Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: Jp6QykwAu7m2XwNeemx1/VHj5ZsAL/LidHJIF7auDyY=
Subject key identifier: E1:A9:5A:25:06:5B:DE:BC:8D:2D:88:12:1A:69:11:53:0F:16:ED:24
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019357D28997CBAECDC8BB345CAF9B0BFF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0AE7
Signing time: Sat 23 Nov 2024 07:00:35 +0000
Manifest this update: Sat 23 Nov 2024 07:00:35 +0000
Manifest next update: Sun 24 Nov 2024 07:00:35 +0000
Files and hashes: 1: 8KDHwPdd_vF90WfPnieJoDRCKKs.roa (hash: a9gvbMUS1PDpJXOm6nNzkYx1awF/WFBZQgNM2xi6A5Q=)
2: SxXMTPCedevqS6EtIPu5Mx0jQJQ.roa (hash: aAOD23G++pP68+W+FHD/4ZmMDZrHkdoRNJ0/IL4yG60=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: mUsi3lRc7WEGPJ5oq/zf3+UTuMm49smQQcmPsq2ucNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:89:97:cb:ae:cd:c8:bb:34:5c:af:9b:0b:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Nov 23 07:00:35 2024 GMT
Not After : Nov 24 07:00:35 2024 GMT
Subject: CN=e1a95a25065bdebc8d2d88121a6911530f16ed24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:bc:57:55:c1:f9:7c:49:a7:d5:cf:ab:96:
d2:9f:37:be:5a:ae:8e:32:e8:8a:f6:81:5b:65:cc:
02:d6:63:f8:dc:5f:e2:3f:1c:02:77:b4:35:86:8b:
f2:48:58:3f:24:ed:d1:85:27:08:08:a1:94:4e:3e:
98:07:31:46:b4:ba:e3:3d:3e:db:c5:25:eb:69:33:
fe:d5:a7:70:0d:f8:23:bc:d9:0e:cd:77:5d:59:ed:
d9:0f:3f:0f:55:57:31:be:6b:d5:7d:85:83:06:8b:
03:26:b7:e8:3c:7e:e5:18:1a:dc:de:0a:54:5c:88:
64:3d:eb:eb:f3:3a:8f:a7:af:67:0b:50:13:65:87:
5f:3e:36:b3:13:ec:68:e7:6f:d0:ce:aa:76:7e:92:
83:43:75:b8:f7:d0:a2:3d:14:37:33:50:cf:40:b6:
6c:2f:6f:68:3d:41:4b:aa:38:da:f5:22:67:0c:46:
a7:68:d9:0c:15:b7:5b:97:ba:b2:85:e8:c4:bf:73:
c9:ac:02:50:48:86:66:7a:0d:4d:39:8e:f0:74:61:
6b:2e:34:e2:3f:a2:f2:08:85:cb:68:b9:b8:74:fb:
5f:8f:b9:6a:cb:af:10:b4:eb:7f:7a:f7:1a:fc:f9:
7d:ed:9b:f1:96:07:22:c8:a0:5f:32:7d:e6:20:db:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:5A:25:06:5B:DE:BC:8D:2D:88:12:1A:69:11:53:0F:16:ED:24
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:ec:6e:be:4e:64:28:60:bd:ae:a3:f8:e3:57:36:f8:5d:
05:27:e8:b0:17:65:2f:55:f8:82:c2:49:fb:4c:ba:f8:95:5c:
3f:08:f5:e2:b7:d7:ef:3b:c8:08:b2:f2:07:be:ef:96:8e:6b:
33:bf:a3:a5:8b:16:97:92:81:95:1f:d4:3f:8c:1e:ac:60:1f:
a0:e7:c5:39:45:fa:82:0f:54:74:96:96:2d:c8:8e:d8:dc:5d:
68:49:7f:2b:c8:05:25:19:2d:39:1c:d1:8e:43:30:9b:c2:e8:
b0:ab:ef:ce:62:ad:72:3b:3e:b3:c1:6f:86:de:70:73:eb:77:
b2:d3:c2:a1:21:ce:0a:15:0f:c0:df:21:02:f4:20:aa:65:b5:
50:85:f7:87:6a:98:de:4a:91:59:17:ce:58:9a:e3:64:78:ea:
5e:f4:f4:c3:1f:32:e2:bc:4e:69:b8:80:7e:ba:a2:c6:e8:c8:
08:27:43:d1:9b:90:35:d3:4e:92:ad:74:d7:c5:77:9b:7c:77:
78:57:79:8c:79:91:05:54:a9:63:55:da:90:a7:9a:91:47:c5:
01:14:9b:23:93:79:ce:22:56:95:ae:94:2c:aa:2b:40:3a:f8:
b6:d4:f5:bb:3e:14:c2:e5:cb:3e:0d:27:e8:cb:3e:6f:f7:84:
0d:58:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:41 2024 by rpki-client on console-fra.rpki-client.org