Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: 7BZRRCnapmPosCkq6ohCGFmYkAFZaORVOAEIbn4dpz4=
Subject key identifier: 15:04:5C:BB:0A:62:73:95:DE:18:A1:D8:9B:EB:C3:FD:40:B9:44:33
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019356F68EA6D40A40A9ADEBDF11FDAED6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1378
Signing time: Sat 23 Nov 2024 03:00:19 +0000
Manifest this update: Sat 23 Nov 2024 03:00:19 +0000
Manifest next update: Sun 24 Nov 2024 03:00:19 +0000
Files and hashes: 1: s8Ak-d9oQvPE-L5srU4N-mifygk.roa (hash: KpiEmuGEu84m9OssqxjrgNqoPQN6bPJ/MILuHuA7r4A=)
2: yVvrh4pl0ynBVhIt0glMCY2KdHg.roa (hash: VeLMooeXnO5mYAvemTl5kXdHhLrNGLU1kCfWjox592U=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: M3KCrbL+/e2TrdIup/a+h+/UMyTSw7qtcBttQ01Wyj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:8e:a6:d4:0a:40:a9:ad:eb:df:11:fd:ae:d6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Nov 23 03:00:19 2024 GMT
Not After : Nov 24 03:00:19 2024 GMT
Subject: CN=15045cbb0a627395de18a1d89bebc3fd40b94433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:0d:7b:fe:cc:ba:5b:32:08:2b:74:bb:7a:
51:ea:01:1c:f7:bd:f4:a4:bb:c9:b9:c4:d2:d3:6e:
4d:2b:58:e8:af:50:e7:a5:54:a5:dc:4f:e2:e0:3f:
b3:02:f6:d7:6a:fd:3a:26:04:14:03:d1:45:d0:de:
6d:19:81:00:7f:54:c3:a4:5a:df:a9:74:86:e8:0f:
35:99:52:2b:eb:bd:21:00:33:ed:cb:d5:0f:89:6c:
8d:16:8f:55:6e:69:e3:11:26:b6:f1:17:22:1f:0f:
a7:87:30:6f:7f:f3:f7:93:fd:33:2d:7e:97:a9:f6:
95:fa:72:79:14:2a:58:a2:b1:f7:eb:25:bf:ef:32:
b9:01:7b:bf:9e:0e:91:1d:54:9b:6d:33:bf:7b:5b:
e8:b9:3c:e5:f8:d4:5a:5c:92:9f:48:d2:74:1d:ba:
14:c9:c1:31:11:9b:c9:3d:84:3d:56:16:8f:cf:3d:
c0:c0:fc:ca:b8:3d:22:84:67:95:3e:05:f9:bc:6c:
ff:31:6c:3e:1a:81:76:66:20:3f:98:62:5f:45:6b:
a1:f4:67:8d:36:d0:c3:e6:bd:95:77:fe:7d:2c:59:
7d:2b:76:af:99:00:30:85:19:31:05:e2:cd:01:ed:
1d:54:da:ef:af:79:0b:9b:26:cb:4f:d3:06:ee:d7:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:5C:BB:0A:62:73:95:DE:18:A1:D8:9B:EB:C3:FD:40:B9:44:33
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:fb:cf:62:4a:40:7b:8e:90:01:bc:a7:47:bd:40:a1:87:
58:05:b9:b4:56:43:43:09:c5:f3:7f:83:fc:8e:2e:a9:37:11:
48:4a:09:3b:8e:a6:56:e7:d9:54:32:e4:d3:4e:92:43:bf:ce:
13:ac:d1:f1:b0:93:14:66:9e:b0:9b:6b:e9:15:da:1f:bf:a7:
c0:2f:1e:b0:79:0c:80:09:4d:18:a8:51:e0:45:b6:59:36:0a:
aa:1a:d1:f6:e9:d6:62:4a:e9:cf:95:b9:4e:da:ec:fe:f4:86:
ab:be:ba:5f:18:20:91:51:2a:36:24:aa:ad:c0:04:48:c7:03:
ce:87:d8:c2:67:c3:f5:d7:de:42:66:cc:e6:e1:c4:2a:80:38:
96:12:f4:89:a0:f8:b3:22:22:ee:db:de:31:a2:15:80:4b:d6:
c6:be:d4:06:6c:6e:c0:24:e8:74:80:d3:19:a1:ce:c1:44:14:
ce:9c:00:15:d1:b4:72:6d:41:3f:da:c6:1c:cb:7d:73:07:14:
d2:f5:fe:29:e4:3f:66:23:d7:45:10:22:19:d5:72:ee:42:94:
3d:b9:bb:3f:81:73:fa:3c:9c:9c:c8:d5:1c:ac:95:6e:9a:30:
4b:a8:7c:da:c8:d4:b6:36:d6:52:c7:ca:61:df:7b:f1:f9:c4:
1b:00:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:51 2024 by rpki-client on console-fra.rpki-client.org