Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: NMJOAueJ6Hv5PohmpDlNtDVt+ib90BwEwkPwRR3ichM=
Subject key identifier: 67:9C:6E:04:1F:4B:11:BE:DF:B8:E8:EF:6E:78:45:29:A7:D8:03:4D
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 01937681960C0B959384ACE8EFE8F2B9B082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1381
Signing time: Fri 29 Nov 2024 06:00:23 +0000
Manifest this update: Fri 29 Nov 2024 06:00:23 +0000
Manifest next update: Sat 30 Nov 2024 06:00:23 +0000
Files and hashes: 1: 2gIu41L4PuKzr_x4newfIIIII6k.roa (hash: ITatL4+owyrE44woTOUuhsXkdwUfmnmwwMecOqsogS0=)
2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: 541mwTZ/8P3lssTz0vs9UrN2Y2OiB/Dgyr/0rlQLtXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 Nov 2024 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:81:96:0c:0b:95:93:84:ac:e8:ef:e8:f2:b9:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Nov 29 06:00:23 2024 GMT
Not After : Nov 30 06:00:23 2024 GMT
Subject: CN=679c6e041f4b11bedfb8e8ef6e784529a7d8034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:56:75:ec:d0:8d:2e:80:14:c3:e5:5e:b4:
63:dc:ca:a6:b6:f1:3e:f8:a3:c9:84:10:71:c3:bc:
03:ee:39:01:07:ab:b3:dd:bd:12:95:da:da:36:55:
16:87:32:6c:ef:c4:c2:e6:d7:1c:a0:92:67:b1:d2:
a1:a7:a0:91:62:06:00:f1:2a:fa:d0:2b:ed:5e:77:
34:58:4f:80:3f:03:45:9b:d5:de:6e:5f:74:d6:0b:
48:d6:55:00:93:32:be:36:28:01:a8:64:38:34:4d:
cc:74:62:3e:80:d5:62:8a:ff:32:ff:b7:34:f6:4e:
40:9f:1a:76:7c:8a:b6:1f:86:01:ed:d3:1e:94:06:
3f:b1:1d:4e:89:16:c3:8a:44:78:11:a1:a8:a2:ab:
7f:72:40:31:4a:66:cf:15:84:b6:71:f0:af:81:88:
f7:63:15:59:0f:ff:49:a3:0c:59:73:36:8c:83:56:
5d:ee:cb:3b:9d:74:99:e1:57:33:84:54:10:7c:72:
cc:80:16:f5:fd:72:03:02:6d:39:dd:8d:bf:6a:06:
15:23:0c:12:6a:ae:0e:b9:cf:e9:2e:c5:7c:cf:24:
84:98:4b:f8:32:ed:5a:53:70:a3:eb:a1:d9:27:52:
98:42:8e:3b:1c:03:a7:3b:cb:0b:d6:5b:2d:dc:ac:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9C:6E:04:1F:4B:11:BE:DF:B8:E8:EF:6E:78:45:29:A7:D8:03:4D
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:35:99:fb:50:91:ad:9b:1a:9c:40:11:62:1a:8e:d9:ab:35:
00:be:00:c9:a2:a2:7e:ad:b1:54:91:7b:ce:dd:3b:f0:f0:5e:
cd:eb:21:27:85:f7:38:44:66:34:ba:fa:07:c0:c1:e3:76:17:
9d:7f:bb:e0:25:69:05:f7:59:53:71:3f:64:31:8e:f6:ac:cb:
9c:c3:db:42:f9:c0:b2:c8:8d:d4:43:a9:c1:09:37:65:e7:b2:
0b:a4:1b:94:d6:0c:b0:28:ba:c4:46:cb:07:45:64:fe:56:1d:
4a:73:2f:e8:53:5a:21:de:76:58:83:94:97:b4:87:54:e6:20:
cc:bd:2e:b6:f3:57:d8:6e:51:8c:52:2b:67:d9:ac:e2:68:e6:
9c:b2:8b:1d:94:dc:ef:ba:d1:cd:63:6f:3a:6d:67:7e:19:60:
1b:c5:e0:99:ea:c4:2a:bf:ef:db:ff:70:a8:64:5a:24:c7:2f:
96:92:0b:3f:be:05:f2:e5:71:42:e3:92:19:bb:c0:a1:d1:01:
0f:df:ee:40:d1:1e:7e:44:d6:bc:3e:cf:69:dd:0a:86:70:c3:
77:e4:bc:2b:2e:df:be:d9:fb:7b:2d:91:80:2d:f6:76:80:bf:
a7:1c:21:9e:12:d7:43:e8:f7:dd:8a:a4:15:5e:14:b0:ec:e2:
21:b8:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:54:56 2024 by rpki-client on console-ams.rpki-client.org