Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: wkKO/UrdRfTnXgsg71U9anv1nwo4Ks8itRcmSN9XI3Y=
Subject key identifier: 33:FC:C2:44:C5:23:B5:D1:64:79:93:FF:A6:20:B6:2F:1F:35:BD:25
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0193549C42900696F5A7657B5B0B5E0C08E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 16:02:27 +0000
Manifest this update: Fri 22 Nov 2024 16:02:27 +0000
Manifest next update: Sat 23 Nov 2024 16:02:27 +0000
Files and hashes: 1: BnjE3yErF9E1GKw7SXpDcLA34Do.roa (hash: aXOa/fm24pvq+sD/VBJtfhqzdH/bBObPOTh4wf/wAsY=)
2: yRiP_dfJcVLSHj0Aag5jI84_z8Q.roa (hash: j69JzEj26gPj5DBBOVdlLrxY107R3S8NZKc71n5etKw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 0t5JCKnM/8QJ+uZMoIXyiCG1s1j2eR/HDszbMsQ6P3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:42:90:06:96:f5:a7:65:7b:5b:0b:5e:0c:08:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Nov 22 16:02:27 2024 GMT
Not After : Nov 23 16:02:27 2024 GMT
Subject: CN=33fcc244c523b5d1647993ffa620b62f1f35bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:a3:b2:17:29:94:80:8e:fb:81:b7:3f:83:
6c:f8:4e:20:44:60:92:6d:02:04:19:28:89:a7:f8:
59:6c:b8:13:a0:c0:cc:45:db:e5:fb:23:0a:c5:9a:
48:31:a6:f1:e2:ea:a4:58:e6:26:19:a9:f7:c3:3b:
f2:9c:10:34:e3:79:ff:52:70:41:22:79:08:b3:41:
8c:60:70:18:be:6f:6b:e9:ad:78:c3:f9:41:42:01:
66:fe:b6:0c:6f:1d:40:a9:d3:db:80:83:d5:57:e3:
75:ab:44:e1:d3:ae:7d:f9:ec:cf:c9:91:80:e1:b7:
f4:92:dc:e4:1d:f3:c5:d2:87:f4:a2:d6:39:dc:97:
c1:5d:27:5f:1e:3c:5a:85:3b:a8:56:eb:ee:69:e0:
1c:72:9c:6e:0d:f6:e4:c3:11:5f:aa:b5:21:97:34:
1c:97:60:44:37:6a:56:b6:3c:f8:95:e9:ca:5e:99:
e8:16:a9:74:2b:9f:db:78:d4:2f:bd:c1:17:27:0a:
0c:de:ac:8a:ee:23:60:c3:f8:d0:96:72:90:4e:0b:
c4:c4:93:71:95:35:d0:c7:64:4d:d4:ac:69:98:20:
1a:1b:65:09:03:b1:8b:3c:4a:3e:d4:a7:9f:15:37:
d1:37:91:2d:3b:3e:c3:d7:b1:df:ce:0b:42:a9:b2:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FC:C2:44:C5:23:B5:D1:64:79:93:FF:A6:20:B6:2F:1F:35:BD:25
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:bd:22:57:58:f9:b7:2c:df:67:34:44:06:44:5a:f8:ee:
8e:90:26:7b:ea:db:7b:20:b7:a8:60:96:92:59:04:8e:39:31:
62:3d:6a:43:12:e3:92:a7:80:a5:ad:6a:30:17:1d:24:5e:b6:
e2:f8:88:22:0d:d1:52:bb:a6:3f:a7:1d:55:9d:41:6f:a0:0c:
e4:f2:d5:e3:22:81:d2:8f:f2:57:35:11:5f:76:af:26:35:2a:
ee:fd:55:22:30:07:fb:a5:42:ed:94:8d:7e:6d:2c:16:db:bc:
71:e2:e8:aa:5b:79:e1:d6:bb:f7:63:af:73:92:a2:cc:98:a6:
b1:c0:b5:42:3a:e6:6c:60:69:f9:ed:a6:64:bd:3f:60:01:f3:
ed:18:4e:5e:5a:7b:1e:6e:1e:ca:41:6b:0d:82:d7:6e:63:7b:
3c:62:17:0a:92:0a:dd:f8:7d:fa:55:55:50:2c:10:db:60:fb:
2e:e3:f2:ae:f4:0b:09:de:05:ac:08:91:e7:ae:ea:26:fc:d3:
1f:76:f9:36:6b:06:68:98:17:a5:fb:04:d6:ec:34:86:e7:cc:
c1:55:2e:d0:26:87:28:60:40:0c:6b:eb:f7:e2:4b:0b:42:68:
e8:53:20:ff:a5:9f:36:5f:f6:e2:50:cc:32:33:9c:56:69:b0:
09:d0:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:28 2024 by rpki-client on console-ams.rpki-client.org