Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: G+RLQtedPVR4l/ZvWzoEvmUFy2KoCXEXD1ogwapH4ZY=
Subject key identifier: EF:6D:4E:66:DB:C4:79:AB:40:98:4E:29:A4:85:17:24:90:44:6D:CF
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 0194C387DD460681DEDCEC3A9705B5ABECD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 94
Signing time: Sat 01 Feb 2025 22:00:48 +0000
Manifest this update: Sat 01 Feb 2025 22:00:48 +0000
Manifest next update: Sun 02 Feb 2025 22:00:48 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: xl9z/bi8VtIC1x1WKuGBubhVACmPR8vf1mvq650/nPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:dd:46:06:81:de:dc:ec:3a:97:05:b5:ab:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Feb 1 22:00:48 2025 GMT
Not After : Feb 2 22:00:48 2025 GMT
Subject: CN=ef6d4e66dbc479ab40984e29a485172490446dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:29:cb:e3:99:6b:10:d4:f1:2b:1d:e8:a1:
39:27:75:f4:13:5e:19:8a:a0:0e:23:b1:3e:ce:8f:
51:94:0e:64:ca:49:68:73:b8:4b:4b:04:8e:fa:2c:
7c:09:be:2f:87:ea:c6:d1:6f:d7:4d:04:19:98:af:
4c:6b:3f:e5:48:34:80:ee:ea:bb:da:3c:bf:b0:08:
70:6d:92:f0:47:9e:ec:e0:b1:b4:5a:e2:2b:ea:89:
3a:62:5b:78:6f:bf:9c:6b:55:dc:b0:02:37:d1:69:
82:41:c5:a7:87:3d:cf:c8:36:77:b0:7a:18:52:35:
94:af:ef:d6:35:5c:6b:44:67:b9:fd:58:00:2d:0b:
29:e6:a6:bb:3e:3b:83:16:f3:77:2d:35:e5:8f:8b:
38:e3:a5:c4:1c:cf:2b:d6:74:0b:a9:94:46:99:ec:
74:66:d7:7b:ba:ee:03:88:06:1d:66:1b:6c:49:a1:
a7:33:1e:37:69:1d:7e:4d:f8:36:30:24:a6:ac:e3:
0d:1f:dd:3e:86:74:7f:43:5b:ea:89:7b:7b:b8:2b:
61:5e:0e:56:dd:68:9b:ff:16:25:21:d9:9a:a9:68:
79:6d:91:45:7b:9a:9a:0e:b4:f1:18:a6:b9:ec:dc:
56:12:a4:9a:09:32:4d:26:c6:70:68:f5:1d:c8:d3:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:4E:66:DB:C4:79:AB:40:98:4E:29:A4:85:17:24:90:44:6D:CF
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:17:ef:6d:6a:a2:4f:0e:89:c5:52:79:c6:d8:d9:7a:57:
58:25:d2:be:35:7e:04:10:38:53:95:df:85:b7:0a:df:8c:d1:
a4:eb:11:75:d0:0d:f5:4f:a7:df:4d:fd:7e:43:c8:09:71:45:
ad:67:87:b3:96:91:f3:98:53:b9:bb:a0:f0:6d:42:75:77:39:
fb:b1:1b:7e:a3:5a:32:77:11:a2:11:a9:b9:73:32:52:79:67:
09:61:9f:b1:dd:35:8f:60:73:2d:48:e5:7d:97:c7:47:8c:4b:
43:38:ed:78:d2:92:b5:9f:e9:ff:cf:64:bc:0a:f9:c7:a7:26:
1f:09:c8:b2:2b:4b:06:d5:1a:47:74:52:9a:2c:f5:c1:d1:d3:
5c:f3:ff:e6:2f:25:d8:5e:14:16:b1:6b:94:9c:6b:22:20:85:
b8:e9:6e:9c:73:8d:e9:4a:b2:55:c4:75:9c:10:c0:b8:7d:99:
93:4d:ad:29:27:bc:a0:65:7a:60:38:5d:d3:ef:b3:8b:95:ef:
0f:ab:78:9a:91:c3:23:7e:b6:00:04:2e:e2:5a:22:cc:57:06:
95:33:43:4b:c2:5b:c8:d3:8c:01:01:46:c3:11:d5:3a:9e:bb:
95:0c:3b:4c:3c:b5:81:f3:e1:37:e6:3c:93:8b:c9:9d:93:ac:
80:9f:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:24 2025 by rpki-client