Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: BM2EMAnN4VqK74MFdCzhg0Dx/V2OGuIb/ZLftwt6dYs=
Subject key identifier: C8:37:5A:B5:96:C8:02:C6:49:C6:8D:37:96:79:47:97:59:03:1B:D2
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019511355B933CDBC85FE9BB67FC1BDF5E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0177
Signing time: Mon 17 Feb 2025 00:01:04 +0000
Manifest this update: Mon 17 Feb 2025 00:01:04 +0000
Manifest next update: Tue 18 Feb 2025 00:01:04 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: YcQB5GCQcn+OCNTyiA4QCQ5w+wNcY3i5O3kGiSAo/vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:5b:93:3c:db:c8:5f:e9:bb:67:fc:1b:df:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Feb 17 00:01:04 2025 GMT
Not After : Feb 18 00:01:04 2025 GMT
Subject: CN=c8375ab596c802c649c68d379679479759031bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:d8:e0:cd:72:f3:76:36:db:7d:d1:72:7b:
37:db:53:d0:31:15:37:7c:50:81:4a:ca:ca:8a:f8:
cd:b1:c8:6d:93:ee:31:1e:8f:79:38:e3:4f:7c:bd:
90:3d:39:a7:f7:e8:f2:6b:12:4c:58:12:7f:a3:06:
03:01:9e:60:6c:fa:81:8f:bb:fd:3c:94:da:11:8c:
3b:f1:92:88:69:b9:93:37:16:d7:8c:05:ad:53:1e:
19:1b:ec:b3:6e:ae:26:b7:00:d0:20:7c:41:52:31:
12:ad:39:fa:05:dc:be:44:1f:c5:4b:ba:65:35:e9:
24:39:7d:07:3e:47:db:85:ba:e1:6c:b5:6b:76:26:
1a:3c:f5:ba:4b:d9:ed:95:81:6d:f6:5a:0b:84:35:
39:13:0c:70:4a:c8:ff:59:be:44:3b:b0:ae:9b:4e:
9d:ef:2f:c6:c3:24:68:5c:b2:16:28:f3:54:f3:3d:
81:aa:f6:5d:9f:25:4c:d9:c2:99:97:4e:c2:a2:a5:
a1:d6:68:58:b7:d2:25:df:29:92:1c:11:ef:78:d5:
76:bb:2d:23:82:6a:34:f6:29:4d:68:e6:7f:9f:94:
83:9e:75:d8:8e:fa:cd:14:a2:ae:bb:c4:ad:14:92:
47:e7:e2:57:20:dd:60:5b:a0:d2:4c:79:5b:b0:d9:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:5A:B5:96:C8:02:C6:49:C6:8D:37:96:79:47:97:59:03:1B:D2
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a4:ee:e5:4a:b0:f5:21:cc:47:b8:04:fb:84:8b:26:31:cf:
5e:4e:98:8a:3c:af:d6:39:91:02:7b:4d:90:41:da:94:9e:d3:
0f:d1:08:56:e8:a1:47:fb:7b:a8:fb:f9:4a:ae:c0:20:94:b0:
2b:0e:c0:de:e3:e5:91:a2:0b:ee:c7:7a:28:20:37:de:a6:97:
1c:45:2c:17:25:1c:df:33:77:5b:b7:d8:c1:d0:33:72:e3:42:
f0:c3:3b:3a:4e:ec:51:76:41:1e:6d:a8:06:55:c2:e4:81:4d:
e6:13:14:ef:a3:57:6a:e8:e6:4b:90:91:80:5d:bd:11:65:10:
29:33:9c:01:31:f8:a3:4d:c9:54:db:e1:df:29:3d:c3:ef:2c:
6a:7d:a4:dc:62:f6:4c:0a:71:70:9a:b2:1e:01:de:af:c0:b9:
8d:e9:0b:b4:cf:7e:a6:23:a6:0a:c7:19:e1:9c:10:e7:df:ca:
b8:42:b0:04:ab:96:7a:3e:36:b5:54:40:50:11:db:88:9f:0e:
be:23:c4:02:a3:52:87:12:5b:fd:8a:b7:bf:94:e0:4b:c0:4a:
21:7d:1a:a2:5c:11:3a:d1:9d:6c:7d:d5:ee:96:b2:6e:94:c9:
ed:10:3a:fd:46:df:d3:ec:00:5e:e1:cd:71:91:b1:40:18:1f:
7e:cd:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:38 2025 by rpki-client