Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: QlTOozZzhvB2R5tJGwigNZW55BURiDDZq68KH0rbtZE=
Subject key identifier: B1:B0:AF:30:5A:67:AA:73:2C:8D:74:B4:91:71:66:01:32:C9:1F:65
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019511348D63668DB822FAFD97A70568D4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 00:00:11 +0000
Manifest this update: Mon 17 Feb 2025 00:00:11 +0000
Manifest next update: Tue 18 Feb 2025 00:00:11 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: K2J8lNRQJ5jyo1NIFiOIElf9psZrr+ekqwDIjrkgVcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:8d:63:66:8d:b8:22:fa:fd:97:a7:05:68:d4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Feb 17 00:00:11 2025 GMT
Not After : Feb 18 00:00:11 2025 GMT
Subject: CN=b1b0af305a67aa732c8d74b49171660132c91f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:35:31:d5:eb:d5:84:44:53:ed:1c:18:fd:
a0:0d:20:10:69:cd:ba:4b:37:11:c3:7a:e3:90:ad:
ca:23:22:24:b0:f5:9e:6a:bd:23:de:e9:26:56:02:
4a:c5:d3:d3:69:a3:81:bb:5f:1f:e3:fb:98:09:c8:
db:f3:b7:00:4e:77:54:ec:75:9e:ce:09:2e:48:c9:
29:9a:84:e2:c0:69:75:98:bf:6a:11:c9:4e:3b:bf:
2c:9c:ad:1e:5b:e7:44:fe:64:f3:4f:b3:17:04:33:
d2:db:40:b2:64:e4:b3:cc:ca:94:8e:47:67:5f:5e:
55:56:cd:37:ab:e9:bf:ec:1b:70:e8:5c:27:5d:3c:
f5:e8:6d:5f:d1:cd:45:81:58:3e:70:1f:4b:15:6e:
68:d6:d4:0d:db:9c:f5:2d:4b:de:15:d7:67:49:3b:
c1:d4:90:cb:fe:c7:99:21:bd:de:19:39:44:93:15:
ee:7c:87:9c:45:fb:f4:40:af:86:3b:b9:b5:52:17:
d2:ad:0e:79:49:df:4e:b5:2b:21:e8:22:df:74:66:
0d:4b:91:2c:e9:c2:3b:db:23:25:8c:1b:10:04:11:
27:6b:b1:00:6d:c4:bf:36:c5:44:48:0e:a6:c3:94:
a5:96:e1:78:96:8b:16:03:32:4e:cd:3a:04:cc:d6:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:AF:30:5A:67:AA:73:2C:8D:74:B4:91:71:66:01:32:C9:1F:65
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2a:da:a5:8b:07:58:35:d3:92:2a:98:5e:de:fb:8c:f4:8f:
71:9e:47:be:c7:32:6b:d4:cd:62:5b:8d:b2:ec:e9:76:36:02:
49:b1:d9:02:76:c4:d4:f8:7b:a7:f5:91:45:db:58:6d:66:0c:
c4:ff:80:67:00:91:dc:a1:d5:7c:af:25:a2:1b:c1:e7:d5:db:
82:26:fa:c4:fa:09:c8:19:86:25:c0:9f:7b:dc:5f:25:2d:7a:
8b:17:0d:f5:71:f7:04:db:ee:a7:79:af:1e:c8:24:7c:36:1d:
08:38:dd:3a:0e:e0:62:b4:5b:ec:6b:d1:9c:09:92:83:09:46:
e3:48:1f:5f:60:3e:c8:05:13:2d:2d:f4:61:45:e9:0d:cf:6f:
8b:85:23:2a:54:8f:5f:99:1a:b0:79:aa:5d:ec:5c:13:06:66:
54:d2:a2:39:3a:82:83:21:21:fe:bd:2e:8e:60:87:78:76:d1:
df:b0:be:bc:fb:a5:8d:0c:e6:72:17:c9:e1:8f:3a:e7:25:1e:
74:0c:2f:d2:c2:aa:10:3f:b5:91:a9:97:06:24:f3:ec:39:ed:
a3:63:86:3e:18:42:bb:cd:00:7e:0e:2f:9e:bc:2c:16:bc:1f:
41:59:14:90:93:90:46:c3:a0:5d:74:a5:a2:1d:26:1f:4c:0e:
91:60:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:15 2025 by rpki-client