Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
File: zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft (raw, json)
Hash identifier: 7M9tQ3crvJVQwNAdw310soZ623GNRaXRNwbRgrlegPw=
Subject key identifier: AD:03:69:5A:F7:7E:2D:72:B5:BE:2B:F7:2B:C7:5E:BB:FE:9D:30:67
Authority key identifier: CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
Certificate issuer: /CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Certificate serial: 01935508B235CE68630605E7523A8F474C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 18:00:53 +0000
Manifest this update: Fri 22 Nov 2024 18:00:53 +0000
Manifest next update: Sat 23 Nov 2024 18:00:53 +0000
Files and hashes: 1: 6l1BC2x74pBL_GbKuWRkMUG7YIM.roa (hash: 39R46tz3b+vC1kis/ZTGmy+wtGC1KNHKTAq84Lp1kTc=)
2: MkFgJDfStdKIQ5DNMFjY5e0Z05A.roa (hash: WMztQKnWXLR9khTXAb0meJ7ILrr6yZn87tncMBmBFy0=)
3: zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl (hash: 6YO+ucvz26qdyZH+RfQh9EupWDRCHS/6FeSBIvQgAoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:b2:35:ce:68:63:06:05:e7:52:3a:8f:47:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Validity
Not Before: Nov 22 18:00:53 2024 GMT
Not After : Nov 23 18:00:53 2024 GMT
Subject: CN=ad03695af77e2d72b5be2bf72bc75ebbfe9d3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:9b:90:3b:4f:2d:66:8d:fd:c7:f7:a6:6b:
ef:61:69:b3:15:85:d3:8c:1a:73:30:35:46:b5:fd:
14:8e:a2:eb:7b:e0:c0:d5:9e:f2:3f:a4:7a:b5:3b:
56:ac:85:37:af:bc:30:22:77:a1:24:74:29:9e:5e:
53:29:9a:dc:15:42:6d:7a:65:b9:6f:08:fb:11:2d:
d3:31:d5:31:26:c4:9d:2a:cf:fa:b3:4a:ea:a6:91:
b5:e9:95:d8:eb:c4:f3:16:c0:1c:09:ea:d3:56:86:
31:8d:c6:fa:68:ef:d6:37:7c:6c:c1:d3:44:2f:01:
11:dd:4d:42:6d:c9:ad:b0:5e:97:a6:f1:c4:51:6f:
25:36:cf:9b:8d:30:37:34:5c:2b:12:30:a5:15:a7:
4d:da:d9:cc:ba:54:f1:ec:d1:fb:03:31:e4:01:b4:
a8:f5:c8:cc:cf:42:80:2a:ae:b0:23:e6:65:16:71:
86:47:d9:5e:63:b5:e0:98:13:ff:60:0c:b6:c6:c9:
7c:fc:ba:da:0a:52:51:b8:09:c0:1b:0c:11:d4:3c:
1f:31:b3:1f:42:37:d8:e3:85:89:cb:e8:a5:ff:b8:
e0:58:ca:cd:70:30:d4:de:7e:e0:9f:d5:e4:cb:8f:
2c:8c:df:9f:41:8f:8c:5e:83:c2:4d:be:4d:57:0f:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:69:5A:F7:7E:2D:72:B5:BE:2B:F7:2B:C7:5E:BB:FE:9D:30:67
X509v3 Authority Key Identifier:
keyid:CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b0:5b:df:ac:95:5e:96:b2:f9:9f:8e:4e:32:32:11:f0:1c:
f2:76:2d:38:4f:70:f4:46:37:ee:ed:b9:ee:f0:88:4b:bb:0c:
85:47:f3:51:3a:d5:63:ee:a8:60:d2:7d:11:28:9b:ee:70:11:
dd:7b:a8:20:71:c2:8c:32:4c:2a:5b:f5:17:a2:12:24:6f:d0:
4a:f3:3b:b9:0f:07:c9:a3:d6:01:62:c4:9e:76:d9:f4:78:99:
21:ef:44:e7:61:6f:75:cd:8e:1f:c2:cd:4a:44:48:b6:df:df:
6d:37:20:d4:d8:27:bd:f7:78:78:ba:ba:2e:99:df:7c:04:57:
a9:b1:20:7b:45:dc:68:b8:a8:b0:57:52:23:7f:1a:22:7b:04:
b4:e0:0c:9b:05:89:95:e7:cd:93:ad:d6:a1:39:fe:ff:ce:9f:
7c:e8:a0:82:9f:2a:48:3a:94:c6:ad:d8:4f:7b:7e:87:9f:1e:
72:b6:db:e2:71:c6:90:80:76:da:2e:36:17:d0:c6:00:70:c1:
65:32:77:d8:2a:43:f3:bc:b7:c2:42:48:57:0a:03:f0:4c:e2:
32:97:d9:5b:7d:92:11:81:1a:1d:3c:6b:5b:24:55:e4:98:a2:
90:fa:22:fd:a1:4c:8e:2f:ff:5a:3f:1f:a7:f3:97:2e:f7:25:
1b:ed:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:53 2024 by rpki-client on console-ams.rpki-client.org