Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: wRxfMt3EVl/RblX4XHmnfcbEZ8JMnyK8uI4yk2Ld7D8=
Subject key identifier: F4:4F:63:B9:DF:B5:32:8F:66:D1:12:1E:4A:F3:C1:6B:4E:FE:8E:09
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 01935877DE514E8F8DE8CD0240286ED8600C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 09C7
Signing time: Sat 23 Nov 2024 10:01:10 +0000
Manifest this update: Sat 23 Nov 2024 10:01:10 +0000
Manifest next update: Sun 24 Nov 2024 10:01:10 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: Q9sRaA6ovqORgb3t8b8J7FSqJTX0IP6dWJpwtzfQc0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:de:51:4e:8f:8d:e8:cd:02:40:28:6e:d8:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Nov 23 10:01:10 2024 GMT
Not After : Nov 24 10:01:10 2024 GMT
Subject: CN=f44f63b9dfb5328f66d1121e4af3c16b4efe8e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:78:ce:3a:a6:97:67:9d:b4:71:19:52:1b:
1c:9f:62:49:c5:34:60:f3:05:08:4e:0f:c6:7c:43:
f0:c4:dd:18:92:63:34:59:11:e5:37:e8:ac:36:a6:
4e:27:1f:cd:3e:66:de:73:7e:fd:89:56:0b:b7:91:
aa:68:69:20:53:e4:d2:d4:0d:31:43:b3:28:11:4c:
ab:13:c8:1b:87:4a:21:51:86:0c:25:6e:3a:9d:f0:
c2:4d:10:d4:40:09:3c:a0:b7:0b:b2:fa:e8:48:ff:
4d:6f:53:fa:40:0e:a5:29:2d:af:e8:90:22:d4:7c:
b4:78:d8:28:3f:18:6d:fc:04:30:e0:98:e5:5f:62:
d5:e9:b7:15:c5:f8:76:fc:02:e1:9f:5f:ee:ab:6f:
ea:7a:ff:1b:fa:cc:89:df:72:f4:4e:b3:f4:b6:d1:
60:4f:44:cd:c9:c1:3c:d0:5b:f7:04:20:b1:b1:2d:
c9:4a:c4:d7:e2:c1:d3:f3:16:8a:96:23:5f:0e:c7:
91:ac:96:a6:e8:4c:14:f4:56:67:11:97:b7:ae:d4:
4b:03:e5:b7:55:e4:f4:86:a5:a2:cd:57:08:9b:c0:
6c:49:99:9a:18:d6:d6:c7:7f:94:e8:e7:6c:95:8e:
9a:c1:67:44:99:67:e2:bd:f0:52:4f:19:4c:ef:da:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:63:B9:DF:B5:32:8F:66:D1:12:1E:4A:F3:C1:6B:4E:FE:8E:09
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:5c:1e:94:3e:27:3a:1f:b0:18:94:8c:3c:0c:16:0b:ba:
3f:45:76:e5:db:88:a3:68:86:24:7e:af:73:90:86:a5:04:77:
fb:2d:37:66:bc:99:de:71:26:52:e4:f8:d4:7e:f1:45:9e:25:
4e:d8:68:ea:a8:18:bf:da:93:f8:ba:73:eb:dc:5d:47:0b:fd:
1b:45:ec:25:f0:31:33:33:06:b0:c9:46:bd:82:c9:91:79:27:
14:87:ce:56:ad:93:af:4c:c1:9a:52:d5:1b:2d:f0:09:14:aa:
91:b2:48:3a:c6:7e:be:bb:68:76:6e:4c:33:d7:45:f9:4b:85:
3f:38:37:89:be:ac:47:a9:97:be:f1:f7:26:1d:6b:00:27:04:
29:1a:f9:3d:18:35:5b:8e:09:c1:87:9d:25:22:e8:7e:c2:81:
4a:ba:91:61:b4:c2:0a:b4:0a:11:19:15:19:49:dc:ee:40:4a:
58:70:22:a2:42:a7:40:d5:dd:54:ea:10:50:53:2c:47:77:97:
89:bc:dd:54:56:bb:64:26:e2:c3:67:8e:44:27:1e:63:70:83:
f1:59:29:97:3f:b2:a7:f3:f6:09:61:73:d3:53:b9:49:15:2b:
cc:98:d6:aa:30:0b:77:8a:3e:41:62:1d:0c:fb:a5:d7:d4:97:
59:96:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:26 2024 by rpki-client on console-fra.rpki-client.org