Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: XZzN4Zca73a236Im9wVGKUyrw5lB2sPvjE5neVClUw8=
Subject key identifier: 86:F0:C1:1D:A9:65:FA:75:E6:37:DC:2D:77:55:ED:67:80:1E:E0:B5
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 01936A7D8739D1B7C4BBEC8565F20B95919A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 22:00:31 +0000
Manifest this update: Tue 26 Nov 2024 22:00:31 +0000
Manifest next update: Wed 27 Nov 2024 22:00:31 +0000
Files and hashes: 1: q6cdxWG7Tkotc-JP0nTK1-BDV0o.roa (hash: HnOPTjWChsqOf/PIvWVGn4U6i+VZygKf+l3PjNOA7wA=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: h0U2fm3+EQWKcwBoddi5rSGfydqbb+k2nrfi1TbcKxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:87:39:d1:b7:c4:bb:ec:85:65:f2:0b:95:91:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Nov 26 22:00:31 2024 GMT
Not After : Nov 27 22:00:31 2024 GMT
Subject: CN=86f0c11da965fa75e637dc2d7755ed67801ee0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:10:98:5a:a3:2c:e7:4b:10:e7:a2:7b:41:
01:22:79:1d:8d:ac:ea:55:95:3a:74:ee:b8:0a:77:
32:07:95:4a:8f:9d:69:23:9b:93:2e:25:61:46:f7:
e3:ea:7a:38:62:07:51:da:8e:e4:9b:06:d1:af:64:
ec:95:ee:56:07:cf:8c:09:7f:4b:d1:77:18:0c:ea:
59:cf:09:6b:10:72:08:a1:27:a3:86:a2:42:e7:e6:
c0:cd:3c:6e:06:24:34:05:88:5a:bc:fd:ee:3c:89:
90:9b:1e:e2:15:35:05:cc:aa:d6:cd:5c:73:be:fa:
2c:2e:3d:f8:1f:82:a7:d4:96:9f:c4:39:f2:1e:3f:
b8:ea:e5:8b:aa:ca:bb:7f:bf:07:92:49:cc:35:25:
7b:d8:58:9e:83:cd:8e:08:22:89:21:d1:f4:63:70:
1e:62:f9:8e:23:27:99:09:86:1b:88:aa:fe:7d:17:
96:7a:7a:c7:06:c7:5e:02:4a:5e:b7:4e:a6:fc:97:
67:c9:94:ca:e5:a3:67:2d:b1:66:60:9d:34:3c:97:
dc:cd:f2:0b:d8:97:01:d0:31:43:36:74:28:17:52:
4b:dc:3c:c0:5c:e5:85:6c:94:a3:36:9e:40:a7:d8:
9a:f7:fd:79:1e:fa:ad:e7:68:fe:e7:e3:74:ae:22:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:C1:1D:A9:65:FA:75:E6:37:DC:2D:77:55:ED:67:80:1E:E0:B5
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:c0:39:59:8f:27:5f:9b:47:01:b9:96:9f:e3:ba:07:c0:
0f:ea:b0:ca:f3:75:4b:5a:14:4a:fd:5b:f4:a3:a8:04:95:58:
36:d1:75:3c:66:b5:ac:e3:0a:3e:7c:13:2d:b5:4b:91:a1:bf:
c2:04:55:02:59:92:17:43:5f:18:2a:72:b3:62:66:45:be:40:
a3:0c:02:f8:4c:41:3b:3b:fc:82:14:30:ce:ed:42:2b:34:9c:
eb:2c:57:be:ee:fe:15:a3:fa:97:2e:f8:70:06:41:1d:c5:44:
a0:80:8a:0a:7d:dc:5a:f8:ce:35:4e:22:f5:19:65:79:1e:b6:
5d:9e:c5:a7:17:bd:41:99:1a:64:28:63:00:7d:ed:b6:86:c5:
06:aa:38:b1:e2:8a:d4:0c:dd:52:b7:19:98:2d:45:09:b0:d7:
01:3c:04:0a:de:d3:56:cc:c2:6b:e7:c5:d3:5a:dd:d5:93:2e:
56:25:7c:5c:ba:7c:f8:fa:b3:0a:a3:d7:95:f0:8e:46:55:f7:
27:84:2e:70:1a:34:34:cf:20:00:33:d9:27:2b:9e:eb:9c:b2:
00:d5:06:af:cc:1d:61:0f:58:30:98:b1:11:5c:c1:d9:d5:fc:
67:47:26:69:54:cd:e9:fe:cc:6b:62:33:7f:69:e2:a9:72:50:
d6:c4:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:59 2024 by rpki-client on console-fra.rpki-client.org