Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 4MQAG7edvHIaCCt3ll/iJklIhZ/vFQhsfXcsf9zD8kE=
Subject key identifier: 07:5B:E5:89:B0:48:49:87:99:74:3D:22:34:99:79:89:1D:FC:94:71
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019511A2E923FDA69AF6B1809BAB8F6C8AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 01AD
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: ZjwrTLy84uJlztnQK4Pxnd5ElJaPvSbkbVtVh04uqE0=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e9:23:fd:a6:9a:f6:b1:80:9b:ab:8f:6c:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=075be589b048498799743d22349979891dfc9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:5f:70:18:13:98:52:ff:02:2c:6c:da:53:
72:3a:6f:e9:6b:31:e5:1c:27:31:88:25:a0:8c:dd:
f4:f9:c9:ec:c2:92:0a:59:cf:b6:ba:8c:17:ca:8e:
82:b1:9a:42:29:34:8a:90:51:29:26:fb:d9:c5:41:
18:a8:79:86:9c:98:c0:46:ab:d4:a1:90:20:84:82:
8f:c2:13:51:00:c6:04:97:45:6c:ec:87:de:2a:a0:
a1:5e:1a:f5:c9:f0:19:62:9b:ee:31:17:6d:f5:50:
9e:67:2c:47:fa:41:f6:71:dd:8a:b6:ef:4c:05:59:
37:32:0d:07:7f:1f:52:32:6e:49:47:2a:16:44:5f:
7f:0c:b2:17:14:ad:65:65:74:29:a6:24:8c:c0:ad:
0b:aa:a2:05:f1:ab:28:b5:bc:c6:75:b7:48:61:c9:
0e:a7:b2:ae:d6:e4:90:59:5d:f1:a6:d8:7e:ed:e3:
c0:de:69:8b:00:ff:c7:76:b7:d0:e2:82:73:f2:b7:
08:75:34:cb:32:0b:4c:bc:3c:bc:98:40:8d:a5:46:
d8:ad:0c:03:80:ff:c0:0d:d9:b0:a3:9d:55:13:7a:
2d:d1:df:a4:92:25:7e:29:a2:00:38:89:e4:5e:33:
b0:a8:59:fc:ba:c1:96:b9:0e:e2:9c:f1:37:f5:3f:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:E5:89:B0:48:49:87:99:74:3D:22:34:99:79:89:1D:FC:94:71
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:d5:18:76:06:67:10:8a:b5:b4:a6:60:e1:46:a5:a1:87:
fe:55:1d:32:fe:dd:81:09:5c:aa:c3:e1:e0:34:83:ff:5f:9a:
94:2a:0c:50:eb:c9:20:17:67:a9:3a:61:b7:b6:5d:54:b1:d4:
28:1e:1c:6d:81:87:d3:c0:bf:2b:bc:01:32:57:61:78:9c:52:
9f:c2:e0:d9:ee:84:90:d2:40:e5:3e:b7:7e:21:d2:a7:80:0f:
ee:1e:08:cb:6b:7d:60:c4:0a:2c:eb:e3:8f:74:f9:df:47:85:
ec:c8:42:88:58:b6:b6:17:15:f5:85:a8:b4:ed:36:21:20:9b:
5a:ee:36:3a:9b:ae:98:c1:6e:29:57:9a:c5:1e:4a:1b:82:fb:
35:fc:2a:4f:e4:08:a5:13:0d:e6:68:d3:0b:cf:b5:fc:d2:4d:
f2:4f:fa:19:57:ae:55:03:5b:5d:5c:4d:c8:f2:5a:28:8f:03:
1a:1c:a9:db:34:cc:e9:88:6d:76:cb:e0:73:a0:74:26:94:7b:
0a:4a:c8:29:6b:24:00:ae:97:da:f0:31:a2:ae:ca:a7:02:52:
f0:b7:a2:bc:21:b5:be:08:1f:84:38:96:c4:bc:35:a2:2b:de:
ad:e3:65:8d:e2:86:49:fe:41:d8:f5:a7:1c:f5:f9:35:3c:fb:
cd:33:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:52 2025 by rpki-client