Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: 9hzP23x6ahneYrOB4vs4zbGjWCHjcWrESwoU4+SR03Y=
Subject key identifier: AC:8F:42:46:E0:4F:B4:52:87:B7:E3:B2:1F:EC:0A:DC:EF:36:7C:FE
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019357D2290B467080F4EE290CD98B2F9C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0269
Signing time: Sat 23 Nov 2024 07:00:10 +0000
Manifest this update: Sat 23 Nov 2024 07:00:10 +0000
Manifest next update: Sun 24 Nov 2024 07:00:10 +0000
Files and hashes: 1: 5Bt661qfR5rb9KKZqk97lUGYZAw.roa (hash: Gwecprg6ZviqbhmQ/rX9NFsll8ganQl3FvKt2m/ueWY=)
2: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: cNtKbs3ypBcjRcYTS7XIAEbpL2mLDqKFCSDaU3Qsidk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:29:0b:46:70:80:f4:ee:29:0c:d9:8b:2f:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Nov 23 07:00:10 2024 GMT
Not After : Nov 24 07:00:10 2024 GMT
Subject: CN=ac8f4246e04fb45287b7e3b21fec0adcef367cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:81:bf:c3:db:82:50:73:f8:29:9c:7f:10:
44:47:4f:4e:48:d1:40:e8:19:2c:b3:12:92:8a:66:
aa:3d:14:7b:d0:51:29:d6:38:4e:62:54:cd:88:3b:
fa:58:36:92:25:e6:e0:d9:9e:f6:be:f1:f5:02:c0:
79:10:b6:a9:40:c3:66:04:2e:29:cd:9a:92:81:c6:
58:d8:d6:7a:cf:5c:67:60:55:5a:de:b4:08:f2:90:
e4:d6:fd:9e:32:76:86:8e:00:29:94:0b:c3:73:a5:
d5:6c:d4:0f:5d:e8:05:1c:3b:d3:13:3a:7c:8a:98:
00:56:f5:e3:d2:bf:d5:71:49:27:41:b1:fb:a1:82:
1c:02:7b:60:42:f8:47:33:ce:88:ba:7b:5f:5e:33:
f2:c6:ac:79:9b:06:74:90:b8:18:cc:58:ad:5c:02:
d6:15:44:5d:58:2d:92:c5:34:6c:26:fd:6a:09:8b:
df:d9:2f:2a:3a:68:9d:e3:ef:4b:6d:ff:3f:40:6e:
61:0e:fd:80:bc:8f:ce:19:fc:8e:e7:72:78:3f:4d:
ab:18:32:18:a0:8f:3c:ea:6b:4a:46:0c:99:b8:9e:
8d:d5:9f:7c:ca:b1:a8:f3:01:9e:24:64:ea:10:e6:
42:91:38:9f:c1:b1:d7:7c:59:f1:b1:8b:0c:a5:63:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:42:46:E0:4F:B4:52:87:B7:E3:B2:1F:EC:0A:DC:EF:36:7C:FE
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:86:e5:9e:26:06:cf:07:22:e7:ab:11:37:2c:90:81:a7:43:
1a:a9:39:97:71:ff:7b:67:24:fe:1a:e1:4c:67:70:2f:ff:96:
63:67:5c:8b:99:d5:7c:ce:28:a2:bf:b2:13:49:48:c2:93:f2:
a4:65:27:6a:71:40:fa:04:f1:f2:d5:af:d8:af:98:2b:90:99:
18:cf:15:5a:65:12:ac:90:5a:70:88:cb:a3:3a:17:1e:bd:01:
9c:1d:c0:04:97:bf:af:b0:9f:a6:53:44:3a:36:64:eb:39:2a:
88:a6:b5:35:41:96:f6:4b:6e:f2:cb:ae:eb:dd:61:27:49:01:
45:01:e9:8d:9a:5c:83:a3:45:95:9b:40:32:96:df:b8:87:a3:
1f:bd:ed:1d:5f:f8:c0:3c:f0:15:06:cc:98:26:3e:f9:36:18:
b4:cd:5e:ab:ec:8e:6c:7b:bc:6c:43:0c:48:5c:25:97:cc:90:
6f:bd:a3:2d:e0:a3:fa:c8:b6:2b:52:bd:20:b2:95:d3:94:6a:
dc:9b:6b:67:78:d7:28:84:b4:db:33:8b:8d:95:29:6b:93:da:
ea:0c:0f:ad:21:89:0b:1a:a4:f1:79:f2:ae:2c:37:5e:f3:33:
77:ad:25:fc:3b:a5:07:35:d8:d5:86:af:05:23:14:e6:33:cb:
a3:08:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:07 2024 by rpki-client on console-ams.rpki-client.org