Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: v2dvEGbY7wYSsApk+BzqYvbxt3YCUUM+hxSAjUh9eCs=
Subject key identifier: B9:57:78:98:C0:F0:7D:26:EB:CD:79:F4:ED:31:A0:42:80:4D:25:7D
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 01935989C3EE5E624D8A155C485DAED6EAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 0433
Signing time: Sat 23 Nov 2024 15:00:20 +0000
Manifest this update: Sat 23 Nov 2024 15:00:20 +0000
Manifest next update: Sun 24 Nov 2024 15:00:20 +0000
Files and hashes: 1: PK3lw2L-NVTsYbsaZ0_A2zith4w.roa (hash: I8cZOmoOKEkWWAUwZwbfJpavjrLiHfseDpMCZaN0L0M=)
2: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: rkr5Gnvj9XplPixzDFSbgHsY3X9ZbW7NMahHCQcxpQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:c3:ee:5e:62:4d:8a:15:5c:48:5d:ae:d6:ea:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Nov 23 15:00:20 2024 GMT
Not After : Nov 24 15:00:20 2024 GMT
Subject: CN=b9577898c0f07d26ebcd79f4ed31a042804d257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:f1:17:71:34:cd:b3:58:9a:8f:9b:df:be:
f2:8a:e9:2a:60:72:c7:cd:78:eb:44:4e:c7:56:ad:
0b:d5:f4:07:fa:31:48:37:7b:13:22:21:80:a8:13:
63:0b:25:cf:a3:6f:91:66:0c:55:af:01:53:5c:04:
84:0c:c2:8b:e9:83:2c:03:e4:68:9e:5d:d3:d3:4a:
cf:0c:33:71:5b:ad:0a:d3:9b:dd:a0:d9:bb:6a:f7:
21:71:b0:b6:c2:05:74:ca:d3:21:42:68:a7:a3:66:
1d:a1:09:e5:69:33:07:6c:52:44:38:d3:91:55:c8:
31:1d:16:d5:0a:4c:24:33:1b:b9:f2:73:e3:ea:1b:
2c:f5:90:7a:8a:83:49:f0:7e:26:d9:c5:c0:37:99:
7e:32:28:ef:70:69:47:a7:dd:ce:d5:17:2d:87:ed:
19:bb:bc:41:e1:c3:25:09:08:fd:2c:f2:36:2c:e4:
84:83:c3:33:65:0e:9c:6f:82:0e:88:16:b4:a8:f6:
bd:b0:8e:4b:2a:11:fd:7f:72:6b:e8:68:01:2f:5b:
ca:18:d1:7f:8b:0b:9e:1b:be:c5:89:58:c3:ee:6e:
f1:26:f7:49:02:d9:2a:1c:42:6d:28:f2:f1:0a:4f:
49:5a:f1:b7:32:50:a7:e2:c2:a7:60:9b:e6:0d:d3:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:78:98:C0:F0:7D:26:EB:CD:79:F4:ED:31:A0:42:80:4D:25:7D
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:31:33:9f:0f:3a:73:e9:74:89:52:fb:55:84:09:94:cb:
cc:69:30:88:b7:1a:b6:99:7b:37:5f:d5:e5:07:e5:09:c4:5f:
f1:a8:4e:a7:f2:15:34:b3:e7:77:77:7a:5b:4f:fa:24:55:6b:
08:e1:b4:1c:40:b7:2a:2c:dc:44:b3:93:2b:e6:25:9b:8f:45:
2b:c5:a0:6f:92:b1:d2:6e:25:20:55:8f:90:24:4a:70:c2:c9:
69:b0:21:50:96:0e:0b:b0:c0:b8:6c:86:09:c3:45:17:36:c0:
b8:06:5f:74:68:a5:9d:fe:a0:16:68:cb:aa:8f:f8:5c:74:9a:
ee:01:f6:e1:0f:e0:71:56:5a:7f:49:53:37:3d:b9:04:4f:05:
f5:ef:c8:c3:47:db:e6:6c:b2:36:58:77:8f:b8:0a:e2:3d:3e:
9e:0a:04:dc:27:1a:7c:91:65:79:d5:7c:27:99:54:a7:74:c1:
18:0a:d4:54:02:67:e6:a7:b4:6a:2c:96:b2:dc:51:00:ab:7f:
de:d0:56:bb:16:5d:cf:57:f5:27:5d:82:80:91:f1:f3:bf:4f:
04:19:05:3c:f9:f9:a8:54:ac:68:39:c6:fc:eb:e5:dc:f0:52:
00:64:c1:d0:d5:16:cd:2d:22:37:1f:ca:38:b3:b8:0d:8c:86:
06:3f:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:20 2024 by rpki-client on console-ams.rpki-client.org