Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: MOQNDXqzti0k3HiVaa7gbetktHxeuTklASBGXl9qWJI=
Subject key identifier: 95:03:9F:C2:BB:40:AF:DB:71:9C:75:DF:84:40:C0:11:6E:37:5C:6B
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 0194C3881A5A17953A0741DEF1E09E376F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 41
Signing time: Sat 01 Feb 2025 22:01:04 +0000
Manifest this update: Sat 01 Feb 2025 22:01:04 +0000
Manifest next update: Sun 02 Feb 2025 22:01:04 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: mIwIy26EXYCwUK0lPGhZ21NlRIaYlSf6sBzcwT7OuxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:1a:5a:17:95:3a:07:41:de:f1:e0:9e:37:6f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Feb 1 22:01:04 2025 GMT
Not After : Feb 2 22:01:04 2025 GMT
Subject: CN=95039fc2bb40afdb719c75df8440c0116e375c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:13:62:03:b9:f3:27:2b:0a:ae:90:d2:8a:
08:dd:0f:8f:1a:d8:c1:57:74:d3:25:f9:d4:ab:5d:
5a:50:ef:78:88:ed:8d:33:26:e3:f4:bc:86:18:2d:
3c:de:7b:87:33:e2:04:ec:1e:50:8a:71:cc:b0:f1:
0b:b1:6e:94:db:48:9e:f2:fb:3e:e4:e3:cf:d9:20:
36:50:e5:4f:91:4c:c9:6d:c5:b3:50:5a:a5:3e:28:
14:9a:bf:5f:ca:c5:66:81:bf:38:6b:f6:71:99:02:
6e:21:fb:33:0b:c8:fb:2f:4c:f9:a3:08:bd:4e:d7:
33:aa:ed:ed:53:91:5f:0e:97:15:5b:71:7a:35:48:
6b:dd:a2:1e:2e:d7:be:4f:d6:37:e5:bd:c5:87:7f:
54:93:23:d7:30:5c:72:aa:8c:5d:21:38:1e:dd:3d:
76:d9:96:34:a7:bf:8f:71:d1:d4:4d:b1:1f:23:51:
a5:08:41:2c:76:72:c4:27:18:e1:22:bd:e2:1f:a0:
86:c8:c1:b3:5c:12:b9:53:8d:ff:7f:ff:43:0c:e5:
33:a9:46:ac:31:df:60:06:3b:66:e9:85:f3:f9:5b:
07:38:a3:8a:25:a7:75:80:8f:9a:5b:dc:97:a0:72:
63:01:6b:4b:92:d9:99:d4:a7:1d:34:41:07:a8:74:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:9F:C2:BB:40:AF:DB:71:9C:75:DF:84:40:C0:11:6E:37:5C:6B
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:03:fa:97:98:ec:1d:be:1a:b6:a7:b0:c1:7a:e6:4a:0c:17:
f8:a3:29:b2:5e:cb:4d:20:22:82:e0:37:87:64:36:fe:24:e5:
14:17:30:6c:2e:24:df:d3:b2:73:90:65:45:59:ff:c3:17:3e:
bc:3b:58:ba:0d:4c:96:e0:02:ce:35:cd:42:e2:e0:29:6c:c5:
35:78:47:51:4c:af:7b:ff:9e:72:08:29:48:2d:0f:c5:e4:be:
99:de:16:f1:86:bf:2b:08:2a:a0:85:48:ea:f8:be:b3:43:e1:
a5:3f:98:db:07:c5:fd:f4:f6:f7:58:4d:0f:c3:7c:78:af:00:
3a:d0:7c:30:a9:51:9e:93:27:3a:21:92:e7:5c:98:c7:ab:32:
24:e4:70:18:6d:63:e3:58:ad:a6:2a:4b:8e:50:be:a8:90:fb:
80:ed:ba:80:01:a4:20:f1:af:4d:49:d7:03:04:e3:b5:b8:a0:
7c:28:de:17:e4:69:b0:bd:97:9f:24:2c:fc:36:3d:07:98:11:
46:d2:ee:ed:25:20:18:0f:f7:7c:5c:6b:16:26:1f:40:12:bb:
10:c5:7c:a3:34:34:b3:d9:cd:4b:89:71:ca:df:da:43:0f:c4:
f9:b5:0d:bb:eb:2c:2c:78:60:a0:ef:37:6b:c1:d9:d8:9b:b9:
55:c2:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:48 2025 by rpki-client