Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: pXQikzbTJnXjLdFbwMIL2Cd1paLkQDijx9C3kHIEjf8=
Subject key identifier: 23:EC:F9:9F:F6:89:68:39:97:75:B4:81:74:57:7B:62:BD:31:15:94
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 01936A466DEA6384A64F9D7406B70DE84AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0608
Signing time: Tue 26 Nov 2024 21:00:20 +0000
Manifest this update: Tue 26 Nov 2024 21:00:20 +0000
Manifest next update: Wed 27 Nov 2024 21:00:20 +0000
Files and hashes: 1: LfQfK2GuvjIkndePN2dhar9__sc.roa (hash: HI35LIuauZrWxsshGrkn0wi/eFi2FyGEmPxVwIJxHYM=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: bEy58YhjHQdh2t3ZaP0yzLHV4UTO/ji3b5+ZUyAH6dI=)
3: msH4Qn3RCz2U8zqXFUof6qnQk5w.roa (hash: Xe3to4/Ml/3Ggsf5CGba8bNpbWiYfnVTq6FtL4ULVwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:6d:ea:63:84:a6:4f:9d:74:06:b7:0d:e8:4a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Nov 26 21:00:20 2024 GMT
Not After : Nov 27 21:00:20 2024 GMT
Subject: CN=23ecf99ff68968399775b48174577b62bd311594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:42:37:77:53:bc:f0:a2:78:99:35:d5:8b:
39:00:9a:9f:20:7e:e6:c7:a0:9c:e0:2f:82:65:60:
7d:82:51:33:69:f1:d0:e1:ec:05:09:69:0a:ce:ac:
58:49:24:ac:e7:bb:d0:b2:e2:23:c9:c8:bf:5c:f7:
70:9c:5d:b5:30:14:5e:e3:cb:05:9a:b2:19:94:8b:
36:3e:18:6e:9a:91:ab:fc:63:61:b3:17:a6:58:46:
c8:1b:62:7c:32:a1:d3:c4:00:40:6e:49:46:15:c7:
b0:5b:be:7d:ac:64:83:b5:ea:fd:b2:43:56:f8:6c:
38:59:86:cb:b9:87:8f:4c:7d:f7:39:5b:09:b0:2c:
34:e8:d0:ba:31:b1:47:36:f9:eb:b3:ff:68:3a:df:
67:00:0f:7c:39:9c:bf:b5:aa:35:fd:cb:0a:ad:24:
d1:27:46:96:11:43:8e:7b:37:48:91:e3:63:5b:bc:
f1:a7:51:c3:45:1c:6f:c3:33:d9:16:bc:1e:7f:1f:
d9:04:f0:a2:38:8b:36:7a:42:cb:58:d5:d9:87:e5:
a6:94:31:e5:38:74:fd:e1:c3:c6:3e:a2:38:45:be:
c4:9f:5a:cd:cc:c9:0e:2f:b2:fa:6a:79:35:de:67:
29:37:e8:2e:56:83:1a:a6:71:8f:93:a3:ba:97:20:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:F9:9F:F6:89:68:39:97:75:B4:81:74:57:7B:62:BD:31:15:94
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:0b:ca:8c:39:8d:46:09:e7:33:b6:42:55:20:77:e4:c6:
90:52:38:24:fc:22:76:71:4d:30:ad:b1:1f:fb:12:da:45:31:
a0:a8:47:ed:55:62:03:d2:55:b7:57:23:0a:b9:17:36:e4:35:
74:c9:7b:de:68:d9:aa:07:9a:0d:cd:c8:b2:b0:5e:a9:a4:53:
a8:6b:b1:49:c2:58:5f:7d:93:f1:e2:74:d6:ae:ac:1b:ae:06:
b2:ab:db:fd:34:20:dc:ce:f3:11:6e:f6:3b:5b:26:85:45:58:
72:9e:78:ca:9a:4a:4e:f2:e9:a4:44:0a:94:88:28:a2:bd:20:
da:b5:40:60:eb:85:75:af:5c:90:03:c6:37:24:90:e8:1a:35:
64:43:f7:bb:49:38:25:1e:6f:70:46:45:18:e4:d7:03:88:41:
35:22:f1:a2:3b:8b:9e:2b:68:21:91:6c:bf:d2:d4:c5:62:f3:
29:75:6e:eb:e1:99:e2:bb:ce:09:ae:78:0c:11:fc:c6:35:de:
f8:79:25:45:a7:83:77:d0:33:66:5e:bb:d4:83:9a:13:a8:ad:
64:b0:9d:8c:3e:72:64:90:0d:b0:c3:18:67:93:b4:21:ed:4d:
23:fc:c9:5a:89:65:90:d4:4d:5b:cf:e4:2d:34:b1:e7:2c:6f:
b5:41:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:32 2024 by rpki-client on console-fra.rpki-client.org