Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: p/YhoMmsxH593xquHX8ydcpA5FMAbOsfQMnFI2LdVA4=
Subject key identifier: 21:97:7C:B0:F3:B3:42:EB:4B:FE:06:3D:70:B6:6A:78:FB:D1:A2:45
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0194C387A3C70450D2A513F8E10DFD79F7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 81
Signing time: Sat 01 Feb 2025 22:00:33 +0000
Manifest this update: Sat 01 Feb 2025 22:00:33 +0000
Manifest next update: Sun 02 Feb 2025 22:00:33 +0000
Files and hashes: 1: 1-FEZQAYxKOGbZtNoqgp3TsBstBI.roa (hash: mWm1xa0GsvGR4VAPAVWmqUQ/c+wTEHDE2Bz7si4FFW8=)
2: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: vgzsnEZkwS2FGjtavE25LvL/LjGHRYHJ7bmomcVQ1Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a3:c7:04:50:d2:a5:13:f8:e1:0d:fd:79:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Feb 1 22:00:33 2025 GMT
Not After : Feb 2 22:00:33 2025 GMT
Subject: CN=21977cb0f3b342eb4bfe063d70b66a78fbd1a245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:de:13:ef:35:f5:a3:c8:9f:6e:b2:cc:f5:
e7:40:60:df:7b:0e:b4:44:31:74:05:13:03:24:60:
bc:47:57:bf:74:00:78:7b:38:38:dd:66:ba:9a:78:
2e:fd:90:0a:c6:ec:97:9a:b5:c0:23:51:23:75:72:
49:66:49:2b:8b:b2:1a:ea:1a:85:f0:60:cf:de:7f:
1d:fe:9b:29:41:30:9b:7d:bd:c6:c9:c4:f3:73:ce:
9e:48:6d:46:e6:0f:45:ea:77:90:de:32:49:bc:1b:
ac:ba:97:81:07:b7:6b:76:1e:68:69:d1:f2:02:52:
75:9d:5b:53:27:0f:41:54:76:a6:d2:36:a0:e7:5e:
a4:b7:0d:8d:fc:e0:39:03:24:43:c4:fe:d4:ea:ce:
90:6e:d5:7f:d9:bd:cb:f0:84:2d:9e:63:d2:97:9f:
f7:96:4d:cd:73:ac:e5:8d:b1:5d:d4:09:3f:06:db:
08:da:d7:b6:e9:71:23:ff:e2:30:e1:30:87:e9:e0:
f3:b3:42:ce:5d:fa:28:a5:0b:ae:d6:47:8b:e9:1e:
6f:af:4b:2a:81:5c:81:f2:34:e3:22:ed:b4:64:99:
d1:60:c8:1d:2c:d2:a2:9e:8d:89:8c:c6:64:12:de:
42:61:8c:63:86:b2:93:8b:07:24:b3:5f:a6:29:a0:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:7C:B0:F3:B3:42:EB:4B:FE:06:3D:70:B6:6A:78:FB:D1:A2:45
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6d:e1:cb:80:05:03:fd:1e:72:9d:a4:1f:a5:5e:d3:26:19:
a0:8f:c9:ed:30:01:95:94:ba:a4:70:9a:8a:a8:4c:85:bf:03:
ce:e8:a1:8f:c4:2f:28:8d:4d:8e:58:80:c2:8f:e7:a4:91:11:
08:1c:c8:7c:3c:d6:99:cb:34:aa:50:bb:c0:cd:72:5f:fa:46:
1d:93:a3:ca:1d:94:fd:f7:43:85:1d:51:ac:d7:55:96:20:0f:
15:55:f4:c2:b8:ac:c2:fd:b1:ec:b8:2d:a2:dc:db:10:68:3a:
a7:12:2b:17:5e:e9:fe:f6:5e:83:f8:91:2e:7f:20:bc:fa:80:
82:8d:37:39:57:87:30:cf:fa:f9:23:3d:7e:10:96:c2:22:0a:
14:7f:e7:60:50:34:a7:53:52:e6:34:32:ac:20:4d:4d:3d:3c:
04:01:a6:f7:52:5c:ea:79:13:61:d8:db:fe:07:d4:cc:64:1c:
ed:fa:19:fe:0c:75:3f:74:e5:67:db:42:64:f8:dc:95:00:15:
17:ac:1a:97:23:ab:33:22:5e:14:6b:ae:ce:a9:ec:2a:92:c9:
8b:bb:40:54:79:3b:6b:b1:43:9a:91:f4:74:22:e7:13:cf:ae:
b1:8a:6c:c6:16:45:eb:fc:8d:f4:26:5d:0c:e0:5d:bf:42:fe:
20:10:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:58 2025 by rpki-client