Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: HRYA4VZ8GTtDsxvEtdxV5OEbKDjFDCa5/1nmUQjOYqE=
Subject key identifier: F2:16:3C:EA:7C:ED:FA:14:7F:8F:7B:9E:36:91:25:08:A9:80:EC:9B
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0193568B01C7143F291B0542FCC976EC5235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 09C6
Signing time: Sat 23 Nov 2024 01:02:50 +0000
Manifest this update: Sat 23 Nov 2024 01:02:50 +0000
Manifest next update: Sun 24 Nov 2024 01:02:50 +0000
Files and hashes: 1: 1hWhwV1bkQXOfj3OnDWt5Cct3l8.roa (hash: FkflQtFXJGqugy6N4yAFxxXdi7OXFFhHDID7LIfhbh8=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: S4CFFFVsYuzFkQ11FU+ncxefIeahhrc9IClRMI8ivP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:01:c7:14:3f:29:1b:05:42:fc:c9:76:ec:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Nov 23 01:02:50 2024 GMT
Not After : Nov 24 01:02:50 2024 GMT
Subject: CN=f2163cea7cedfa147f8f7b9e36912508a980ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:0d:dd:72:97:e1:54:ed:23:dc:d6:51:4c:
fc:17:35:f8:72:cc:e7:75:bf:6e:42:44:8c:19:ad:
ac:3e:f5:86:d7:9a:88:71:7f:d5:1b:c7:ac:74:87:
71:a9:fe:1d:53:5a:8f:39:cb:3d:25:96:79:28:6d:
eb:29:9f:07:20:79:8e:4c:5f:0c:f0:c5:7f:fe:b3:
23:3e:5b:e8:a1:12:ef:78:53:da:d5:36:66:1a:58:
d4:71:61:6a:34:c1:8e:3b:82:44:b1:78:2f:08:83:
a8:04:d9:97:85:a5:68:b8:81:93:59:de:4f:4a:b2:
f1:5c:de:88:3d:d9:84:1d:48:63:29:94:98:98:93:
7f:75:23:02:09:d1:0d:ca:a9:a6:c9:eb:ed:8c:f6:
46:20:5f:80:ab:6f:95:4b:d4:b6:36:34:80:0c:44:
0f:ef:48:7b:46:b4:0d:80:ae:ba:b3:1f:fe:f9:71:
f3:ff:4c:ed:c6:44:cc:6f:9c:6e:f1:92:b1:16:cb:
c3:4e:a3:e8:16:62:4b:e2:37:e3:f8:a5:ca:da:09:
fb:43:6b:b0:8e:f0:28:85:8d:21:46:8b:9d:69:9c:
73:a2:df:66:d7:ba:25:90:27:84:2f:c1:08:45:da:
18:99:5a:bc:bf:27:02:64:25:26:06:00:76:39:83:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:3C:EA:7C:ED:FA:14:7F:8F:7B:9E:36:91:25:08:A9:80:EC:9B
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:e3:9b:84:c8:eb:3f:ff:30:b6:ec:be:8f:ac:bd:d9:f6:
32:8c:91:e9:58:d9:84:b8:71:ed:84:8a:da:69:7f:0c:47:51:
d2:86:c3:0e:51:d2:25:00:e1:21:42:5b:70:79:9b:cd:54:77:
5c:30:6d:d0:42:c6:36:e3:e6:6b:75:b8:40:5b:6b:39:16:43:
f7:dc:87:31:0a:5f:0a:a3:e4:31:4f:3d:7a:82:f7:d0:94:d4:
1e:f0:94:ea:48:32:ef:ae:d2:7d:78:a5:cb:c1:e0:31:8c:f0:
8a:11:54:a9:85:ad:f9:2c:38:07:fd:07:cd:a4:64:10:f4:8b:
25:a5:02:fd:65:58:74:14:f3:b8:b7:1e:c5:d2:41:4a:a9:d7:
5f:a0:35:1e:9e:0e:48:e5:14:03:ac:00:c5:86:f5:07:18:c8:
ca:12:8d:8c:cf:11:98:0f:61:b6:11:4c:69:08:d2:d0:cf:af:
cc:70:dc:38:61:20:bb:e8:3b:a1:26:e9:a5:7b:04:da:bd:30:
c3:0a:57:30:d1:f0:04:fd:79:01:ff:f5:7c:7f:1f:db:7d:d8:
24:aa:5b:89:1d:66:bb:3b:5f:ae:94:db:d1:56:d2:de:a5:cf:
e2:bd:1e:77:3d:82:54:ce:25:40:bb:ec:64:1b:6b:a1:de:47:
6f:d2:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:17 2024 by rpki-client on console-ams.rpki-client.org