Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: NsYRClRAqt18e998wwU3vjUOPTZ+QvpJYucQutoPvnk=
Subject key identifier: 1F:CD:C3:E3:02:89:EC:2D:25:A0:F8:4C:9C:39:EC:3D:FA:73:B1:CE
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 0193598A216A86E7DC19CF5589D7111D8BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 02E0
Signing time: Sat 23 Nov 2024 15:00:44 +0000
Manifest this update: Sat 23 Nov 2024 15:00:44 +0000
Manifest next update: Sun 24 Nov 2024 15:00:44 +0000
Files and hashes: 1: Jt0yanr8E4cimx6zNGoOmLYuf38.roa (hash: xWE3BzXN5XjQIqPj8JhSCNO20fEKBJIXSGqD9J95GX4=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: sl5oMo7i9IxElYk0hQq4Z5m63MzKXlxMYNEqpUabRDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:8a:21:6a:86:e7:dc:19:cf:55:89:d7:11:1d:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Nov 23 15:00:44 2024 GMT
Not After : Nov 24 15:00:44 2024 GMT
Subject: CN=1fcdc3e30289ec2d25a0f84c9c39ec3dfa73b1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:ac:09:a8:2c:e1:8c:ab:b2:c4:cb:b9:9f:
ea:2a:61:62:ce:dc:ea:22:8a:38:83:82:8d:96:b6:
fc:ea:b4:6b:a4:ea:88:ea:f9:f3:01:41:4e:d8:4c:
80:2e:c5:7e:3e:3f:12:25:52:f2:bf:dc:55:cb:0f:
41:2a:8d:c5:34:dd:e3:1d:da:9a:2e:83:80:fc:43:
0c:59:9c:85:2d:ed:cd:4e:cb:3d:48:07:3b:4c:11:
d1:9e:a0:a6:2a:e8:b1:d8:29:0e:3a:cf:23:06:ab:
a3:1c:10:83:10:7a:d5:96:ca:5d:fc:94:04:81:c7:
64:b4:1b:d0:b8:ad:1c:9d:3c:40:36:c2:18:76:bf:
19:a9:0a:57:4b:a9:bc:c3:f0:14:9c:24:de:44:7e:
4a:3c:fe:1f:ee:a9:6d:47:e8:74:3f:41:b5:0e:27:
cf:08:ef:72:45:e4:a1:9b:59:67:e3:e1:75:52:d8:
e0:7b:62:50:0a:f4:db:c8:bc:66:03:ee:b4:1e:ec:
51:ba:20:b1:5c:1b:87:09:cc:14:2b:80:ac:e3:72:
31:3c:20:35:68:a2:c8:d5:b2:63:13:6f:6a:52:19:
0d:eb:03:55:cc:a7:b9:a5:5d:90:21:e0:08:ad:22:
16:4a:2f:c8:0f:a9:7c:3b:8a:cb:16:5e:d8:d4:f9:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:C3:E3:02:89:EC:2D:25:A0:F8:4C:9C:39:EC:3D:FA:73:B1:CE
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:bd:51:00:8c:26:82:b7:28:43:02:9b:04:a1:15:d3:90:
da:46:e1:52:84:56:e5:6b:e9:b0:26:f7:5a:5c:de:71:ec:20:
8d:04:64:08:1f:1f:43:38:2a:99:5b:f0:30:2c:45:0f:93:a7:
24:85:70:b5:4a:55:5e:86:5e:3d:6c:79:1b:0b:03:ef:a5:11:
e3:e4:17:4f:f2:f2:c3:b0:f3:02:b8:e5:5e:06:8c:a9:24:12:
75:0c:6c:75:ef:00:d5:f1:a2:a4:e1:ca:c6:9f:4a:83:51:aa:
c7:5c:98:32:7a:b9:3b:f0:a1:9f:73:af:90:b2:31:9b:8d:b5:
60:ac:a4:c8:9a:c0:f9:01:a5:10:4b:73:72:8a:69:4b:b3:37:
87:3e:af:6c:5b:93:aa:41:e9:1e:57:3f:27:19:6e:44:29:46:
82:a3:e5:74:a1:a9:82:49:be:4c:96:c2:6c:6d:ae:a7:6b:79:
e9:35:3f:6c:fe:90:e9:80:73:0f:30:1d:7a:34:49:d4:b9:4e:
7c:34:28:be:a9:95:62:0a:00:12:f6:6c:c3:4b:5c:dc:17:b3:
77:c3:e5:ca:db:3c:7f:25:a2:8b:2a:bb:69:d0:61:38:d3:81:
03:94:54:5b:30:4c:f0:0a:6c:67:ca:13:89:40:69:d1:04:7e:
d1:98:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:28 2024 by rpki-client on console-fra.rpki-client.org