Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: XxW4Ygw+Vlvt9YqeICY3Dop3Mw9wYQX2FOUN5g22ku4=
Subject key identifier: 01:09:E8:43:0F:1A:B7:B7:8D:18:15:84:F2:5A:C4:23:69:BD:6E:15
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 019510C7636DC1EF5239234F0AF69B7636BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 145B
Signing time: Sun 16 Feb 2025 22:00:57 +0000
Manifest this update: Sun 16 Feb 2025 22:00:57 +0000
Manifest next update: Mon 17 Feb 2025 22:00:57 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: oPXRC9q+elrZcnlj8mr1sgdLCsrjvgGUt+T5NXSE7DU=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:63:6d:c1:ef:52:39:23:4f:0a:f6:9b:76:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Feb 16 22:00:57 2025 GMT
Not After : Feb 17 22:00:57 2025 GMT
Subject: CN=0109e8430f1ab7b78d181584f25ac42369bd6e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:7d:78:42:cd:d8:e3:93:fc:4c:e2:9b:59:
55:64:c3:c7:eb:29:17:d0:3e:fb:af:9e:46:ad:3a:
45:72:4a:d5:24:db:09:10:2a:ac:43:f8:b3:76:9e:
18:06:f0:88:41:be:2c:ad:f5:1d:7e:f8:2c:c7:9b:
ce:41:51:13:29:c2:fe:a6:e2:4e:ab:03:54:64:df:
91:be:84:aa:94:2f:ef:2e:6b:11:1b:c4:1d:23:1d:
e3:28:f8:a1:bc:a6:1f:40:38:fe:5a:e1:9f:f4:95:
43:25:15:0d:c2:21:9e:a3:8c:35:54:cd:ee:87:d5:
dc:fa:10:d4:a1:a7:39:1a:02:70:ee:1d:b1:63:77:
0f:f8:c0:4f:01:fc:4f:e6:1c:53:8d:a1:ca:6a:24:
ca:a1:a5:e5:ce:56:7a:de:80:5b:97:29:ef:bc:04:
4f:46:8b:9a:91:04:d0:f6:36:81:74:5b:78:c8:af:
cd:94:60:61:0c:c8:b8:82:46:d8:11:31:c7:66:fe:
0e:f5:1d:80:0b:12:c1:62:d3:4a:dd:22:c8:04:82:
1c:2b:c7:69:5d:ba:19:32:a5:f7:c4:ed:ad:b7:f3:
d9:de:cc:50:3f:f0:c6:f0:8b:99:be:75:da:4f:b7:
00:6b:5e:71:b6:8f:94:16:2d:2e:c6:d6:b0:2a:97:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:E8:43:0F:1A:B7:B7:8D:18:15:84:F2:5A:C4:23:69:BD:6E:15
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ab:fc:59:34:8e:a3:be:5f:55:df:2b:96:84:43:6e:c8:33:
27:d0:c7:e1:a5:80:d0:1d:69:36:9c:9d:6f:79:49:9c:37:67:
7a:53:2e:41:72:08:00:87:36:d6:c0:d4:ed:53:06:88:ce:22:
72:39:fd:14:40:f6:5d:6d:a4:4e:88:8b:58:ea:35:db:44:e9:
31:02:ff:b7:e6:ed:24:ab:3a:2a:2b:b9:ba:0d:a3:b8:eb:d7:
bf:27:7e:c1:8d:89:05:0d:43:25:14:a1:d8:71:f0:56:ac:a6:
41:4f:4c:e4:66:ac:d6:f6:b1:13:fc:a6:6b:f7:a9:62:a2:6d:
95:67:5c:66:ca:58:54:be:4d:c3:1f:f4:04:7e:7b:b5:7f:b9:
99:86:46:a7:96:9d:20:0b:89:a2:99:df:a6:28:39:54:c3:80:
f5:5f:e6:07:7c:6f:be:72:df:1e:8e:62:1b:9c:aa:d6:52:e6:
75:f1:f4:4a:92:57:06:03:2d:e3:12:66:34:f3:ba:94:bf:06:
f3:30:57:85:d9:0a:02:45:4b:8a:ed:58:9b:9a:e0:19:fe:30:
3d:40:9e:da:bb:3d:04:fd:ae:7d:e3:53:9b:db:be:7c:c2:ca:
cb:b7:c4:7e:57:84:50:73:13:21:a7:2a:75:ff:c0:07:f5:85:
98:c6:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client