Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: moWXaivHiqxh5lYrXh2QKhmkT6kW8es+JoUi4o5aD2o=
Subject key identifier: 7D:BD:F3:56:F5:01:9F:1B:E6:FE:28:E4:AE:BB:D2:66:D6:1B:45:F3
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 0193696A8B1FC746FD19113587461CCB4482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 0140
Signing time: Tue 26 Nov 2024 17:00:10 +0000
Manifest this update: Tue 26 Nov 2024 17:00:10 +0000
Manifest next update: Wed 27 Nov 2024 17:00:10 +0000
Files and hashes: 1: 3JC0xZ-fAQOfkX7mUoi28iywB94.roa (hash: 2xeuuF88YyVA3XVkcalehOJuZ8U2CKb9lhzb0nlSTis=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: oriLmVRFpJg3iOPj2FC9q9vcDe61zD9KdMYmpnkOIw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:6a:8b:1f:c7:46:fd:19:11:35:87:46:1c:cb:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Nov 26 17:00:10 2024 GMT
Not After : Nov 27 17:00:10 2024 GMT
Subject: CN=7dbdf356f5019f1be6fe28e4aebbd266d61b45f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:6d:3a:7f:b6:56:f8:3e:89:a3:66:13:6f:
ca:5f:f0:3f:5a:f3:43:bb:57:4e:03:74:c0:c6:ff:
14:05:99:e2:b0:aa:86:a4:53:96:91:e8:a9:89:e4:
29:e7:ed:af:16:e3:12:30:27:1c:d0:3d:c4:d7:5a:
8e:a4:f4:d1:f0:d8:14:da:96:62:e9:94:2d:11:43:
90:b9:f0:d8:c3:85:b8:ae:b2:dd:8d:15:b4:69:8e:
a9:70:63:49:5a:1a:6d:58:06:cf:9e:9f:a2:83:81:
58:42:2e:41:82:fc:ce:a4:c6:f2:99:47:6d:e1:4f:
90:50:b3:dd:b4:30:76:5a:30:8c:da:c1:80:54:89:
1e:ec:eb:d5:60:29:21:4a:6b:58:5f:80:dd:de:ff:
d6:be:02:2f:9c:c5:74:7a:47:aa:a9:35:97:14:e3:
3c:b5:84:a6:72:2c:41:a4:2f:0b:7f:54:c1:83:ca:
f4:eb:3a:e2:cc:08:be:d7:b8:04:3e:5b:46:c3:04:
34:24:95:cf:13:7f:fd:40:82:1a:7c:e6:e0:ed:71:
cc:69:79:30:cf:cd:a4:08:88:cd:5f:58:73:88:6c:
b1:79:a4:b4:2d:59:e5:44:8d:a6:8e:b9:a6:f9:65:
05:0b:7d:f7:cc:cb:8b:7f:c6:d9:f1:36:38:10:53:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:F3:56:F5:01:9F:1B:E6:FE:28:E4:AE:BB:D2:66:D6:1B:45:F3
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:03:44:2c:92:03:2f:a6:f7:b3:32:b5:c4:6e:d5:ae:3b:
72:94:9b:15:61:29:a1:68:22:d9:4d:86:9d:29:a7:e0:44:69:
92:2d:39:eb:07:ab:8a:d8:e1:eb:10:80:f4:3e:67:c6:f1:6a:
e6:0b:6f:79:2b:40:c8:4d:af:ba:11:e8:ff:20:cb:8b:45:1e:
56:7a:b5:98:f2:d5:45:b3:5e:c5:b3:d0:2d:59:43:ec:43:c8:
5a:f5:f0:c7:78:7d:6a:83:a5:9b:c0:5b:53:15:27:48:56:a6:
ee:93:41:2a:74:e2:c5:8f:08:3c:fb:3e:7b:b0:b7:7e:d7:77:
e0:43:f7:80:83:a8:89:a9:e4:ac:97:3a:86:73:18:62:92:d0:
da:4e:db:a8:9e:5b:ad:8c:bc:c4:d7:8a:d4:5f:c9:ed:ae:24:
bd:96:b3:ac:28:fd:de:89:a3:ea:bd:45:d3:97:f3:e3:ea:06:
56:f0:03:8b:fd:83:01:49:df:e9:d0:8e:27:53:c7:70:60:c8:
9e:c4:24:14:4c:3f:4b:c2:31:1c:d6:d5:8e:24:1c:d9:51:f9:
21:99:ba:4e:50:af:de:1f:39:31:6b:b0:f6:6a:82:bf:02:f5:
d6:db:67:f9:77:5b:d6:3a:e6:dd:9c:01:38:f3:03:e4:c3:25:
ee:c4:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:29 2024 by rpki-client on console-fra.rpki-client.org