Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: MZW1NNr9jkoCbbPV2S0U63MVqRKmKmv/wNUq9j7pzT8=
Subject key identifier: 60:21:2D:CD:C8:CD:A1:60:F8:06:14:1B:A6:1D:DC:76:85:83:09:B4
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 018F874A75BABB2D224B4B010C97844BF6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 067F
Signing time: Fri 17 May 2024 16:02:34 +0000
Manifest this update: Fri 17 May 2024 16:02:34 +0000
Manifest next update: Sat 18 May 2024 16:02:34 +0000
Files and hashes: 1: V8CbhGB8P8kaIm8JL9UFUju_61c.roa (hash: Ifr6rnnvwMHS/YuLLiffP4XCD6ckhzutV7TwWHyIkDo=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: oPnreML5TnSMUyINSHEQL7xVsZXNEoKMy3JiciYe3PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:75:ba:bb:2d:22:4b:4b:01:0c:97:84:4b:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: May 17 16:02:34 2024 GMT
Not After : May 18 16:02:34 2024 GMT
Subject: CN=60212dcdc8cda160f806141ba61ddc76858309b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:6f:1a:48:4c:d0:e9:4d:1f:f5:e1:ce:ac:
89:02:04:34:91:72:ee:1c:bb:00:3c:8d:62:e4:70:
b9:9b:5c:0e:ef:7c:08:cd:0a:f1:90:13:1a:66:51:
b5:e7:69:ea:51:43:2f:c8:01:31:5d:62:7f:5e:a1:
63:6b:5f:4c:26:1f:92:ec:71:ff:61:5f:36:84:fb:
f6:96:65:1b:af:c7:04:a3:bf:c2:d7:38:2b:a7:69:
1f:7e:bd:ce:f3:12:2d:4b:8c:65:e4:8b:75:61:56:
ca:ab:04:b3:44:2d:75:84:0a:bc:34:a8:2e:c7:69:
84:fe:84:78:54:d4:66:64:46:19:29:f8:81:c7:7c:
8c:71:27:57:17:79:29:fa:27:78:a4:17:39:2b:f3:
8b:c8:7d:0c:50:3c:21:59:4c:38:63:5b:72:74:64:
e7:44:f5:05:38:d4:ba:d6:6f:64:e4:22:77:52:78:
e8:3b:bf:c2:2e:b8:cc:df:53:3b:7e:ac:d4:d5:65:
86:65:71:b8:0c:20:69:0c:9c:cf:79:92:95:b7:3c:
18:1d:c8:ae:6b:16:ed:4a:ff:9d:8a:1c:50:42:d6:
ff:a8:50:f0:e3:a2:95:ce:dd:16:e3:c9:eb:4a:90:
ea:cd:52:6f:04:10:a2:89:17:00:5d:fd:5e:56:1d:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:2D:CD:C8:CD:A1:60:F8:06:14:1B:A6:1D:DC:76:85:83:09:B4
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:62:95:32:7c:04:eb:3f:f0:24:7f:08:a1:86:11:8d:3f:2c:
2d:73:02:46:c1:be:0e:a9:c2:03:08:a4:e4:0d:23:25:4f:82:
4f:4a:e8:b5:7a:fe:b0:4f:48:f3:fb:6e:54:c5:10:77:83:25:
33:44:87:26:ae:ab:62:71:ed:66:8d:7c:75:00:79:4d:6e:f9:
9e:2d:90:e2:97:be:c3:c2:0d:c9:8f:c5:fb:71:18:db:f0:07:
02:8d:64:54:a5:0f:62:ae:67:a2:0f:8d:20:8a:0d:07:75:24:
82:dd:63:ac:9b:5e:82:ac:fa:f1:57:fb:37:1b:ce:66:03:63:
31:b3:1b:9a:da:f8:02:ba:71:8d:db:0f:b9:a0:23:6f:82:db:
55:ad:59:31:80:34:64:23:a2:5b:a2:86:81:38:73:a0:2b:b3:
9c:49:f5:ca:88:15:bf:5d:c4:d6:14:b3:e2:b2:15:fe:3d:cd:
a1:35:d7:aa:14:52:58:d6:da:ba:f2:cd:e4:99:8d:0d:75:57:
ae:66:e8:12:ed:51:30:01:e7:dd:9d:a6:ae:78:b9:18:6c:9e:
02:73:d7:ee:a8:28:2c:14:ae:a3:57:de:ed:17:e5:5d:b6:c6:
81:97:19:6a:16:01:a2:45:25:28:47:1b:45:25:2e:2e:6e:80:
12:d0:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:37 2024 by rpki-client on console-fra.rpki-client.org