Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: JUt2XpkfMEPfv8Q+rGwaeoR7P0x1kbHzTSFnUnYysIk=
Subject key identifier: 5F:6E:B5:95:5F:74:89:84:0F:92:65:83:DC:CD:70:C3:43:58:DF:7A
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019364E96F08377760BD03FB0FE5DDCC090B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0680
Signing time: Mon 25 Nov 2024 20:00:40 +0000
Manifest this update: Mon 25 Nov 2024 20:00:40 +0000
Manifest next update: Tue 26 Nov 2024 20:00:40 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: 2SPp+FkuJvTIznG/h0gSHY/qD1s1bqgPRGK2iON6rA0=)
2: TzZ1NsMjSVSygE31-jdFyjCgU7g.roa (hash: EU2rmLN+m21gQ5C8s9Vvf+lDRGKaRJKmF030N/AcTIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:6f:08:37:77:60:bd:03:fb:0f:e5:dd:cc:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Nov 25 20:00:40 2024 GMT
Not After : Nov 26 20:00:40 2024 GMT
Subject: CN=5f6eb5955f7489840f926583dccd70c34358df7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:ed:0c:37:8d:83:9e:1c:09:62:07:ba:41:
d0:81:52:9b:ab:02:82:cd:8f:c6:55:3d:d9:ee:81:
f7:fd:46:97:76:c1:6a:2e:c8:ef:0b:ba:f7:63:a7:
47:19:29:db:01:6e:79:7e:65:75:0c:04:f7:fb:74:
12:81:96:8c:77:5f:2c:7f:96:ba:42:dd:69:c6:68:
1a:fe:06:64:b9:b8:0e:53:c2:d8:f2:65:99:8c:73:
b6:cb:e5:62:e9:9d:4f:60:cd:4c:a8:8b:c3:9b:ad:
19:ab:e7:6d:ce:57:58:56:03:a6:7a:62:96:b0:1b:
3c:11:a9:1d:69:6f:97:61:1c:60:c8:38:ec:2d:da:
48:d5:6c:b5:49:30:58:3c:a9:9c:a0:e4:fb:b0:0b:
8e:28:84:67:c5:c1:d2:db:b7:2e:c5:95:13:4c:f2:
da:f9:ef:e1:68:2a:de:d2:a4:5f:08:ba:be:e0:71:
68:69:b9:fe:d7:7f:ac:b7:13:29:0c:19:ce:b7:96:
cf:7b:91:39:0d:62:93:b3:28:0b:0b:07:14:0a:a7:
da:37:96:04:09:33:b2:43:f1:1e:db:d2:be:71:76:
3d:58:39:2b:b9:6d:0c:03:e3:da:9e:61:1e:e6:9c:
57:cf:7b:b4:7d:1d:dc:4b:21:bf:84:73:2b:f3:94:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:B5:95:5F:74:89:84:0F:92:65:83:DC:CD:70:C3:43:58:DF:7A
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8c:53:2d:b8:2a:37:d3:95:9a:f8:17:ef:62:e7:52:53:6f:
39:59:a1:a2:6a:82:2e:e8:97:e5:80:cf:08:0f:bd:ed:38:e1:
29:0b:c9:65:53:25:e1:e2:f6:66:e6:e6:25:65:8d:e9:bb:e5:
e6:d3:f5:bd:61:86:da:4a:65:df:0a:71:a0:a7:43:f5:29:d2:
4e:13:7d:c9:9e:0f:44:87:54:ac:18:a8:fb:89:71:3c:94:c5:
38:21:85:80:ab:b4:1d:c2:16:1d:b2:33:f4:d5:41:54:ee:cf:
9f:d7:03:85:3c:e5:52:8f:5a:d6:2f:b3:ae:9e:ef:28:86:fd:
b5:29:c7:d7:70:dc:29:d3:19:8f:be:91:16:e6:75:b2:b4:25:
da:b4:24:ed:a1:fc:0a:19:fe:e8:12:cc:13:78:3c:ad:83:a5:
5d:d3:0d:14:73:47:c8:c5:a7:81:e1:66:4e:7e:80:3a:66:7d:
20:a1:1b:b4:cd:8a:b2:d1:f3:81:a1:dc:0b:99:04:15:b2:bc:
95:67:85:0a:e3:85:42:85:a4:0f:87:4a:7e:61:28:d1:29:1f:
6e:63:48:c5:ca:2b:77:09:52:83:4f:1f:05:79:d4:6e:3a:12:
61:69:4d:3f:54:c4:a5:13:78:4a:fe:3a:f7:6f:3b:87:6a:78:
41:1c:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:13 2024 by rpki-client on console-fra.rpki-client.org