Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: D0HL55Ejov/UfD5ikEmbQiMHdyM1mEEV9fcaHONxxnI=
Subject key identifier: 5B:34:08:DC:F2:54:5F:D6:C2:A2:34:CB:0D:2B:0E:93:7F:38:A5:45
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 01936255D043A9F4A987F6920E310FDA29C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 10FB
Signing time: Mon 25 Nov 2024 08:00:11 +0000
Manifest this update: Mon 25 Nov 2024 08:00:11 +0000
Manifest next update: Tue 26 Nov 2024 08:00:11 +0000
Files and hashes: 1: 8VVJoWARvHNZx02MlhauYdlcGGw.roa (hash: X55xAP4iFJAtnZIWj1NcNVcXja3Q9mdDO8mPT5hr4x4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: 5HOthlbu9wQOU2RkwYqj7YlGq3qz3mJjHUWN7sfVf/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:55:d0:43:a9:f4:a9:87:f6:92:0e:31:0f:da:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Nov 25 08:00:11 2024 GMT
Not After : Nov 26 08:00:11 2024 GMT
Subject: CN=5b3408dcf2545fd6c2a234cb0d2b0e937f38a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:ed:82:fd:de:37:40:f8:e8:7f:1e:49:61:
c7:02:11:ae:e4:f3:54:43:e5:d9:28:d5:d2:36:d9:
7d:9e:e8:5a:37:aa:56:9e:91:6f:18:9c:37:cd:f3:
19:19:83:24:c5:8f:0c:eb:36:9c:54:51:8e:c4:1a:
ad:8d:3a:e5:b4:14:f0:36:83:8d:f2:06:18:95:80:
20:c6:dc:84:99:35:3f:c1:6b:f0:c5:75:c4:41:f5:
7c:af:62:9c:27:ba:4b:9e:9c:60:18:0d:f2:08:01:
6e:fc:96:b7:4d:e4:3c:37:ca:75:98:2b:34:53:21:
da:5e:77:0e:51:2a:44:9a:c8:8c:9e:af:5f:7d:27:
27:be:08:95:6d:53:a4:5a:5b:98:d3:50:24:f7:82:
d2:16:ff:b8:dc:00:ba:8d:4b:c8:db:96:2d:ba:34:
2c:ab:23:fd:d5:39:90:aa:1c:a6:e9:29:44:ba:9f:
a1:dc:3c:3b:70:50:3a:a9:e5:c3:4a:06:be:7b:d3:
c0:0b:38:16:d1:5e:45:2b:00:d3:32:04:e3:1e:b7:
6f:4c:ac:1f:a3:23:66:14:9c:a9:a0:c9:0b:60:1e:
23:4d:15:9a:be:09:f8:8c:5e:83:a3:ed:29:72:f5:
71:73:3c:98:f7:ce:f5:25:ce:0e:d1:38:46:d9:d8:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:08:DC:F2:54:5F:D6:C2:A2:34:CB:0D:2B:0E:93:7F:38:A5:45
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0f:4e:f9:b7:4b:6e:e7:21:f4:ff:22:46:7b:01:5d:fc:a4:
d3:22:ed:5a:6e:29:f9:0c:34:13:81:19:f0:60:a7:c7:7c:83:
bc:55:da:79:5a:13:19:48:7c:3a:35:38:ff:38:e9:7c:28:ab:
82:7f:a6:52:20:a3:52:e8:01:6c:9c:af:3b:96:35:bd:df:30:
3a:cd:4e:c8:d5:ae:ac:3f:81:0b:a2:b3:65:f9:40:31:b3:36:
43:8a:2b:94:22:5b:19:df:66:b1:9d:60:35:f6:93:9f:21:05:
59:d8:24:8b:6a:80:a2:f8:57:c7:8f:a9:4e:a8:a6:ab:6e:08:
99:01:83:69:e5:52:72:c2:50:59:31:7b:c0:49:18:c8:39:58:
e3:d0:7e:0f:45:00:a7:26:79:df:e8:08:fe:4b:28:4d:66:61:
d7:dd:b7:ab:c1:8c:98:45:a9:1c:e7:97:19:e7:9b:9d:2d:f8:
b7:51:b7:9e:ef:09:13:58:73:ed:9c:ab:fe:68:51:e2:b2:ed:
97:a2:93:83:06:9c:48:e9:62:d6:55:f9:e5:18:66:41:9a:11:
95:ce:a9:dc:82:60:28:51:70:08:fd:ce:0c:b0:51:26:06:b9:
27:b4:df:a6:79:c5:d4:9b:32:fb:f6:d4:63:9f:91:7f:49:1b:
44:50:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:08 2024 by rpki-client on console-ams.rpki-client.org