Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.mft
File: ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.mft (raw, json)
Hash identifier: Jqe0IYIpkecZzq9s1h66CgDFoFgeBV4r3EYSxhLCNgo=
Subject key identifier: 0A:10:B3:B1:B6:68:D1:F3:16:4E:90:3D:8E:11:B1:32:7A:D0:66:05
Authority key identifier: 64:16:74:C4:32:88:68:D4:6E:B2:FF:2A:B4:C6:7E:E6:79:6A:F3:F5
Certificate issuer: /CN=641674c4328868d46eb2ff2ab4c67ee6796af3f5
Certificate serial: 019095A6A351DC0D7CE016DD961A022AAB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.mft
Manifest number: 032D
Signing time: Tue 09 Jul 2024 04:00:44 +0000
Manifest this update: Tue 09 Jul 2024 04:00:44 +0000
Manifest next update: Wed 10 Jul 2024 04:00:44 +0000
Files and hashes: 1: ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.crl (hash: 9NgLusXg/wfNoI7zQ2qZSk0cSSXI84jo7/N6IBlaKtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jul 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:a6:a3:51:dc:0d:7c:e0:16:dd:96:1a:02:2a:ab:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641674c4328868d46eb2ff2ab4c67ee6796af3f5
Validity
Not Before: Jul 9 04:00:44 2024 GMT
Not After : Jul 10 04:00:44 2024 GMT
Subject: CN=0a10b3b1b668d1f3164e903d8e11b1327ad06605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:7e:83:62:71:eb:23:90:34:4e:4b:ef:82:
93:10:1e:8f:af:4e:e7:0a:34:c0:55:17:76:c7:41:
55:d7:99:e9:2c:ba:67:b0:38:c8:a8:b8:67:d0:ce:
83:b5:78:cc:fe:8c:6f:e7:fd:58:a4:69:59:2e:57:
fd:06:89:85:0d:43:4e:11:5a:07:80:32:1a:a3:c2:
c1:ae:af:ee:f4:07:22:b2:3b:64:ff:d9:d7:3c:8e:
16:bf:08:6e:3f:6c:89:58:80:11:4f:1f:d4:7e:29:
2a:41:bb:ab:2a:ee:e7:e2:31:34:4e:50:92:f4:02:
fb:9c:91:12:13:df:10:0d:f5:f1:12:42:68:da:3a:
11:00:f5:c5:f8:91:24:4b:8b:57:08:27:83:34:2f:
99:43:d0:a3:ef:0c:94:43:b8:65:db:18:85:6b:61:
60:1e:29:24:c8:ba:d2:5a:c0:ac:3b:1f:79:b5:e9:
76:9d:26:30:09:42:85:d9:df:f8:79:b9:f2:cf:c7:
e1:32:2d:d6:ad:1b:ba:0b:c0:a4:92:20:b2:43:67:
4a:c4:d7:63:fd:d8:a5:98:1b:7f:27:2c:26:b5:34:
79:85:f7:8c:28:71:06:6c:09:3f:06:8c:f3:00:47:
99:30:08:a0:0b:9f:6a:0b:5f:c8:38:ea:15:e5:d6:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:B3:B1:B6:68:D1:F3:16:4E:90:3D:8E:11:B1:32:7A:D0:66:05
X509v3 Authority Key Identifier:
keyid:64:16:74:C4:32:88:68:D4:6E:B2:FF:2A:B4:C6:7E:E6:79:6A:F3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/903edf-39c8-4a9c-9937-40a977109505/1/ZBZ0xDKIaNRusv8qtMZ-5nlq8_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:51:35:84:1a:b1:48:25:1f:2d:09:a0:74:0a:05:90:d5:28:
07:56:0d:dd:89:9c:f0:2a:1c:5e:b5:22:7b:c6:cc:74:c0:6b:
4d:4f:42:68:e1:2f:bd:49:cd:03:6a:54:9f:4a:19:eb:48:2b:
e6:60:a5:d6:0c:7c:50:a9:e9:50:1c:91:d8:10:b1:f1:99:9b:
f4:c4:b3:58:2e:03:de:2d:0e:d8:2d:24:db:05:97:0c:cc:15:
11:d4:01:c1:36:a1:74:2d:44:a9:12:9e:20:c6:a4:e4:7b:ce:
6b:75:17:a4:4a:9f:16:0d:e8:b8:f3:81:87:29:f8:70:09:3f:
9a:c8:4f:7f:30:6b:5c:2f:64:2d:d1:bb:dd:50:bc:07:27:bc:
7d:1d:48:b6:2a:8a:48:15:0d:40:c4:b8:a6:d5:66:27:7b:e1:
f3:41:bb:b7:fa:2f:aa:20:aa:4a:20:a5:18:2b:f1:79:52:d8:
a2:28:c7:28:1d:82:4a:21:f3:03:37:98:fd:a8:89:0f:f1:33:
02:ec:e6:92:6e:d2:9c:f4:74:e7:8b:ac:da:cf:7c:cb:30:56:
43:e6:c4:bc:4e:42:0f:35:74:bc:65:07:c9:e8:dd:f3:7d:3b:
d5:62:aa:4c:aa:c2:46:4f:86:68:43:6a:f6:37:a8:bf:8b:41:
36:be:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:35:00 2024 by rpki-client on console.sobornost.net