Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: h0oUpOMNxDl6uX3O3s7PsSpgP9S0LNqeJ9ga9/TaOBg=
Subject key identifier: 4B:CF:0E:DB:EF:70:76:8B:6E:D5:FB:BA:89:F9:A0:04:1B:B6:AE:E7
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019369D8983D485B9B1A5FFCD6FD0D523EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0A21
Signing time: Tue 26 Nov 2024 19:00:22 +0000
Manifest this update: Tue 26 Nov 2024 19:00:22 +0000
Manifest next update: Wed 27 Nov 2024 19:00:22 +0000
Files and hashes: 1: SQOYR34IBudpNZ4vdrSrHMa9pZg.roa (hash: DkplGObnaYSor3suchNjXQjbQxT7XvPL/RlhqPz/XAQ=)
2: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: 5NRbGOxDWwi2hZnbqgGEZG+FG2we+83xZFdOLtbjLlc=)
3: sXknkzIXVnbTJJfjdDlkmz06HZk.roa (hash: L2SCeQRx7XSk+uHfnPIUnHoaqq37fdd8tKrwDzFuvjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:98:3d:48:5b:9b:1a:5f:fc:d6:fd:0d:52:3e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Nov 26 19:00:22 2024 GMT
Not After : Nov 27 19:00:22 2024 GMT
Subject: CN=4bcf0edbef70768b6ed5fbba89f9a0041bb6aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:37:eb:98:64:d5:7a:e2:2f:c3:f3:60:2e:
fd:21:80:c5:d7:c3:62:cd:4d:b1:ba:6d:f8:96:2e:
0e:54:be:be:6d:51:ea:e5:94:b9:04:ad:35:13:73:
92:9c:62:10:c5:65:50:fa:5c:02:e6:d8:1b:c6:70:
ea:d5:0c:cb:e1:8d:19:a2:79:ee:bc:82:a2:d8:0d:
43:0e:cb:13:d5:e4:be:92:4f:e8:13:06:a7:61:8c:
f8:33:e5:95:42:45:10:ad:73:29:6a:c4:08:c5:f7:
60:d2:d2:00:b7:de:d6:42:b5:fa:10:b3:11:1d:0e:
a7:66:a6:ae:53:88:5b:e0:29:f7:e8:0c:53:e7:31:
0c:f5:9a:70:25:fc:70:3a:db:03:86:b2:c6:37:fe:
21:48:c9:78:78:cd:78:45:8c:4d:dd:7d:d5:36:49:
2b:7c:35:12:18:a5:40:0d:03:3c:ad:8c:0f:26:58:
c0:ab:27:c3:fb:87:a2:da:22:96:5b:58:47:90:72:
d7:6c:16:18:09:ab:c0:ea:ea:f6:c0:db:9c:ed:56:
f8:41:17:f2:6c:63:69:6e:3d:28:b6:0f:5f:66:a3:
a9:69:73:e7:00:e9:76:54:13:84:c9:21:d8:f2:bc:
68:97:cb:68:0b:55:08:7f:bb:dc:58:e6:76:fc:c4:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:0E:DB:EF:70:76:8B:6E:D5:FB:BA:89:F9:A0:04:1B:B6:AE:E7
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:c5:fa:53:ab:24:bc:c9:ef:f0:27:14:0f:65:58:b1:28:
1a:30:1e:a5:3b:49:eb:be:66:10:9c:6f:03:bd:3c:8a:48:d3:
cb:57:b9:dc:7f:df:0e:66:53:23:94:8c:8a:c9:ae:08:34:72:
19:a2:25:e6:6b:03:80:c6:74:ea:0f:88:dc:ce:90:09:dc:b0:
bf:1f:0b:27:bb:43:54:81:9a:85:8a:de:f6:27:f3:7f:8e:04:
85:87:88:20:71:9e:6b:6e:ef:55:ba:9a:60:4d:05:71:07:b5:
76:a4:6d:00:8a:3a:5d:58:2e:54:1a:9d:c8:0c:78:53:49:76:
19:9e:ab:74:91:80:63:62:db:f1:b2:c7:cd:e4:09:71:e5:a9:
5e:83:f4:bf:79:2a:b5:c9:f4:99:23:9a:e1:0d:3a:4d:48:66:
9f:fa:e7:97:d9:c4:eb:97:83:76:b7:3a:e6:2d:1f:b2:77:42:
b5:2c:a0:63:35:6a:38:9a:b8:6c:45:15:eb:0d:e6:43:61:f7:
1b:74:e8:dc:32:4b:34:d5:d6:cb:d5:52:2f:d4:cc:11:2e:62:
bc:b9:14:9d:30:0f:ba:c7:ba:20:b6:b0:ea:bc:1a:de:0c:35:
31:eb:29:34:6b:a2:d6:fd:94:23:4e:6c:d5:86:00:90:76:87:
e7:93:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:54 2024 by rpki-client on console-fra.rpki-client.org