Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: DE1IBkcxJ3K0Yb9qQq+KAUfzY6vtdn2iqXljIHqAO6s=
Subject key identifier: BB:F2:4D:DA:22:88:F2:2D:1B:AF:8E:38:3D:C7:EB:F7:68:B5:16:C1
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 018F97CE1A640FAFE58F729803DA5420FE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1180
Signing time: Mon 20 May 2024 21:00:17 +0000
Manifest this update: Mon 20 May 2024 21:00:17 +0000
Manifest next update: Tue 21 May 2024 21:00:17 +0000
Files and hashes: 1: 2gIu41L4PuKzr_x4newfIIIII6k.roa (hash: ITatL4+owyrE44woTOUuhsXkdwUfmnmwwMecOqsogS0=)
2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: yHkLW/vOHKISoJXF/XTUFd7t8hJx+a8QA6mLhEsOnmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:ce:1a:64:0f:af:e5:8f:72:98:03:da:54:20:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: May 20 21:00:17 2024 GMT
Not After : May 21 21:00:17 2024 GMT
Subject: CN=bbf24dda2288f22d1baf8e383dc7ebf768b516c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:91:a8:e7:18:86:76:c5:0a:ee:46:55:de:
6c:1e:f5:7f:03:03:0f:ca:88:d7:fa:f4:3d:64:ea:
e1:74:c2:93:cc:83:7b:92:29:0f:b0:e4:25:91:8c:
14:23:08:1f:cf:aa:6a:d9:24:5e:7d:db:34:57:f0:
26:70:f3:52:8f:53:51:11:90:ed:83:17:14:b5:b9:
4b:30:f7:37:a1:6a:da:3d:1c:23:78:c1:96:91:88:
eb:70:f1:cc:e6:52:61:4b:d7:62:69:33:95:2e:91:
31:48:55:e3:91:ae:6f:88:23:d3:49:1d:e9:de:ea:
6b:94:b7:3e:e9:0e:03:ff:f8:cf:3a:26:0d:7a:ed:
46:50:8c:70:2a:3c:c1:71:2d:bd:eb:b9:16:ea:45:
b5:a0:e8:a1:d5:af:a1:61:09:07:e6:e4:01:f5:b5:
3c:76:aa:65:42:ad:83:1b:9d:bb:18:e7:12:79:31:
eb:fe:08:bc:95:84:90:bf:96:79:e9:3f:f1:ef:17:
8d:8b:5c:3a:29:1c:0e:03:fa:82:54:9f:22:5c:0f:
cd:6b:d9:84:66:31:0e:d8:a8:75:36:a7:46:41:47:
f3:a5:cc:7d:b6:70:d8:f7:b4:59:3b:4d:63:bd:e3:
89:5e:5c:5e:11:c3:25:26:c8:30:99:f9:3c:6c:48:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:4D:DA:22:88:F2:2D:1B:AF:8E:38:3D:C7:EB:F7:68:B5:16:C1
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7a:d1:d8:9f:b0:5d:7f:bd:da:3e:e8:9d:0d:38:9e:f6:06:
53:ec:28:b0:d5:b4:ea:f3:c0:c6:ed:83:25:29:0b:48:61:6f:
7f:e1:f5:43:9c:8f:1c:ba:4b:ab:d2:2b:64:6b:4b:da:66:d5:
87:c5:e1:aa:e9:a8:34:a2:e6:30:51:01:c5:4e:a2:c3:03:a4:
55:27:11:11:7b:cc:53:f0:c5:cc:d0:0c:a5:b1:1b:c4:c9:a9:
b7:6e:0f:56:21:ed:a0:d1:20:08:f3:bc:33:8a:78:db:44:1c:
83:b2:87:9e:8e:e4:b4:24:e5:63:35:b8:db:8b:18:d9:b1:93:
f4:00:1d:85:29:51:e2:09:a6:8e:15:3a:fe:ad:1f:2a:05:ee:
40:5e:44:45:e0:4e:a0:73:1c:29:d0:a9:24:b1:49:c1:59:85:
84:5e:52:94:f0:a0:40:89:5c:da:ac:e9:23:7a:39:80:88:44:
cd:86:63:36:8f:38:65:73:e8:85:84:8b:ce:f4:b0:f7:d7:5d:
c3:34:50:ef:73:ab:b4:25:03:0e:af:24:f5:69:2d:94:a7:11:
7c:35:09:bf:4b:7a:cd:9f:1b:43:c2:a6:a7:3f:94:06:1d:20:
70:88:18:e7:44:dc:8e:46:7c:9a:5e:e2:85:9e:f6:41:a8:b1:
16:18:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:33:29 2024 by rpki-client on console-ams.rpki-client.org