Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: ev5Fpl4w4izaGbvAnU5BhHotJZdlou4ipk3algerq3Q=
Subject key identifier: 36:5B:94:ED:42:F9:8B:53:1A:01:E6:4B:20:11:4C:AC:E9:2B:8C:45
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019352ACE6746F9357E99CE0316F941A65AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 07:01:22 +0000
Manifest this update: Fri 22 Nov 2024 07:01:22 +0000
Manifest next update: Sat 23 Nov 2024 07:01:22 +0000
Files and hashes: 1: 4xGOwWx0ty-6OpbCrwaCMJ0l7p0.roa (hash: r7fM/2WiOk18QKrNgxHi/HCD2jBA+8nn8GrHn+Xi8rU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: +gJ/ktL4Y0FzkTiv6ok9Jfs27CpcT6/NNry9rJ6iyb8=)
3: mQ2Vz9unnpP_F3g8h_9xilBQvjA.roa (hash: v3DnxdiQETIdhSt1+VKw1LrsY1zyc5NKfhfYw69iEy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:e6:74:6f:93:57:e9:9c:e0:31:6f:94:1a:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Nov 22 07:01:22 2024 GMT
Not After : Nov 23 07:01:22 2024 GMT
Subject: CN=365b94ed42f98b531a01e64b20114cace92b8c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:c2:c3:86:e4:1b:2c:98:e7:36:39:2e:a7:
39:c0:58:89:23:4e:90:7c:19:3e:6c:72:56:94:f4:
f6:9b:41:52:9c:4b:41:df:c0:f6:12:8f:90:ee:b2:
0e:d3:08:87:c2:47:76:ba:4d:fa:5f:11:d1:10:d2:
6c:b8:56:5c:35:ad:65:c0:09:53:11:d6:93:ea:3b:
fc:7f:64:e9:cc:ac:7a:e8:25:19:07:a1:85:6e:3c:
f7:86:4a:8c:7f:98:a5:dc:2a:5d:90:89:68:98:8f:
24:3b:c2:31:e7:77:7d:ce:98:cb:cd:34:c1:52:e3:
20:18:7b:77:11:07:45:2e:b4:85:8b:8e:eb:14:83:
fc:3c:57:6e:19:cc:00:99:98:17:37:18:7f:19:d5:
bb:ec:99:c7:25:a9:38:81:cb:28:c1:38:75:7e:92:
3f:91:d0:6b:5c:ec:c2:40:f6:68:3c:ab:88:8b:4e:
6d:98:de:8e:87:93:6c:e7:1d:07:c7:50:1d:b1:f8:
d2:76:48:5d:b7:a3:5a:c0:79:bf:e2:8d:74:1d:98:
84:7d:1d:da:09:25:09:41:8b:ed:94:f9:c1:51:9d:
1a:51:07:15:30:08:7a:dd:20:34:47:9e:a9:94:f8:
47:fa:c5:ab:2f:31:90:b6:d3:e6:88:0d:38:d4:fe:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:94:ED:42:F9:8B:53:1A:01:E6:4B:20:11:4C:AC:E9:2B:8C:45
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:49:c6:55:ba:d8:07:90:4d:5b:da:bb:94:1d:1e:dc:01:53:
41:6f:f0:3a:46:d3:22:db:9f:7a:50:d8:5c:46:20:51:6c:68:
9e:74:82:8d:ee:eb:1b:0f:f9:ec:a8:94:a5:66:b7:76:3e:43:
d3:8e:71:57:4a:41:3b:ba:4c:23:52:34:e2:5d:b3:93:f2:87:
0b:fd:5c:96:80:b4:b8:3f:be:05:af:bb:3d:33:74:ef:d6:2a:
6f:ae:92:2c:6d:2c:5a:55:3b:0c:81:78:b9:19:8e:42:27:53:
0a:c4:75:70:63:5c:1d:db:bf:5c:d4:81:cc:fd:85:ce:51:55:
22:23:16:1a:2e:b9:b9:76:8c:6f:fe:30:02:c6:1d:5c:a3:4c:
eb:4a:d2:a7:f5:77:96:b9:0c:9f:71:85:24:01:06:c1:39:cc:
4f:8c:ed:0d:7b:04:52:a3:ff:ae:dd:b9:c2:1f:cc:c6:17:e3:
3c:36:3e:0a:58:da:00:ca:56:a3:ef:53:d7:0f:e4:12:3c:96:
95:f4:c4:33:dd:49:8f:7d:62:29:db:35:4b:46:93:e6:fc:1e:
52:af:42:5f:e5:cc:f1:aa:7e:46:7b:06:21:2f:5e:41:df:92:
34:97:e5:13:f5:b4:11:c6:56:78:48:c8:8c:83:d2:3b:6b:d0:
51:09:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:12:05 2024 by rpki-client on console-ams.rpki-client.org