Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: ypr1w6V/+e9sHxtt7twf81nURpfs4Yc6dXwe53ryjJk=
Subject key identifier: AA:82:AF:7F:A3:44:58:5D:B3:AB:CA:2C:89:5C:F0:CA:D6:09:B8:68
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 0194C4D16FB5F5DE17438B414EECDC11FE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0ABE
Signing time: Sun 02 Feb 2025 04:00:47 +0000
Manifest this update: Sun 02 Feb 2025 04:00:47 +0000
Manifest next update: Mon 03 Feb 2025 04:00:47 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: +3yOrkMlH/vzQZYjEINEtauHdObGWqVEPcLAm3V6RuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6f:b5:f5:de:17:43:8b:41:4e:ec:dc:11:fe:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Feb 2 04:00:47 2025 GMT
Not After : Feb 3 04:00:47 2025 GMT
Subject: CN=aa82af7fa344585db3abca2c895cf0cad609b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:08:bd:b6:47:94:56:eb:e9:55:71:33:36:
c1:23:f0:24:20:e4:8a:70:ba:c0:62:79:aa:1e:97:
a5:4b:aa:6c:64:87:d4:24:f9:07:66:90:ba:5d:b0:
89:aa:95:95:1a:42:c5:17:b3:d9:ea:93:9c:66:4c:
9c:4d:ea:1b:6d:ce:24:28:7a:f9:70:88:4a:68:02:
43:1f:ce:89:19:df:79:71:38:7b:5b:ec:1a:4c:67:
5a:7e:06:df:f2:e6:6e:c2:2e:13:a6:ee:ac:86:d5:
b6:6e:e7:9e:0d:a4:45:b3:8d:b7:ee:66:c8:89:94:
b8:32:b0:20:d9:b2:12:98:e2:5b:33:95:4b:a7:53:
4a:cb:12:26:f8:40:2f:f2:e9:b2:38:95:22:cf:6f:
98:6a:63:a7:31:30:37:18:63:05:05:0d:70:4a:1a:
41:40:5a:98:c6:25:b9:ad:3a:10:76:43:ea:51:e4:
16:2d:f8:0b:8d:1d:ad:47:7c:b5:02:a5:aa:2b:d6:
07:4d:b7:c2:32:0d:df:48:61:5c:cd:99:f8:93:bd:
df:e5:ed:4c:db:d6:0c:fc:97:01:79:e0:8b:61:43:
c6:8b:4d:bc:1b:1e:93:1c:23:e3:af:2d:8b:1f:4e:
92:c7:1c:1a:37:b6:d8:19:a5:1f:19:94:2b:67:5e:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:AF:7F:A3:44:58:5D:B3:AB:CA:2C:89:5C:F0:CA:D6:09:B8:68
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a6:d1:4a:29:b0:2c:ef:cc:ab:e2:b3:c5:12:c6:e6:6a:6e:
9b:cf:80:a3:73:9f:48:74:e8:80:ee:1d:7c:09:3e:7c:76:a5:
90:76:ec:16:1b:59:ce:96:ef:91:be:fc:9a:8d:32:7b:a4:a3:
46:f0:1c:67:40:7c:51:f3:e4:7d:e0:94:eb:a5:d1:d7:ce:b8:
99:0f:9e:3b:67:36:2c:84:7b:27:b8:dc:44:69:19:a3:3d:eb:
17:b6:93:91:7f:03:91:59:7f:6e:94:d0:4a:9b:8d:03:9c:84:
68:01:6b:de:ae:ce:05:ef:4e:d8:9f:d0:c3:a4:7f:fb:ce:d6:
19:8b:cf:76:48:9a:27:f1:dc:6b:b2:ca:24:27:b3:5c:f5:ed:
a1:bf:70:36:b7:61:7c:e2:ce:a9:6f:f6:55:28:56:45:78:09:
56:c4:e3:66:59:01:15:ca:fc:6b:a2:64:94:9f:99:45:6f:7f:
1a:8f:67:1e:56:fa:95:b7:6b:fa:bc:7c:2b:a3:5f:5d:d5:f6:
06:4b:b9:0f:e5:47:72:d7:87:ee:a0:54:5b:47:8f:a6:cc:f8:
56:cb:b1:8c:1d:b1:25:44:36:e1:90:61:57:16:dd:38:f6:2e:
bb:70:3a:44:e3:1f:21:d3:1b:a4:bd:93:bc:8d:9d:7e:b6:3d:
80:f0:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:44 2025 by rpki-client