Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: 6ew5G2dolWwqlxmEpJ+JjdfzjXsci8DgBVFdWZyYeaY=
Subject key identifier: 97:30:CC:B3:0E:0E:F7:A6:CC:27:EB:6A:89:DA:68:0B:17:3D:AF:6B
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 01935689C0F286B33A3661637B2E91DBE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:28 +0000
Manifest this update: Sat 23 Nov 2024 01:01:28 +0000
Manifest next update: Sun 24 Nov 2024 01:01:28 +0000
Files and hashes: 1: B_era-eP3WBg7IXUbIMPAO26LiQ.roa (hash: OFCvkhlXgAASc+TDEryAiH7tU2BHP0ZjmtnS40R33ME=)
2: GPDxV9g8UGCK0ihIUpOJyKjISuY.roa (hash: 3QuiXdkCmgeU3cARvZveITWWqJYY3LWOJAJxBlPTcJU=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: Wi81gLQae8QZ603dG/MJKfoKsOyGNaYwhH8q4XQjcLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:c0:f2:86:b3:3a:36:61:63:7b:2e:91:db:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Nov 23 01:01:28 2024 GMT
Not After : Nov 24 01:01:28 2024 GMT
Subject: CN=9730ccb30e0ef7a6cc27eb6a89da680b173daf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:a2:c4:20:6d:d1:79:52:1f:0e:e1:23:57:
9a:8a:4a:37:63:2b:ab:3f:ce:ec:98:14:10:f6:6b:
13:db:25:6c:47:49:5f:32:51:f9:d8:07:b5:33:b3:
60:b3:d3:ac:00:42:cf:aa:38:db:ca:c8:d9:db:20:
cf:fb:88:0d:dd:67:c4:7d:92:30:f5:86:d0:fe:fc:
de:5a:b4:ea:6a:f9:08:8a:9e:27:f3:e4:18:bb:51:
48:c8:98:d3:f9:94:e7:14:3c:dc:66:26:cd:be:3d:
7b:66:6a:b0:f0:69:c6:b6:c8:cb:7b:ba:d3:94:84:
12:fd:29:a1:02:79:ce:df:33:fb:e2:95:05:09:cf:
5f:76:20:e7:92:35:d3:d3:34:51:48:2d:37:61:d6:
89:89:d4:d9:33:f2:54:01:6f:cf:db:a2:37:86:1c:
98:c5:17:e5:d5:a8:88:01:7b:21:e7:28:b5:57:cb:
dc:5e:04:2c:30:cc:3f:55:a3:21:98:cb:85:09:ac:
8d:ca:f1:17:e6:d3:b9:0b:f8:f1:d8:dd:89:e6:fc:
52:39:ce:fc:b1:80:db:89:3f:ec:95:6e:e9:6b:d6:
1e:12:1f:7b:3c:da:9a:4f:c8:2d:b4:2f:d9:35:8b:
76:ac:93:f8:3b:e6:52:b7:0e:1d:ba:90:07:b5:bb:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:CC:B3:0E:0E:F7:A6:CC:27:EB:6A:89:DA:68:0B:17:3D:AF:6B
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:05:8a:fa:05:8c:d0:b0:72:13:55:f2:68:f2:d9:c3:92:
be:77:d0:fd:22:f0:89:e7:ce:d4:01:1d:c9:a4:55:cc:00:ba:
03:e1:f8:06:42:9b:17:5e:82:ea:9d:f9:28:5e:c0:79:e1:a2:
5a:9a:b1:b4:ba:00:a7:b4:9a:07:ca:a9:c5:9d:53:c5:ba:67:
67:86:d5:93:e0:8d:eb:85:c0:c7:31:c5:d2:89:3f:bc:33:d3:
31:fe:74:2a:53:1d:df:73:2d:da:45:2b:e0:bd:88:01:29:ed:
d0:31:92:4e:03:3f:e5:1a:a8:86:84:44:34:bd:c1:22:0e:e3:
5e:80:4e:c4:80:18:19:22:58:ac:15:8e:ee:b3:79:ef:bb:28:
5f:c7:15:7d:b6:19:97:65:91:d7:3c:69:ac:d0:b9:1d:e8:64:
fe:4b:38:19:5e:f3:71:64:1c:ee:4e:7e:95:c7:21:5b:a7:8f:
d4:94:6e:79:ea:b9:75:2f:30:48:ea:24:dc:33:12:35:07:c9:
98:d3:c8:60:6f:01:fe:ac:ee:6e:bc:32:e8:d3:a4:df:c4:0f:
2f:23:d2:c1:79:d9:ad:85:0a:2f:b1:6f:f6:20:7d:cf:85:89:
ce:09:57:ba:34:ee:72:c0:bb:ce:ad:a2:9f:bc:a4:6a:3c:db:
23:ba:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:13 2024 by rpki-client on console-fra.rpki-client.org