Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: 8k0a86aPJW9scD7Ce+kMn2xk21ZPftBZIVJHChv9rw8=
Subject key identifier: 21:89:CB:92:A6:A7:3F:37:B0:4A:30:44:70:FA:E4:E9:2C:4F:1B:D5
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01935162C79D84BA4728352B025E0ABAECFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0589
Signing time: Fri 22 Nov 2024 01:00:48 +0000
Manifest this update: Fri 22 Nov 2024 01:00:48 +0000
Manifest next update: Sat 23 Nov 2024 01:00:48 +0000
Files and hashes: 1: A1_KgY5Uq9rNxJ4v3tZkPRUdhxE.roa (hash: qqdElvurhMLT66aDDQk7DC2eiJbzw0Mw1Yc8hyIryEY=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: jMyBz0qCs6c3lXDiW/lOvOdiKJvMPkQ1UHDFdTNY1Fc=)
3: WfKb2A2IRAr2logNY8dVMMyvU8E.roa (hash: 64QpnAndau8ZgGnIz0/p8hxVxiW741NDTR62Qv5+iYA=)
4: meioddi_bz00iSxxVWYXRsgnbVs.roa (hash: Z4IPODByqoTYZB4JJc6M2c/VrA17/2toE9Ct9n22EjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:c7:9d:84:ba:47:28:35:2b:02:5e:0a:ba:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Nov 22 01:00:48 2024 GMT
Not After : Nov 23 01:00:48 2024 GMT
Subject: CN=2189cb92a6a73f37b04a304470fae4e92c4f1bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:46:00:00:5b:c9:5a:4b:17:df:6c:1b:13:
30:2e:3f:e7:b1:73:b6:06:58:5b:23:32:4f:84:d3:
21:70:6f:d1:a5:6a:3d:b0:03:44:a6:d3:5c:d0:4b:
69:fb:03:0b:ca:18:1f:29:ae:38:dc:aa:c4:67:3b:
52:eb:b7:3c:5c:a9:e0:a0:57:80:e2:b4:08:ba:d2:
73:1a:8f:04:82:32:4e:fc:38:c5:08:04:78:e2:0c:
6f:ed:32:b5:a7:93:dc:d0:3c:d3:d1:da:5c:9d:75:
2d:84:a2:f6:f0:80:f4:da:48:e3:9e:c4:e4:5c:10:
85:1b:6b:ab:59:e8:77:02:71:25:5f:41:67:d1:9f:
ea:d6:4d:f2:0f:f2:c5:b2:26:2a:3f:b4:03:d0:07:
df:25:3b:69:04:36:2a:0d:61:59:4a:b2:9d:f0:d6:
a0:6f:00:99:61:d8:06:02:37:f2:c6:ab:66:8c:a0:
d9:2a:34:dd:f8:54:bd:dd:f1:34:71:e7:d1:b9:30:
7c:a0:86:74:e0:96:12:1a:fb:29:26:44:13:22:44:
f1:4b:3a:51:45:0a:da:9a:a7:7c:83:9e:3f:a5:a1:
c2:c0:cc:a8:b7:22:fb:dc:cb:4c:b0:bf:3c:89:68:
cb:b9:d2:9c:d1:90:48:04:1b:36:c5:17:0a:b6:98:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:CB:92:A6:A7:3F:37:B0:4A:30:44:70:FA:E4:E9:2C:4F:1B:D5
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a7:e0:d7:98:45:1b:ef:86:3f:74:aa:f3:1b:92:66:6b:05:
47:90:79:9c:bd:d1:d8:d5:e5:13:31:a4:11:c3:c4:6a:fa:0f:
1d:0e:a1:87:25:3a:84:9d:6b:b0:fd:c0:83:d1:0e:0b:97:7b:
48:f4:a0:46:19:4c:cb:2b:f9:35:02:ad:a1:ed:be:a6:b5:60:
67:71:9c:43:4d:49:77:20:0f:9d:1d:ca:54:08:5e:52:8a:c3:
2b:18:9d:f6:a7:a0:9e:d8:e1:7c:ae:12:3a:72:dc:44:c6:fa:
65:43:33:1b:50:5d:10:e0:31:14:c6:fa:06:29:49:aa:59:c7:
68:72:85:e8:cc:c0:b9:22:24:82:d1:df:66:38:63:9d:fd:dd:
21:cb:49:24:78:3c:5b:8d:5e:1d:75:63:48:8e:2b:65:2b:32:
17:1c:d4:bc:c5:a8:fe:aa:e5:22:d5:ff:61:47:42:44:69:bf:
fe:15:16:32:b5:6a:a1:a8:72:1a:08:3c:df:6f:74:39:7e:cd:
8c:ad:8e:a8:69:ec:49:7b:15:af:45:61:8f:45:f3:f2:e4:0c:
0f:8c:3e:d8:de:62:db:74:83:2f:41:ad:da:9f:40:7e:ae:b0:
b4:e9:fc:b2:2f:f5:66:c8:8e:39:d2:9c:7a:69:c4:7d:d6:ae:
e0:d8:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:11 2024 by rpki-client on console-fra.rpki-client.org