Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: NX3/L0FkBud/Qmns+dlH1InM0Q1z5o7L+v6XtGPJiEU=
Subject key identifier: B7:28:30:39:A2:B5:55:7C:B5:67:27:45:86:5D:F7:D5:15:2B:83:1F
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 0194C4631C75DF2DA98F0BB932C2CB5364A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 0D95
Signing time: Sun 02 Feb 2025 02:00:17 +0000
Manifest this update: Sun 02 Feb 2025 02:00:17 +0000
Manifest next update: Mon 03 Feb 2025 02:00:17 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: Y6LmjGSVMdHVjqwm/GuU7FoM59PP0R0pDLnCu2qJoeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:1c:75:df:2d:a9:8f:0b:b9:32:c2:cb:53:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Feb 2 02:00:17 2025 GMT
Not After : Feb 3 02:00:17 2025 GMT
Subject: CN=b7283039a2b5557cb5672745865df7d5152b831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:22:9f:f8:55:04:dd:7f:ca:c7:20:9b:e5:
a2:42:af:21:ba:9f:f2:c7:ff:24:79:95:c4:7f:d7:
93:06:15:28:68:4e:44:3d:a8:1b:84:32:e8:c4:8a:
5a:2a:11:64:20:f0:de:76:c6:6a:05:98:bd:49:86:
be:ab:7d:d0:c7:8a:ff:f1:f3:bc:f3:99:7a:6f:83:
4e:a3:ee:cc:9b:af:c4:af:7d:91:af:88:46:24:8f:
9a:4c:cc:e6:66:92:17:38:66:34:f2:8c:58:11:ee:
41:85:2c:b4:43:26:4f:b7:09:1e:8a:5c:1c:fe:3c:
07:1e:39:d8:c8:9a:3d:24:d4:ef:85:ae:e7:a1:98:
81:22:73:4d:b2:ed:93:ef:3c:ce:f3:52:e4:13:c5:
d9:26:62:06:4d:8d:65:bb:46:7d:b8:28:c7:1f:cb:
b5:03:95:28:67:55:22:10:49:be:9d:08:f2:5a:01:
a1:67:f6:cc:c1:fa:81:46:85:42:ec:fb:9e:71:63:
ea:26:8e:ed:70:5a:a3:87:f1:e0:8f:ac:60:86:7d:
23:7b:b9:a9:9a:ff:82:a6:19:7d:d3:11:7a:22:bf:
f7:58:91:54:d5:05:2b:28:67:f8:92:4e:df:ec:98:
30:d0:87:95:9d:58:f7:79:bc:f4:2a:5c:9b:d3:89:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:30:39:A2:B5:55:7C:B5:67:27:45:86:5D:F7:D5:15:2B:83:1F
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:48:1f:e2:d8:38:7e:9f:af:c8:4d:a8:c4:eb:58:a8:1a:db:
7e:18:ff:91:2b:0d:9d:f1:cd:a2:82:37:7f:4c:09:56:ab:51:
82:40:94:80:e7:1f:34:53:e1:57:97:0e:f9:fb:11:17:3a:0d:
cb:f4:85:21:1d:d1:4e:fe:56:b3:4c:70:e5:16:04:84:b7:b4:
1d:1e:82:ed:67:7d:aa:13:ec:bd:ea:35:02:5d:a8:a2:fe:00:
07:20:21:0b:cd:b5:35:95:9e:79:f2:f4:0f:38:38:5a:01:9b:
eb:09:87:2b:5b:b1:b9:f7:2e:ba:19:a3:b9:30:65:a6:de:eb:
96:17:96:70:62:ed:97:3c:f1:6e:4d:1d:eb:d9:bf:38:b0:c1:
50:25:e7:66:02:02:8b:ac:a3:8f:b0:82:92:d3:07:dc:51:f9:
0b:45:22:8d:76:68:42:f7:93:6e:c5:6b:47:c5:fb:e0:ab:f6:
e2:03:d9:29:9d:55:45:38:d8:d7:42:44:e7:c7:8c:6c:b6:7d:
00:58:4b:12:fa:48:5e:5c:64:7b:61:5f:d9:1f:67:e4:fc:64:
e6:45:bd:ad:a5:2c:f8:f8:4d:f5:42:ce:81:21:31:d3:a2:c1:
d3:cc:49:bc:a9:16:27:30:f4:eb:a2:be:ab:b0:7f:a2:37:77:
da:96:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:03 2025 by rpki-client