Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: ZCp4FjqW4m2hz9mW/N2CB6IssdeIb9oWQpNlJgvBY8Y=
Subject key identifier: 4F:C8:17:35:02:C8:38:0E:3C:BF:48:ED:D0:B6:8E:7E:B2:1B:DC:B0
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0193549AD1585BCBC7F0E6A4D39C43F6735A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:00:52 +0000
Manifest this update: Fri 22 Nov 2024 16:00:52 +0000
Manifest next update: Sat 23 Nov 2024 16:00:52 +0000
Files and hashes: 1: 2uFq4GGEFUONlKyvH9HPeuWNuoo.roa (hash: uiYKUxPXzils+KzPF9mRMujCa+ALPlJjRUBUP8H3q04=)
2: Sq_B9QhNK6jIxfdaIvTgCwl1zYQ.roa (hash: 8TBSGSitasFyNmM41N+hKCCIVz1Z0jhXWx7pBD41Vyg=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: m4HJcqCtd8wkKm93c3cFJNKL9ZpCIIft0qdWnRkF+Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:d1:58:5b:cb:c7:f0:e6:a4:d3:9c:43:f6:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Nov 22 16:00:52 2024 GMT
Not After : Nov 23 16:00:52 2024 GMT
Subject: CN=4fc8173502c8380e3cbf48edd0b68e7eb21bdcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:c3:14:b7:7f:3d:15:10:8f:67:d1:9c:ce:
41:e7:36:1e:c6:60:0b:6e:43:ae:12:7a:1b:2d:07:
f4:8f:7e:9c:88:47:a6:f2:f1:d8:7b:40:78:53:ff:
2e:78:3f:d7:a7:27:58:a1:e8:f9:58:12:3d:35:66:
a4:ca:c0:f8:ae:5e:57:07:3e:73:86:3a:5e:c4:31:
dd:82:30:c8:ce:16:a0:b1:c8:82:65:97:03:36:eb:
99:d2:d5:10:93:71:57:10:ce:ef:84:14:41:00:a3:
8f:6d:18:c9:1c:ac:ea:6a:e4:76:ea:68:22:6e:a8:
e3:67:3e:88:28:e1:ba:15:c0:91:c0:9c:e4:b1:5c:
35:fd:fc:f2:ce:45:08:b8:9e:4d:b8:7f:5c:55:42:
a2:97:7f:31:99:17:63:9e:d0:77:a3:63:78:50:68:
5f:f2:ab:79:5a:57:4e:91:02:91:1a:23:d3:87:4c:
84:bc:1b:56:b2:51:04:ab:c0:f6:01:7c:3a:aa:cb:
ba:8f:8c:18:59:7a:15:1b:43:2c:a6:45:ad:45:6f:
b9:02:2a:3e:40:90:0b:2b:66:2b:38:06:28:33:3b:
5b:1f:d2:63:3f:37:15:c3:0a:f3:2b:53:0e:d8:79:
3e:18:0f:5f:ce:d1:94:ce:81:1a:1d:a6:4c:f4:55:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:17:35:02:C8:38:0E:3C:BF:48:ED:D0:B6:8E:7E:B2:1B:DC:B0
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d1:ef:aa:ad:52:08:29:09:6f:a4:43:7e:b9:7e:62:f1:b7:
be:5f:34:c4:b2:a4:19:5e:a3:c5:cb:24:53:9a:48:85:62:2d:
09:22:83:47:ad:aa:03:e9:e8:20:a6:7a:72:41:97:14:be:01:
95:d2:74:ba:1b:75:a8:98:48:8c:a1:48:28:25:04:85:9d:72:
75:8a:78:be:eb:2a:fc:b9:fc:49:84:a6:72:96:bd:3f:25:9c:
01:30:33:f6:2c:c8:41:e3:ed:eb:e8:85:d6:0d:cc:dc:d6:11:
1f:2d:93:01:7a:7e:38:a8:fc:8b:88:0e:22:76:4e:91:b8:41:
d7:7d:da:4d:24:03:23:29:e0:81:26:d6:4c:23:5a:03:3e:91:
22:7a:21:26:3a:37:fe:12:e7:2e:49:bd:79:9c:fd:b2:79:ca:
96:04:a5:bb:4c:0b:a7:be:50:dd:ac:c0:24:6e:6b:6c:91:79:
e6:79:27:f3:b7:6e:77:70:7c:14:de:a1:ac:cd:14:3c:56:84:
72:10:ad:3b:a3:db:61:76:29:ae:ba:2b:ad:0c:c5:f8:47:de:
2a:9b:5a:9c:42:f0:48:98:91:40:26:e9:cf:b5:b4:2e:50:29:
0c:e1:c3:50:78:65:6e:e9:65:80:51:0d:21:00:bf:53:be:ee:
fb:8d:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:30 2024 by rpki-client on console-fra.rpki-client.org