Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: /rmV2Qi6HzutUGM0EzZNxhTaNl1I/mOXt+vS+jbdLt4=
Subject key identifier: 44:A6:8F:43:A6:DF:E2:84:1B:43:8D:60:F7:A8:29:E5:75:3F:6A:D1
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 019512106791B747B8E0B2272C5DF7BC0261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:19 +0000
Manifest this update: Mon 17 Feb 2025 04:00:19 +0000
Manifest next update: Tue 18 Feb 2025 04:00:19 +0000
Files and hashes: 1: XReUfUCxwWQCEZZLX8meeDSJnWA.roa (hash: RZiWRDg+Pjcy7sZ6mPvtsgj18CRvgPEttJrCsz0Vu30=)
2: kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa (hash: ZbzSM0uFkPduXfw6dGmuL2iFxgukpkp+E6XskFGzTX4=)
3: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: c3yetM2Nz48tG7Fv7y7MuQ++ohqCw8MPYO660y4RzP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:67:91:b7:47:b8:e0:b2:27:2c:5d:f7:bc:02:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Feb 17 04:00:19 2025 GMT
Not After : Feb 18 04:00:19 2025 GMT
Subject: CN=44a68f43a6dfe2841b438d60f7a829e5753f6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:a4:7d:aa:e1:61:1d:ca:12:4c:97:82:14:
ad:5f:ff:97:4f:7c:44:2b:d5:78:2b:af:d9:bc:ac:
74:93:20:a0:d3:8e:ab:24:75:7a:ab:38:3f:2c:04:
8b:31:2b:1c:24:bd:fb:61:61:27:63:22:96:cb:5c:
55:03:59:bf:52:ae:47:f7:1a:bb:7b:45:e9:de:de:
2b:f5:62:8a:ec:21:8b:2c:61:85:97:af:52:ea:02:
0c:fc:5a:2b:89:cb:a5:be:52:c8:ce:e2:28:2c:5a:
05:6c:63:25:b4:79:8a:6e:a4:76:ee:a5:40:43:68:
fa:c3:59:5b:fd:4e:9b:28:ac:72:fa:9a:a5:bf:f2:
5a:fc:9c:4b:77:ba:4e:e2:2f:c3:40:05:41:a0:cd:
2d:73:5f:95:7f:5c:48:51:37:2b:28:67:63:07:7d:
18:64:3f:e3:83:22:3b:ef:f3:db:20:1c:e1:96:03:
94:44:ea:61:1b:87:23:00:a6:3c:db:ac:34:a0:ec:
0a:93:9e:f0:47:ae:aa:15:70:e5:15:79:94:a9:64:
55:86:29:fd:b6:e7:1d:9b:be:54:0e:b8:2f:35:fc:
2c:76:35:a2:4d:7d:df:27:55:ea:4a:90:be:f9:2a:
7f:f6:78:b1:b3:0b:df:ec:ba:52:da:d8:5f:47:e8:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:8F:43:A6:DF:E2:84:1B:43:8D:60:F7:A8:29:E5:75:3F:6A:D1
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:79:40:ba:42:09:84:2e:df:02:3f:e7:cb:89:97:8c:54:
3a:f0:0a:dd:1d:39:04:a6:59:62:5f:47:b1:ad:0b:a6:ec:c3:
17:ea:8b:c0:25:a8:8b:bc:53:ba:32:43:93:9d:1f:6c:8b:d6:
81:19:3b:66:61:24:1a:bc:a6:7e:55:2a:d9:96:ed:1c:fa:4d:
29:c3:45:2a:73:63:ed:7c:a4:28:09:e6:53:53:93:73:50:88:
bd:5a:6b:5b:eb:4c:28:50:78:f3:ad:a5:8d:6d:98:99:3e:81:
fa:a6:94:f5:a1:8a:82:b9:e3:95:cc:98:12:55:8d:a6:5a:64:
83:41:6d:b3:6c:0a:0a:c3:db:32:d7:8c:69:33:79:8c:d2:5a:
ab:96:e1:8a:bb:56:c0:0c:54:a0:54:82:d4:13:b5:74:8d:11:
17:40:7b:2c:a8:b7:38:04:eb:a1:b5:08:99:3b:78:ad:76:1c:
dc:85:5f:03:63:2d:20:e1:16:84:7a:b4:cc:79:49:2a:94:61:
c4:b4:88:41:dc:e0:d5:d4:fa:74:77:38:2c:6f:68:b2:b1:72:
fe:f3:5d:94:15:c7:f3:e4:7a:da:30:7c:00:f1:28:91:76:8a:
ee:b1:0d:1a:16:23:e4:99:28:15:28:77:80:41:77:ca:1a:7b:
58:02:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:50 2025 by rpki-client