Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: BEzmdE9qFrvLDmb148rlv9mWSKJrm+Chzd4tzh6itoc=
Subject key identifier: 63:21:AF:8C:FA:8E:EE:B7:00:48:28:D9:9A:0A:89:4A:5D:9B:71:A1
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 01935689069891843B2D286F224CEEB1A549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 11FD
Signing time: Sat 23 Nov 2024 01:00:40 +0000
Manifest this update: Sat 23 Nov 2024 01:00:40 +0000
Manifest next update: Sun 24 Nov 2024 01:00:40 +0000
Files and hashes: 1: 1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa (hash: CSr1+30CH2xayg/63FW5Tw8+XMHhWUxfK6+VRMVXtSw=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: J/mmq0QYa1aKITWochk/DUDVZ0JusV8EInVN4hPc538=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:06:98:91:84:3b:2d:28:6f:22:4c:ee:b1:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Nov 23 01:00:40 2024 GMT
Not After : Nov 24 01:00:40 2024 GMT
Subject: CN=6321af8cfa8eeeb7004828d99a0a894a5d9b71a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:e8:ea:3e:57:44:a9:b5:bb:75:8d:93:72:
c5:21:f2:c4:57:e7:e4:f7:4b:2f:7d:9b:1c:39:9c:
a4:71:c8:df:70:9c:3c:09:d3:31:7b:d7:e6:4d:a2:
e7:f7:a9:8e:e0:95:56:47:00:ee:4b:e6:3e:c9:e5:
64:13:f6:eb:5e:ec:b3:5c:a1:7b:17:5e:96:d1:79:
a4:ee:30:01:00:7e:6f:05:f0:30:ec:6b:62:3a:8e:
70:b4:46:6d:c8:c1:12:0b:e0:d1:a9:df:b1:2c:fc:
ef:93:a9:1e:9d:31:cb:a6:f8:46:75:27:c4:8e:12:
39:1e:a8:a7:9e:8a:fa:fc:0c:bd:6d:d7:fd:3d:46:
0f:2d:8b:a8:92:8a:82:54:1e:8a:7a:b3:a7:cb:df:
c7:b5:b2:82:a2:c3:6d:85:76:39:82:67:b8:bf:49:
a4:30:90:98:af:42:41:8e:92:73:15:12:e1:97:f9:
2f:71:7c:54:d3:c8:0c:77:f2:68:6e:a8:89:9d:64:
9e:58:55:8c:bd:1a:14:2e:89:2e:37:45:aa:57:d0:
32:d2:28:dc:aa:a6:a7:5f:c6:08:f8:cd:44:de:c1:
6b:27:84:6d:0f:e3:5a:ac:66:89:ed:33:54:fa:72:
85:9e:f2:10:a4:c1:8b:69:46:c6:2a:13:de:e8:33:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:AF:8C:FA:8E:EE:B7:00:48:28:D9:9A:0A:89:4A:5D:9B:71:A1
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:65:81:7e:e9:99:1a:fb:be:c3:f8:d9:bc:ec:94:16:cc:
b6:66:6f:33:23:72:28:83:07:b4:1d:79:e2:89:4c:bf:e0:c0:
10:c1:47:04:63:b8:b3:ed:d2:18:cc:91:72:79:30:93:17:46:
d7:d9:be:57:23:01:3c:34:3c:5e:18:40:57:31:d2:9d:72:2f:
cd:59:1c:f8:1f:1b:9a:60:48:44:19:56:06:f0:08:51:02:53:
69:4d:5e:1f:91:00:01:06:b1:f1:25:ff:82:a9:62:e4:15:ea:
e3:18:14:ad:b0:63:ac:3e:af:53:05:97:c9:e7:37:fa:2e:1e:
87:8b:b4:28:3a:a3:90:35:46:77:a6:1a:ec:77:67:f7:d2:54:
e2:88:8c:a1:ee:c4:da:8b:af:05:a7:e8:8c:6b:dc:fb:da:6a:
43:81:fb:01:89:ff:14:06:d8:15:d8:ea:06:1c:f2:7d:e8:e3:
5a:b0:50:bf:9a:10:7c:d3:e5:4d:bc:05:10:35:a2:56:6e:47:
fd:ca:58:c7:81:02:ba:b6:7d:5c:91:43:8d:92:c1:50:50:86:
fe:fb:ba:9a:7e:99:7c:bd:f9:a0:d3:1c:d4:59:4f:95:a6:0c:
f5:14:09:a9:3e:c5:64:0f:60:b8:95:1e:87:a3:da:9e:13:88:
0a:e8:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:00 2024 by rpki-client on console-ams.rpki-client.org