Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: KYH8PQlUs0zUeA3bPOElib+KVweWIgsnqEAE04ovspk=
Subject key identifier: C0:62:44:F0:89:A7:07:EA:E2:68:74:59:7F:30:C4:46:BD:04:A2:A7
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019358790272F02525EB0423A3282336BBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 10:02:25 +0000
Manifest this update: Sat 23 Nov 2024 10:02:25 +0000
Manifest next update: Sun 24 Nov 2024 10:02:25 +0000
Files and hashes: 1: G_xknW3R6j_BAMsYnC0TJpAxwbE.roa (hash: m6mIvsd0lX/mklK4k4hJHXPAeQyAsXunRHs9gj7a5aU=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: Bl3LCbvZVUMjULsHkZ/gyOePqlwwFVB1V1Pue7W3Z9o=)
3: v1iO82Ndv5XslXxmLlk1JCmNJgU.roa (hash: 3TnNtQdYZh1Pmwdlws3+Zw8hbwtZGtY6ogZCeIxz8Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:02:72:f0:25:25:eb:04:23:a3:28:23:36:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Nov 23 10:02:25 2024 GMT
Not After : Nov 24 10:02:25 2024 GMT
Subject: CN=c06244f089a707eae26874597f30c446bd04a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:31:e4:d8:86:af:20:58:2a:8f:0d:53:ec:
60:c9:3a:2d:81:91:43:79:2c:50:17:70:3b:12:d1:
1a:41:3f:64:85:12:53:92:94:83:0e:7e:14:80:48:
ee:f5:4f:9f:c5:a8:d8:01:e5:ca:8f:13:0a:b9:20:
d2:a2:0a:80:90:97:d1:0c:be:9e:ab:dc:57:54:84:
e1:20:d4:4f:d6:69:1d:eb:ee:75:42:f5:f7:29:5e:
20:bf:39:7c:6a:21:a5:db:64:31:68:d8:eb:f7:ee:
db:3e:42:db:77:16:6b:33:91:42:77:60:08:39:a9:
b3:40:b6:14:89:6a:62:94:ae:16:b7:cb:2e:ce:ad:
d9:e5:45:08:1a:54:a7:45:0e:26:5e:f4:76:b1:b2:
80:c3:61:12:17:b2:96:a4:38:68:bc:55:64:33:fe:
b3:c6:c9:74:10:5d:6d:22:df:14:65:b7:61:2f:48:
d8:20:b7:3a:a8:fb:19:14:66:24:d5:80:fb:f2:22:
30:3e:f5:e6:32:2f:f8:13:06:2b:be:65:40:a3:af:
07:1c:a6:43:b5:9b:e0:fd:b2:2e:5f:8b:d3:d9:b8:
ae:94:c1:c9:6d:a2:3a:a5:7e:e7:cf:d1:dc:08:7a:
00:33:8c:60:9f:00:33:6b:ac:5a:76:da:e6:43:9b:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:44:F0:89:A7:07:EA:E2:68:74:59:7F:30:C4:46:BD:04:A2:A7
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e3:fe:e3:8a:9f:fb:99:97:e2:9d:5d:b2:70:c1:aa:10:ff:
12:83:d0:9d:f1:95:26:c4:66:ae:28:56:40:b3:f1:49:2b:90:
4b:1e:b0:bd:34:2f:fa:06:ae:c8:1a:64:2f:bd:a8:e8:a2:f5:
50:0b:dd:b0:d5:93:f2:ed:9b:ab:85:9a:a9:fc:e2:ed:6f:a9:
09:19:ae:20:3b:48:8a:e4:28:98:88:53:ee:65:fb:91:e6:46:
71:ce:1d:56:65:5e:38:c4:72:b6:65:39:39:8a:12:59:a5:03:
93:1c:2b:80:d7:9a:1e:b3:66:8b:10:16:0e:2d:05:4c:50:43:
91:a8:bd:c1:bd:09:cb:50:bc:bd:6d:24:e3:d5:69:f6:6a:6d:
ad:30:40:81:57:57:0e:06:34:85:f3:96:07:16:fc:59:16:92:
1b:50:1f:e1:55:e7:22:f5:17:03:74:ed:3d:e8:b5:a0:43:08:
ba:d8:65:6f:da:d2:fd:ae:52:29:a0:bb:b7:6c:40:40:89:2a:
1b:71:33:3b:1c:48:af:82:ca:a8:4c:1a:ee:b4:fb:4e:f2:1d:
e0:39:d6:c9:ed:be:ec:86:60:f9:79:fb:0b:8e:9b:ed:36:e3:
29:ca:e2:20:32:3b:c9:33:ec:14:a4:d4:a0:34:e9:25:6f:ed:
04:44:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:47 2024 by rpki-client on console-ams.rpki-client.org