d5:63:c2:f9:a8:ec:66:c8:85:
1d:45:55:11:5c:72:9f:71:4a:dc:f1:22:01:56:ae:
41:da:30:0e:c1:5c:81:63:88:dd:47:eb:b4:dd:58:
fc:e4:0d:e3:5e:d8:30:d2:e9:1c:2d:47:12:8e:20:
78:32:47:4d:be:23:e5:15:37:7a:2e:9a:c5:b1:db:
16:37:f4:f2:b3:ea:a1:ad:54:4f:6b:0d:64:24:a6:
54:d0:54:b8:97:34:7b:fb:17:e9:da:1c:79:35:40:
4e:19:cf:3c:96:1d:cf:eb:f2:7f:df:6d:7f:08:54:
e4:1e:20:22:06:f0:33:49:e7:86:97:bc:df:53:ed:
8a:2c:d1:28:b3:17:59:a4:c7:fe:87:8b:25:56:52:
cb:35:1b:c9:fa:06:5c:d4:83:86:53:0f:9d:c9:5a:
e4:93:99:54:a1:56:6f:9c:62:1a:c8:8e:ac:04:4d:
8d:0d:c7:70:c2:84:2c:97:a0:cf:6b:a9:d3:fd:df:
22:2e:65:12:c8:a5:ca:3e:44:34:1f:57:3a:3a:5f:
b8:49:0b:e6:db:e3:75:f8:61:c1:be:56:b8:cd:ac:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:7E:FF:25:7A:35:36:A0:2A:FC:B3:A4:C5:15:41:42:78:6B:13
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0d:26:1a:1d:4a:fc:ca:4f:6e:6b:3d:98:2e:43:14:4a:bb:
32:4a:14:ec:d3:9e:28:f6:5c:e8:9e:05:aa:d9:05:f0:5a:42:
1a:1a:79:f9:45:b4:c1:a7:37:d1:61:b1:10:20:15:ea:c9:5d:
03:82:da:59:8b:5d:20:7c:52:a0:97:58:40:43:f4:26:51:2b:
e0:07:fe:cf:59:4b:7d:e6:e2:c0:e4:c5:74:8d:17:0f:52:79:
b4:b2:d3:38:1e:28:c6:de:52:c8:00:ee:03:6e:f3:7f:30:99:
76:d6:71:42:36:a4:d5:eb:15:53:80:17:e7:e8:68:b3:1f:04:
bd:e9:e6:a0:5c:1e:0b:29:ce:01:19:1c:c7:a6:5d:5b:0a:c3:
84:7b:39:e6:8d:88:48:8f:ee:9b:11:29:9c:96:d2:d5:e9:b3:
3d:1d:2b:fe:20:b0:cd:2b:fc:62:09:e4:fb:f2:12:0c:19:98:
5d:9e:9b:56:2b:65:b6:9e:49:82:a9:8c:e2:67:7b:12:30:5b:
26:64:4d:91:05:23:16:e3:58:71:55:df:68:66:a9:5a:c1:1a:
13:e6:9f:7a:67:87:8a:37:d1:42:bf:3b:c0:22:4b:29:f5:8a:
b2:23:34:34:db:4f:38:19:70:02:ca:03:36:40:8b:ab:aa:8f:
c5:c0:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:33 2024 by rpki-client on console-fra.rpki-client.org