Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: zjYUSbOAX+gCaMAkGLCjqmDgIN9+5lbCxLlZ6giBY9Y=
Subject key identifier: A8:CE:A3:B6:A3:9D:8E:3B:E8:78:0D:22:F5:FB:89:62:92:FE:6B:3D
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 0194C42C19AF7C48618EDA06ACDA4A0CA4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 01:00:11 +0000
Manifest this update: Sun 02 Feb 2025 01:00:11 +0000
Manifest next update: Mon 03 Feb 2025 01:00:11 +0000
Files and hashes: 1: gROQX262hBLEAaMQi9RZD0slHEs.roa (hash: KRs0pMeE32FkERm2kWqQrSa0jY8OZzctwZkQ2Bh+yr0=)
2: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: sxMjyg+j8pmaPJ9mtrltbhKUZBbgMsM5hvXBQw8aQf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:19:af:7c:48:61:8e:da:06:ac:da:4a:0c:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Feb 2 01:00:11 2025 GMT
Not After : Feb 3 01:00:11 2025 GMT
Subject: CN=a8cea3b6a39d8e3be8780d22f5fb896292fe6b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:d8:d9:1d:9d:81:09:86:36:d1:a2:6b:fa:
33:0b:13:64:db:aa:24:85:d7:b7:50:fb:42:0f:ae:
d3:60:04:34:ce:96:61:b6:47:63:20:ae:d2:22:c8:
d3:ef:cf:7f:76:bf:3a:ff:cb:c9:5b:cb:16:7b:9b:
af:0a:94:a6:e8:e4:6b:b2:3e:80:c1:20:4d:3f:3b:
70:dd:cc:91:28:63:1d:13:77:2b:a4:68:a6:3f:79:
13:b1:9f:65:c8:dc:1b:86:36:e2:fe:2f:fa:46:cb:
80:e1:ea:82:60:46:01:a8:76:37:7a:d7:fa:b8:ee:
26:48:d2:b8:82:38:95:0f:05:93:7e:f2:28:af:00:
9f:fb:8b:37:7d:84:23:61:e4:f1:43:14:d4:73:d5:
38:63:b9:b7:18:24:30:33:f4:7c:a7:3d:3c:ce:ec:
75:cd:9a:a1:18:a4:3e:bc:7f:51:b2:6d:5b:b8:30:
fd:5b:63:d3:5f:97:82:ef:76:4c:a2:72:68:74:ac:
3b:d9:68:d0:25:ea:af:64:9b:07:ff:6e:62:39:22:
14:db:8a:b2:47:0f:b4:10:85:58:8e:04:cf:f4:5b:
10:26:d3:8b:10:bb:2a:11:7d:2d:49:73:91:2b:0f:
b4:2f:10:90:7b:fe:6b:b5:51:e3:de:64:8d:6b:64:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:A3:B6:A3:9D:8E:3B:E8:78:0D:22:F5:FB:89:62:92:FE:6B:3D
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:7b:88:e2:e4:ba:0e:ce:1d:a0:4c:59:a5:28:fa:03:e2:
2f:10:06:cb:69:06:36:7e:e7:2d:5a:ef:b9:99:c8:75:1b:68:
76:65:4d:71:de:05:6d:17:55:fc:78:5e:76:e5:f1:b3:e2:03:
3b:df:54:0c:b0:4f:7d:43:8c:22:7f:b3:06:ef:72:b9:d6:d7:
d8:b7:de:03:a1:8b:0d:84:b7:57:63:c7:98:52:05:ef:02:01:
60:f0:2f:9e:24:c9:3b:89:9c:27:2b:c0:d1:c7:81:31:96:15:
3c:02:cb:fa:f0:38:b3:c3:cd:54:e1:22:9a:c0:47:c5:29:7f:
ea:75:bb:e9:8f:9d:c9:5e:d7:4f:79:5c:61:ab:46:17:6a:db:
73:0e:08:51:6b:6c:2e:df:8c:64:8e:42:bc:bc:49:39:d8:fd:
1a:39:86:8c:9b:16:a9:e8:30:75:d6:56:67:c4:15:61:b8:f7:
4c:b2:7b:a9:2f:6a:b5:67:20:97:fb:33:19:83:89:b7:05:d9:
9b:de:95:48:24:2e:e9:53:67:32:5a:7f:5b:e0:18:0a:94:4e:
09:86:70:93:74:10:88:41:9b:ae:4b:cb:b2:d1:c5:52:60:a8:
98:b0:1f:28:74:5d:ff:3e:3d:e8:5f:f3:5e:03:33:6a:28:7d:
e5:e2:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:52 2025 by rpki-client