Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: bf74HDUlSFfPtv1SZSdlTqq0PvZjiMc4pLtegkaSerg=
Subject key identifier: 2F:F7:39:55:2D:26:26:9D:F3:2D:06:06:44:2A:12:A3:21:1A:D1:C3
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01935FF9D80F24E380E3617A6ABEBA35C174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0C5C
Signing time: Sun 24 Nov 2024 21:00:29 +0000
Manifest this update: Sun 24 Nov 2024 21:00:29 +0000
Manifest next update: Mon 25 Nov 2024 21:00:29 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: YFLG1kTouV8+Vcmty6AdhjdJffJIvXZh4gXq1Gf/97Q=)
2: F5E0_JeT5mFa4ip6RXLxbkO73KE.roa (hash: Uhn6RdxWpAQsFOOesm23TbAexpsuOC4GC1WOw/xfjwE=)
3: wkxXq3P8dQqFNbN4qKHoqzui_YA.roa (hash: eauT8dVnb45Uy5OdYP6OMOy/tYoWYlq2lFkLIPa05W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:f9:d8:0f:24:e3:80:e3:61:7a:6a:be:ba:35:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Nov 24 21:00:29 2024 GMT
Not After : Nov 25 21:00:29 2024 GMT
Subject: CN=2ff739552d26269df32d0606442a12a3211ad1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:e5:ce:55:bb:b9:d9:97:94:e7:e2:9a:c5:
37:0f:62:d6:0c:fa:38:d9:b3:68:7d:0b:1f:e7:46:
2e:1f:ac:3e:14:0c:5f:68:01:f0:3f:ed:1c:31:bd:
e1:8f:26:f7:53:49:5e:09:d7:1e:fb:97:a2:88:c5:
b4:e7:11:2d:24:92:4c:0b:47:da:2a:b5:95:50:85:
20:50:c4:33:4f:40:0d:6b:8a:b7:b9:8e:cb:4a:50:
a6:89:5a:05:45:4f:b8:11:a1:f3:d4:5f:ce:b9:a2:
73:d1:f9:ea:bc:44:5c:f4:f9:1d:23:68:cd:31:1a:
57:ff:b7:c1:4b:92:cd:a5:f1:cd:88:b1:de:59:2a:
c4:1c:df:3e:f3:9a:c6:cb:fd:f5:74:43:7f:fd:0e:
63:94:cb:52:b1:b1:d0:2c:16:99:90:83:45:c9:ae:
40:38:98:b6:51:65:6e:78:bf:b6:87:ed:08:87:b0:
0c:72:e1:3e:2d:9d:1a:f5:65:78:75:ef:98:18:96:
06:5d:84:a0:0b:9f:e1:c1:39:a6:31:65:18:39:9a:
5c:41:b2:0b:b4:df:2b:b0:ba:e3:1b:db:e1:f9:8d:
b6:2b:9d:be:48:a5:58:db:fd:c4:ea:4c:8b:31:02:
38:da:26:a1:18:6e:5a:42:f7:48:b0:0a:92:32:6e:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:39:55:2D:26:26:9D:F3:2D:06:06:44:2A:12:A3:21:1A:D1:C3
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dd:4e:6c:f1:0a:63:f6:a8:ee:8f:40:66:06:c1:6e:9d:67:
46:6e:7e:e2:d7:9d:e8:1a:96:34:75:62:58:97:4c:15:e5:af:
6a:1b:93:f0:c1:c9:ea:82:4d:34:de:99:79:71:65:1a:68:8d:
53:ce:f4:1b:eb:e7:bf:64:f1:a8:45:be:3d:2a:d6:a2:12:72:
44:d0:07:ce:19:8c:8b:b7:41:04:d9:e8:88:db:e8:e7:80:09:
24:05:cc:58:ff:a1:66:53:9b:e6:df:cd:dd:1b:82:5f:a9:95:
a5:13:01:3f:7e:68:db:a1:ec:3c:72:6c:46:98:dc:9b:9b:c1:
37:b6:98:41:29:f3:82:2f:c6:a7:61:d2:03:3b:46:dd:12:ed:
b5:52:c8:c4:c5:27:c5:ca:3d:56:7e:80:26:86:bc:79:2e:3d:
7a:13:e9:23:a7:0b:c6:75:db:a5:7c:1c:e4:84:21:ad:9f:84:
85:c9:4e:d6:0b:79:68:1a:ac:46:c3:4c:5d:8e:2b:b9:98:97:
6f:a7:d2:c6:aa:33:1a:55:98:ec:6c:62:0e:d3:32:94:14:15:
03:e0:16:0a:35:4e:12:33:0c:2d:3c:c4:bf:b8:fb:91:bd:a8:
f1:68:f2:52:cf:88:51:24:d0:e6:6f:78:e5:aa:25:20:4d:a9:
82:d6:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:41:41 2024 by rpki-client on console-ams.rpki-client.org