Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: GVGda813x4xbPeI11l9pDICN49tDQ5l+v4Mf3feRNNU=
Subject key identifier: F3:07:10:6A:58:00:BE:A9:50:40:70:4D:68:64:7B:EA:FD:4B:F3:16
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 018F874A5165C0649EC9A01AE4B5CF6986A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 07CD
Signing time: Fri 17 May 2024 16:02:25 +0000
Manifest this update: Fri 17 May 2024 16:02:25 +0000
Manifest next update: Sat 18 May 2024 16:02:25 +0000
Files and hashes: 1: 1hWhwV1bkQXOfj3OnDWt5Cct3l8.roa (hash: FkflQtFXJGqugy6N4yAFxxXdi7OXFFhHDID7LIfhbh8=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: 9njlybM2tPJcqdHvPQ0LU142F8/MsOqBzTfhnFfbvRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:51:65:c0:64:9e:c9:a0:1a:e4:b5:cf:69:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: May 17 16:02:25 2024 GMT
Not After : May 18 16:02:25 2024 GMT
Subject: CN=f307106a5800bea95040704d68647beafd4bf316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:b4:9c:7a:3a:4a:9d:de:f8:f6:8a:7c:49:
81:e7:7b:4f:95:1d:a8:45:bd:4f:f4:b4:c3:4a:d0:
f0:6b:45:99:ef:e2:d9:c8:e9:49:68:80:af:43:f7:
99:fd:2e:40:78:ec:3d:da:99:45:73:7c:95:ac:a8:
7f:80:12:cf:3d:ef:b9:e6:e6:76:17:d2:4b:d3:ae:
89:40:d5:ee:c1:59:3c:aa:6d:cd:5d:6d:92:e4:53:
44:f1:45:91:aa:3e:e1:fb:33:56:cb:88:d0:a9:05:
d3:46:86:28:bc:f6:9c:c4:51:d4:5a:5c:d3:0d:79:
01:83:72:bd:17:76:08:41:2f:a0:97:8a:22:56:c2:
3e:1f:41:a6:0e:09:c9:dc:c9:e9:9c:78:b3:0f:fd:
28:a8:76:12:df:60:f2:32:90:46:21:a0:1c:4d:75:
ca:6d:34:3f:71:b0:b0:41:69:05:0b:f5:4d:df:75:
85:48:39:03:61:91:4f:c2:31:d3:39:2c:7f:e6:2a:
8b:e7:6d:47:00:45:3a:61:58:7c:28:51:ff:eb:14:
f9:51:7f:f3:25:43:6d:7f:3d:fc:66:36:4b:c2:f2:
dd:69:7a:14:a6:6f:d3:3d:1e:81:af:8e:7a:37:8b:
1e:4f:6d:1f:61:0d:ae:73:2a:54:28:83:65:b8:e5:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:10:6A:58:00:BE:A9:50:40:70:4D:68:64:7B:EA:FD:4B:F3:16
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:aa:ac:ef:ed:37:24:10:b4:9d:38:28:61:a1:8a:8c:ae:fb:
83:7a:ad:b1:40:7f:9c:43:92:b9:c4:7a:1c:3a:d0:b7:b2:2a:
b4:b8:44:be:c3:58:5f:16:91:fa:4f:b3:57:4a:5b:96:be:5d:
b5:a0:47:27:ec:64:5b:32:8d:ff:fd:0d:ff:db:39:87:ff:a0:
a9:ba:ee:2c:53:fe:00:07:d5:18:88:61:ac:bf:47:a7:08:35:
c5:7e:19:a1:9f:d1:04:38:f3:04:ee:e4:16:44:96:f6:df:cf:
5d:7e:49:e3:92:1c:82:cc:dd:6c:c1:07:c3:70:df:b5:c0:fa:
1a:5b:71:b8:94:9f:3c:c6:16:82:4b:fb:ed:06:a0:43:80:fb:
b3:e0:81:40:08:23:a6:59:6a:80:66:d0:81:b3:9d:c2:b7:3e:
81:75:50:79:3a:7e:0f:62:08:15:53:06:96:5e:b8:70:7b:84:
2b:53:68:0e:f5:87:36:4b:6a:08:c9:c9:e4:80:f2:97:09:37:
ed:b7:43:a4:8b:13:59:ea:d5:6b:77:97:13:48:d3:af:2d:72:
07:c6:e3:7c:f4:23:51:23:fd:53:43:69:54:ae:f2:f9:7c:c1:
ec:16:2a:0a:51:a0:56:38:bb:c4:80:b4:83:91:29:33:1f:b7:
78:56:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:47 2024 by rpki-client on console-fra.rpki-client.org