Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: 1h6GcbGGbzR/bjtInubyOGLbnVRRVqng+q8fBEOjo2E=
Subject key identifier: 3F:F0:7E:59:49:98:7E:4A:4E:D8:8D:63:2A:CD:E0:22:B7:89:B5:41
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0193617A61DCDA7701A96E21F85F68ACC1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0134
Signing time: Mon 25 Nov 2024 04:00:30 +0000
Manifest this update: Mon 25 Nov 2024 04:00:30 +0000
Manifest next update: Tue 26 Nov 2024 04:00:30 +0000
Files and hashes: 1: 8eCQGifeyBiQ38ZrOEcOW3kwzOo.roa (hash: 8fdoce8JTl/NRNTA269g4aQW3gYlAWOyMQWdxZ8gvU4=)
2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: 6FEd+1J9x+c5iFJWrvrwR1aNAiLoOT8xfb7eqX2KNzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:7a:61:dc:da:77:01:a9:6e:21:f8:5f:68:ac:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Nov 25 04:00:30 2024 GMT
Not After : Nov 26 04:00:30 2024 GMT
Subject: CN=3ff07e5949987e4a4ed88d632acde022b789b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:da:ef:b9:76:a9:95:cd:00:f2:bf:54:91:
1d:8c:7f:9a:2f:df:d5:01:6d:6a:02:2c:42:e7:06:
18:b5:a6:be:7d:d8:eb:e0:07:1d:91:6e:ef:ba:d1:
72:b2:c8:49:32:c2:ab:93:61:a5:d7:e7:ca:59:27:
d7:60:0e:2c:ce:5b:ae:e9:43:1c:d1:31:ff:65:03:
e1:22:02:bf:49:dc:bb:2b:1c:bd:2b:ac:1d:7d:12:
18:8f:cc:81:e0:d7:1a:31:e3:c9:d2:c4:39:93:b2:
d7:a0:04:90:bf:df:6e:1f:67:22:ac:a2:69:67:53:
11:e7:24:76:fd:ea:8b:08:b0:92:f0:f0:60:15:23:
85:59:16:19:b6:97:07:ba:fe:f4:15:2b:93:e1:07:
b2:73:0a:1a:77:bd:26:19:a6:fc:fc:66:f7:e5:b2:
f0:d9:7b:53:8f:77:27:34:44:b1:49:0d:c5:87:23:
0a:1b:b0:8c:d0:5a:cb:4f:0a:ab:16:99:1b:c2:e8:
8c:04:1d:3c:2e:d9:2e:00:b5:82:11:1e:83:10:75:
41:b4:9b:27:d6:3a:3b:7e:fc:aa:a1:be:3f:0c:1a:
15:de:73:2d:f8:4b:8f:57:34:22:c4:c0:a5:0b:8f:
a4:ad:2f:08:76:a3:5b:0c:c8:95:a6:84:e9:b6:fc:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:7E:59:49:98:7E:4A:4E:D8:8D:63:2A:CD:E0:22:B7:89:B5:41
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:a9:51:8a:79:94:cf:35:9a:57:06:04:03:ad:ed:2c:7a:
82:b0:6b:af:db:4e:db:90:f7:84:75:c6:ff:45:71:ca:b3:fc:
40:e0:da:f4:66:47:06:84:9c:1d:ee:35:75:25:68:e9:bf:1b:
40:bd:cd:13:a7:37:25:a2:0d:21:71:6e:ca:9b:40:35:5f:e0:
dd:00:9b:82:ea:31:47:37:17:5c:e9:35:40:9c:b2:a5:12:da:
89:3f:59:1c:80:75:b0:5f:ef:ca:ce:98:e2:00:01:aa:e2:48:
9a:d2:93:dd:38:44:78:ce:24:88:5c:3a:78:bb:34:a3:1f:c0:
9b:12:ed:b6:34:0c:8d:b0:68:07:fa:6d:f0:29:9a:94:e5:54:
c0:a6:58:23:5a:d1:1a:58:76:11:56:0c:a3:82:cc:62:2a:cd:
d6:94:a4:5e:96:5a:56:8a:18:46:22:7d:a3:05:5e:d0:56:57:
2b:f7:8a:71:bf:dd:24:a3:da:55:79:b7:26:2f:d1:b2:6c:aa:
d7:1c:ed:f7:ca:1f:38:70:ef:d6:e5:8d:1f:eb:16:3a:80:0e:
a8:46:b3:dd:07:ca:7c:b8:23:90:bd:61:98:47:84:f7:33:e9:
40:9b:01:dd:4a:a2:92:5d:77:11:a8:c0:8f:27:b2:e0:5d:24:
65:e6:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:22 2024 by rpki-client on console-fra.rpki-client.org