Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: MKtm68T9a4273A1meSTssAAFuVzywKI0ZJvmkES/1pY=
Subject key identifier: 82:5D:68:43:A1:B2:1C:E0:89:06:CC:51:8A:36:1C:2C:52:72:64:C5
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0194C499E4A230573274F29DA8B0CF3BB923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 03:00:07 +0000
Manifest this update: Sun 02 Feb 2025 03:00:07 +0000
Manifest next update: Mon 03 Feb 2025 03:00:07 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: ytNcngG8mIWNSJHJan2VKrpt57rq62wLQkO68nXK6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:e4:a2:30:57:32:74:f2:9d:a8:b0:cf:3b:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Feb 2 03:00:07 2025 GMT
Not After : Feb 3 03:00:07 2025 GMT
Subject: CN=825d6843a1b21ce08906cc518a361c2c527264c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:49:e5:b3:f2:d4:95:65:cb:cf:83:20:63:
37:0e:cc:c7:be:2b:d1:dc:33:d0:7d:3e:ef:02:bc:
2e:ed:76:1a:09:15:4d:75:e5:b7:d4:89:ca:3d:9c:
e7:5e:f9:98:4a:a0:49:43:36:4d:74:a6:b7:b0:db:
62:50:e5:5a:d1:cc:ca:54:bb:8a:6a:72:0c:96:a4:
f9:53:ee:7e:21:a4:c8:e0:f9:74:bc:83:c0:5e:e7:
72:82:d6:ac:ff:c4:00:45:f4:20:4a:7b:d3:75:4b:
15:2d:42:4a:f1:ee:f3:88:da:64:62:c9:89:af:6f:
1c:4b:fb:78:db:40:7d:67:87:76:c2:00:74:b8:aa:
d9:93:e0:c2:50:5f:a6:ca:a0:60:18:d5:c8:fe:da:
0d:bf:e3:f2:d0:cf:94:35:8d:ea:8d:f3:04:24:97:
e2:9f:a6:1e:02:b1:1e:23:8d:46:d4:84:eb:ba:87:
cd:b1:57:71:d7:1f:19:a3:fe:f7:de:3e:3b:69:28:
20:54:cd:a6:b5:fb:ba:9d:62:c9:64:cc:d2:7a:d1:
a0:ee:ed:98:24:a9:9b:ed:f2:62:6f:17:64:42:32:
9b:12:3e:67:ce:86:d7:13:f9:65:94:f8:3d:11:cf:
c3:b6:f1:d0:5a:bd:cb:0c:65:95:2f:1a:cf:4a:00:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:68:43:A1:B2:1C:E0:89:06:CC:51:8A:36:1C:2C:52:72:64:C5
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e7:f2:3e:e5:13:52:1d:e2:9e:5f:94:cf:76:86:b6:15:c0:
32:af:31:35:02:99:d7:35:2f:d9:d9:29:8d:e7:97:51:29:54:
37:3e:79:92:1e:87:33:55:5f:a9:9e:35:b8:73:41:b5:e2:8e:
02:dc:bf:ee:1d:e6:ec:80:d2:b8:05:56:4d:ad:20:3f:4f:36:
ee:00:9c:bd:9b:52:db:11:5c:a2:6d:a4:71:58:77:28:92:67:
93:5a:5d:ad:dc:1c:10:8e:ac:a4:a5:ea:ae:7b:9b:dd:18:11:
e1:98:c5:bd:5b:1a:54:11:62:e1:19:69:f5:16:d0:db:ed:11:
87:f8:ba:de:2d:6a:68:d1:4f:03:72:40:b2:ad:0e:cd:d7:56:
f7:74:55:a0:93:1b:c9:10:96:2a:85:6a:12:1f:6c:55:f2:93:
fc:9f:82:5c:58:a9:f4:04:c2:07:68:1f:22:b5:f5:29:b2:69:
01:02:8b:5e:95:94:16:4e:fe:47:db:ae:fc:59:2a:29:5b:62:
4c:2f:f2:77:9f:ce:d6:35:19:6e:c6:ba:76:b1:22:ea:76:51:
80:dc:40:d3:36:2e:77:e1:a8:d5:1b:56:36:2e:ef:35:85:33:
e7:64:0b:ea:d3:57:31:83:01:cb:8b:bf:bd:05:b9:4f:ed:2d:
3e:c3:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:39 2025 by rpki-client