Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: IUahcFG9Ts8lzVJIw8ecPuVsvB6Xxt1iC8favJdsqmE=
Subject key identifier: 26:B0:91:FF:CD:C8:CC:73:C0:51:46:21:FC:49:85:D7:24:A3:1E:8A
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 0195116BB8F7D8A27D031EEA4B034406EFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 13E7
Signing time: Mon 17 Feb 2025 01:00:26 +0000
Manifest this update: Mon 17 Feb 2025 01:00:26 +0000
Manifest next update: Tue 18 Feb 2025 01:00:26 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: C/Lm7nfod2+uJ7MsSVH3j+vXHW7ER2Aa2Q2RfuVmXBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b8:f7:d8:a2:7d:03:1e:ea:4b:03:44:06:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Feb 17 01:00:26 2025 GMT
Not After : Feb 18 01:00:26 2025 GMT
Subject: CN=26b091ffcdc8cc73c0514621fc4985d724a31e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:4f:e2:0d:da:ac:8c:19:a1:34:f8:0d:9c:
2f:a9:29:3c:57:2a:9e:17:9f:8a:ec:cd:36:80:0d:
33:b3:fb:98:35:69:6e:56:6b:96:7c:c7:c9:db:3d:
ed:49:12:f6:34:16:b7:f8:59:79:2b:82:6a:cc:7c:
5e:32:41:5d:f8:31:59:79:79:58:05:6a:cc:38:b6:
77:46:f5:58:15:73:83:e4:6b:dc:5b:aa:a5:4e:95:
6d:47:48:f5:ea:17:ac:1b:bf:30:19:f9:0f:da:89:
e5:66:8d:ee:17:22:36:24:fa:fe:a3:47:24:3e:f6:
63:92:49:25:47:ba:08:b1:2d:ff:77:0f:f4:6f:e1:
c8:41:14:95:98:05:b5:fe:c6:4a:07:68:ed:48:57:
7d:b4:0d:6e:fc:a5:c1:03:fd:45:cb:da:08:78:06:
bd:88:a2:e8:a6:1c:e7:19:53:1b:0d:5c:30:10:4f:
d1:0d:cc:c7:00:ec:68:14:60:a3:3f:ba:4f:da:ad:
0e:b1:a9:40:18:fe:9a:a1:97:b1:86:91:7f:88:ad:
f7:15:84:05:99:18:52:cf:c0:43:fa:52:16:f8:da:
16:ba:cd:9b:75:40:9c:79:74:b8:36:89:8b:fb:31:
65:aa:01:0a:2b:96:6c:42:06:94:5f:0b:42:fb:99:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:91:FF:CD:C8:CC:73:C0:51:46:21:FC:49:85:D7:24:A3:1E:8A
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:7f:02:45:d3:1f:d0:d8:26:3d:94:a6:d0:98:30:12:a8:
4d:6f:7f:06:7f:ed:85:1c:d5:75:94:f8:6e:2a:11:1a:d8:7e:
0f:f3:fb:5b:d1:b7:a6:d6:00:63:28:c8:cb:59:08:de:55:08:
2b:13:fa:05:0d:8e:be:37:c5:c2:b7:67:2d:5b:7e:4f:1c:97:
4c:6e:23:fd:be:26:95:f9:9d:10:cd:f1:52:b7:2e:4b:07:27:
5c:a9:d4:b3:8c:dd:85:13:43:da:ce:cc:c7:57:8d:52:d0:71:
af:ec:e5:f2:e8:65:64:58:14:20:d7:b4:e5:3d:74:88:f7:71:
21:a7:9e:e0:6e:68:f2:9a:7e:3b:bd:01:6d:41:b9:7e:84:93:
4d:e9:8b:ca:56:a2:bf:4c:9c:c8:01:90:fc:aa:2c:45:ad:b5:
da:19:a8:24:df:29:2c:b4:b2:4f:c7:44:52:e6:2b:1d:d8:ee:
7e:d8:7f:8f:18:b7:2d:93:7a:c4:7e:37:d8:40:7c:04:b2:7a:
fa:16:3f:55:cb:a4:5a:aa:81:ca:5d:5d:77:e5:49:e1:a7:6b:
1b:14:7d:8a:86:89:39:a2:bc:50:08:4b:5e:34:fa:4a:22:dd:
09:9a:7f:cb:b2:b3:97:6d:7e:76:e5:f7:15:57:dc:37:ba:3b:
c4:1b:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:19 2025 by rpki-client