Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: v68T8zQFeJhDVlTc01yvXeCYVH/Up6Xm3W1BZoFnVI4=
Subject key identifier: 69:9F:CC:41:5D:46:9E:B3:B3:E1:18:CA:38:18:D8:D3:BF:54:77:5C
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 018F885B563F3ABE8F599EFBF7182C768EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 21:00:38 +0000
Manifest this update: Fri 17 May 2024 21:00:38 +0000
Manifest next update: Sat 18 May 2024 21:00:38 +0000
Files and hashes: 1: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: YZG2oPxjMAM8QJDu0NpXoAhU0plOBN8nr9ORvj2bFcU=)
2: bz7IqW8XbkOOLmLpoji8jFd0EJg.roa (hash: l2Z5Lj4TmC/VP4jQIk+NvM9Wpg+vARzFdFZrKKlKFb0=)
3: q2ze9-U1kECz8iyq2AbbubhVvWg.roa (hash: CBGlZ8kdsRN0rWw12tEB6PaZibAzpwmxHUW36m3wHlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:56:3f:3a:be:8f:59:9e:fb:f7:18:2c:76:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: May 17 21:00:38 2024 GMT
Not After : May 18 21:00:38 2024 GMT
Subject: CN=699fcc415d469eb3b3e118ca3818d8d3bf54775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:86:1d:a1:d7:57:90:1b:02:76:a0:e2:df:
86:0c:78:91:58:52:b6:f3:0b:70:44:d7:67:d0:38:
7f:8a:7b:bb:38:f0:71:7e:79:a5:5d:dd:5c:d4:18:
a7:36:0f:ce:76:20:0d:f2:f4:a6:d9:5d:86:c0:41:
5f:f3:91:ba:18:59:e3:06:08:10:f9:82:7c:f7:35:
9b:07:7d:90:9a:c3:11:a1:7c:2d:71:b8:08:5a:4f:
d0:e5:a1:f4:82:1f:f2:dc:04:9e:18:80:d5:05:bc:
cd:bd:48:d4:53:0f:d0:9d:54:d7:32:b4:27:17:fa:
77:52:b9:88:97:36:59:c4:b3:45:60:6c:2a:1b:a0:
0d:02:7e:14:7f:ba:b5:dd:a8:89:0c:cf:36:6f:87:
f5:82:a4:3c:57:9f:10:28:3f:59:38:13:cb:00:8e:
3c:bf:8e:7d:d8:64:68:9c:f6:4d:9b:0d:5c:ef:c9:
09:85:52:8a:73:ff:c9:31:a7:b4:2b:a3:e7:8d:15:
89:da:e4:42:80:43:27:bd:db:31:20:af:b0:5c:9a:
20:56:a2:bd:02:7e:a9:7c:bb:42:d4:3d:f3:f9:87:
7d:6d:1d:71:4a:e0:66:6f:24:10:e0:01:00:f5:07:
be:a2:22:b7:14:32:84:a6:32:82:df:92:f4:8b:87:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9F:CC:41:5D:46:9E:B3:B3:E1:18:CA:38:18:D8:D3:BF:54:77:5C
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:73:09:ba:52:06:83:7c:ff:77:b5:f7:2b:52:57:ad:8b:41:
52:8f:06:c8:8e:d6:c4:2d:6b:a2:91:cc:bc:f4:a3:15:21:15:
db:f2:8a:71:f0:1b:64:ba:81:90:f8:a2:32:63:2e:47:14:24:
e5:4f:9e:a4:6f:73:fd:a9:d5:87:0a:89:0f:d8:a7:82:45:c1:
30:15:6e:6b:69:11:b3:03:44:b9:fb:45:db:f1:81:99:1e:3b:
17:bf:3d:85:96:90:d2:d1:a5:b3:68:f6:7a:93:ac:87:db:73:
94:eb:62:46:98:39:1b:86:4f:51:de:06:6c:08:7c:7d:f7:fe:
e0:a5:02:9d:1d:65:80:12:76:c7:be:ac:f2:b1:ca:88:90:00:
4d:61:41:6a:db:92:57:33:b6:7f:cf:1c:55:60:c5:03:7d:39:
0e:7e:c8:a2:a0:cb:12:d0:d5:8a:f8:55:74:5c:97:de:5c:6e:
25:fb:12:4c:b6:55:13:0a:e8:9f:4b:7b:cc:23:81:1c:7c:80:
18:1d:0b:15:48:6b:e4:61:8a:37:0a:f7:9c:e0:28:26:a9:2c:
b5:97:92:11:b5:9b:79:28:d4:58:b1:6b:d7:7a:f0:f5:1f:b2:
8d:9c:d3:63:2b:de:52:8b:49:84:b0:1d:48:ef:21:c8:83:cd:
59:18:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:52 2024 by rpki-client on console-ams.rpki-client.org