Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: ZGaKB6WyV6z6YX8hCfHyyVP6YvQyy+mve/5KM5haJSE=
Subject key identifier: 1D:B6:5F:9C:90:AE:21:27:E2:E1:D7:02:DD:C0:C2:2C:28:54:84:F4
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 0195113539A90229D0F7C2DDA230224A82F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:55 +0000
Manifest this update: Mon 17 Feb 2025 00:00:55 +0000
Manifest next update: Tue 18 Feb 2025 00:00:55 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: fD1rn9nZyjRVlNy8A+LQpZUUpwzU6HIZtE1L8Tpsp18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:39:a9:02:29:d0:f7:c2:dd:a2:30:22:4a:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Feb 17 00:00:55 2025 GMT
Not After : Feb 18 00:00:55 2025 GMT
Subject: CN=1db65f9c90ae2127e2e1d702ddc0c22c285484f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:f7:5c:93:34:96:d5:65:82:c8:d5:3e:d5:
fd:d7:cf:c9:b0:8d:40:6e:9a:37:85:ec:fd:54:2c:
f1:a3:4a:f9:2f:1f:c2:b3:c1:2a:27:a3:04:b4:73:
49:e6:50:65:5e:0a:95:03:63:0c:b7:45:47:b2:93:
64:bd:ff:02:33:66:ee:dc:cd:5b:78:94:e4:55:de:
59:9a:61:87:78:74:23:8f:8e:61:5d:ea:23:a5:b6:
53:68:9c:8f:a5:63:b1:a6:40:69:94:08:16:32:d2:
8a:c6:db:3e:38:c1:3b:41:b6:49:96:05:d5:ae:fd:
a0:ff:b2:ea:47:97:68:c7:0c:32:4f:a3:7f:0a:e9:
fa:37:3d:86:de:92:6a:7f:ac:1c:0f:d2:28:5e:0d:
a5:ac:12:2f:0a:b2:dd:74:48:b7:e6:63:75:ea:35:
4a:db:ab:63:9d:7d:04:82:88:92:bf:f5:dc:8d:ac:
bc:ff:51:ff:c8:59:ec:0c:51:3a:f6:a3:89:0c:8d:
42:a6:24:04:16:a9:6f:bf:5f:66:d1:35:0d:90:c4:
53:62:5f:e8:61:55:4d:77:a6:d0:b2:06:66:d0:58:
55:cf:67:da:83:26:a6:6e:b6:07:12:32:e2:6f:4c:
d4:6b:30:21:a7:27:be:8e:85:61:1b:ca:b1:17:f8:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:5F:9C:90:AE:21:27:E2:E1:D7:02:DD:C0:C2:2C:28:54:84:F4
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:12:d4:b7:94:39:a7:6e:1b:56:86:7f:39:7c:74:96:cf:
b9:41:f7:20:b3:ef:1d:33:81:8a:ca:c8:85:85:a1:44:43:ec:
9e:a5:21:ea:9a:1b:c1:8d:68:0f:05:2c:0c:aa:53:1d:b0:5d:
23:f6:54:af:69:e2:62:cc:75:0e:e1:f7:2f:5a:c0:94:3e:27:
1b:5b:03:16:5f:fe:3e:4c:ff:e2:66:b9:b2:00:85:b8:c4:90:
7c:60:bd:18:35:fe:df:59:3c:2c:69:c2:c5:08:b0:a5:fd:31:
66:7b:5e:3f:7f:e3:a0:b3:df:95:68:57:5c:32:29:2e:d2:71:
29:0f:a5:3d:6a:b1:20:76:a6:eb:5e:39:5b:2d:60:1a:f7:58:
90:85:ab:d0:dd:80:be:cb:73:e1:01:3d:6f:4a:cb:12:b8:3f:
02:a5:5e:df:8a:8a:16:02:ca:28:31:25:6d:29:da:d0:b7:6b:
f4:95:ff:59:cc:a4:9a:bb:97:2c:e6:b3:60:e8:c2:64:5c:ba:
83:30:15:9a:c3:71:1c:c2:96:59:2c:5f:fb:c8:06:da:55:60:
b0:8f:fa:7d:9e:28:37:18:35:30:e9:ed:72:d4:63:b4:91:46:
09:9f:05:df:f5:f4:51:05:aa:0a:2f:76:d8:85:57:31:ee:2d:
e4:2a:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:04 2025 by rpki-client