Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: Xgdwk7R06nrxlZ2qc82mcW+oKj/0yHEy6kh8tzueIsA=
Subject key identifier: 68:34:43:EF:07:A0:0E:D9:06:5A:04:5F:45:52:8A:B7:EA:9C:24:B9
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019366D7DADFD6197DA1C1FA01520626B3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 10CA
Signing time: Tue 26 Nov 2024 05:00:42 +0000
Manifest this update: Tue 26 Nov 2024 05:00:42 +0000
Manifest next update: Wed 27 Nov 2024 05:00:42 +0000
Files and hashes: 1: Cf6NocSP1adBOMwk7-DwGWmImEw.roa (hash: yJbffVhxo+oaIu8F0k057R/EoU2Mxo2rxWe3F33WCnc=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: hVrdsMygTt1kol9c7hDsfY9v9Makraar4qu11CVwXrM=)
3: cLN64B17xEwOONz97nPOdAPgcmw.roa (hash: 8k1WlEzrMEXKfUTS4dasNlbSuvl+9ksmw9qUMcYHqtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:d7:da:df:d6:19:7d:a1:c1:fa:01:52:06:26:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Nov 26 05:00:42 2024 GMT
Not After : Nov 27 05:00:42 2024 GMT
Subject: CN=683443ef07a00ed9065a045f45528ab7ea9c24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:3f:4f:1d:79:2a:8c:e6:bd:05:18:93:5d:
5e:64:21:59:24:33:7c:70:ff:39:74:3c:73:71:35:
95:05:83:99:b9:01:6b:29:49:90:0e:c3:d2:60:7d:
b8:b8:1b:d2:2b:6a:be:c2:16:c5:0b:19:dd:3b:9f:
5a:c0:6e:1b:81:2f:c3:0c:19:a4:0f:d5:6a:f0:58:
ec:d5:4f:14:84:9f:37:06:95:7e:d3:b8:a9:10:8f:
25:ff:f7:c1:12:f5:e1:59:0a:a8:b4:c6:7c:13:53:
0b:3a:f4:ea:41:03:16:c4:c9:5f:b3:9c:30:c8:ba:
2e:1e:be:9a:aa:4c:72:d8:53:dd:da:0a:11:b5:aa:
da:65:cd:ca:3a:fe:54:10:d3:aa:b4:59:47:0b:77:
26:80:d6:30:30:3e:31:59:5d:87:4a:dd:7f:91:03:
86:0a:7c:86:fa:d2:10:f3:7b:d6:e7:88:8a:ce:b3:
f7:6b:2d:03:63:20:6b:3f:b7:17:a0:af:0a:ee:6a:
8e:a0:f5:d9:4c:3a:8f:37:64:d5:b0:2e:10:01:1e:
66:7a:e9:61:d0:d2:ec:f5:43:09:17:b7:8d:80:1f:
83:b6:31:4b:72:99:92:26:d7:03:ba:0b:1c:1d:a8:
29:b1:39:20:c4:43:88:b4:ca:cc:07:1e:50:42:2b:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:43:EF:07:A0:0E:D9:06:5A:04:5F:45:52:8A:B7:EA:9C:24:B9
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:48:44:0f:0a:f2:74:4c:19:8b:00:58:bb:f7:73:58:33:
44:2a:73:bc:72:ae:65:a9:2f:d4:88:00:76:bb:cf:8c:fd:8f:
42:42:3e:9f:9c:ba:10:3f:1b:28:77:93:82:99:c5:23:13:70:
8e:84:48:a8:ff:8a:61:8a:ec:dd:d8:d2:ea:8c:04:c0:d7:4a:
63:bf:15:96:24:74:eb:1b:b8:8c:04:bd:f8:2a:8c:21:13:b5:
e3:91:43:d0:25:09:2f:f2:9c:9a:2b:65:99:98:32:96:09:a0:
b4:9a:46:45:a4:b5:49:46:71:1e:ce:2f:61:00:5c:0b:e0:1f:
1b:1a:7c:05:87:83:a2:80:9a:58:c6:83:db:8a:72:ba:55:b0:
5a:76:4b:66:eb:6e:86:32:7b:47:4e:65:80:b0:37:23:bb:20:
0e:ed:8d:b5:10:61:00:68:17:30:68:33:1e:39:ad:b9:1b:1c:
ac:95:61:4b:74:0d:31:14:6f:8e:be:18:e4:e7:fc:0a:37:0a:
ee:47:e7:ed:1f:65:5d:a3:1b:92:ca:91:5c:49:3e:53:9a:4f:
d4:dc:3f:09:34:ba:9d:96:a2:fd:2f:2c:f9:56:a2:e8:a6:3e:
0f:07:01:da:2d:3f:af:d7:83:1d:8a:63:cf:24:22:15:d4:92:
42:20:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:38:30 2024 by rpki-client on console-fra.rpki-client.org