Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
File: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft (raw, json)
Hash identifier: g3qkuq2Z+Fwm6Kh/5oPVyjQp6m35hxkB3QDHwSk3/OU=
Subject key identifier: 73:78:FC:AB:08:AB:30:2B:EF:1C:D7:E9:2D:55:A1:A5:44:5D:C6:0B
Authority key identifier: A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
Certificate issuer: /CN=a5920dec6ff00949e82161721eb94cc645e34776
Certificate serial: 0194C4638E81342C47AD85381A85F05273DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
Manifest number: 0EDF
Signing time: Sun 02 Feb 2025 02:00:46 +0000
Manifest this update: Sun 02 Feb 2025 02:00:46 +0000
Manifest next update: Mon 03 Feb 2025 02:00:46 +0000
Files and hashes: 1: YR4ujQ2sFqpF0bDdCJnNqsqvwEU.roa (hash: yGa4f7/iphZYLthfBwuXeS2/L8/Ji+s9D58wXkN4t3E=)
2: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl (hash: OrrF5QWrkTBd3CE034dJXUv0eNC8AbczNov0tpvW3wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:8e:81:34:2c:47:ad:85:38:1a:85:f0:52:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5920dec6ff00949e82161721eb94cc645e34776
Validity
Not Before: Feb 2 02:00:46 2025 GMT
Not After : Feb 3 02:00:46 2025 GMT
Subject: CN=7378fcab08ab302bef1cd7e92d55a1a5445dc60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:d2:1a:f6:e2:b2:df:a4:94:6b:11:c4:db:
00:83:4b:09:d3:cf:19:78:58:49:de:e2:76:4f:d6:
c5:98:1b:e0:0e:41:df:6a:6e:ba:16:b5:f3:5a:99:
0e:b2:09:99:0b:6c:19:52:91:c3:b2:fa:f2:a6:2e:
11:a3:00:7d:15:45:a8:69:77:86:4f:fa:f9:61:d2:
73:27:f8:b0:ef:96:46:99:b4:cc:0c:24:77:79:03:
81:77:85:c1:12:2d:c2:02:a3:d2:ce:b8:30:77:41:
b3:ff:81:b9:62:a3:1d:08:e3:8b:f9:7f:b1:ed:a3:
88:9d:6f:ee:6a:9b:fd:35:b7:dc:6d:da:f8:4e:b8:
14:56:d3:f7:bd:78:81:4e:7e:4b:b1:0a:70:48:5e:
8e:0a:ad:b0:c2:d7:f7:38:05:32:35:4d:b7:1d:40:
37:8c:a1:d5:fd:8d:f5:da:bf:fa:cc:fc:fc:b5:0f:
7c:fb:3e:ec:05:78:44:8f:2e:c1:23:9d:af:ba:5e:
3b:67:7b:78:c7:08:7a:cd:c9:31:f8:38:56:23:51:
e8:34:28:aa:dd:96:09:7e:73:4c:11:50:f7:b8:f1:
ef:a3:44:cf:e4:2c:28:15:89:01:09:17:e8:ac:88:
09:3c:2f:73:7c:c5:13:18:9f:df:76:44:c0:e4:82:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:FC:AB:08:AB:30:2B:EF:1C:D7:E9:2D:55:A1:A5:44:5D:C6:0B
X509v3 Authority Key Identifier:
keyid:A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:17:dc:04:a7:81:db:9f:08:d5:06:e9:e7:ee:e2:bc:85:
b3:74:26:cc:e9:36:67:27:99:70:0d:9b:d6:67:c9:88:e8:e8:
d4:aa:82:de:68:49:ef:3f:ac:ac:9d:0f:e8:6b:fc:12:96:5f:
c8:05:a8:40:83:6b:c7:73:6e:c6:ee:37:59:fb:b6:b0:d0:68:
09:96:a4:fe:7b:41:52:28:cf:db:f6:5f:9d:c8:64:3d:ec:d9:
49:d7:b2:2b:b3:49:10:8e:59:76:25:18:4d:bf:5f:24:70:70:
a1:b8:fc:ee:fa:0f:73:a1:0d:a2:31:a7:d1:a3:39:4b:30:7e:
44:de:9e:5a:c4:4d:62:8f:45:4d:2d:45:5f:4c:e4:82:0f:39:
56:64:38:b5:63:3b:05:9a:f1:34:f8:a5:cc:6d:7d:64:1d:a0:
92:78:90:11:3d:a1:a8:d7:2e:22:09:7f:26:30:e8:d6:9a:34:
45:32:f2:f8:44:9e:6f:80:e3:77:7e:de:17:54:33:45:93:d8:
22:4a:7b:88:b2:94:2e:1b:5a:40:1a:39:d2:4e:f5:c4:58:6e:
0b:3c:df:d4:78:a2:82:be:97:19:c2:5c:22:b0:a5:e1:48:97:
26:42:76:c7:a4:d0:7d:45:52:ef:7c:42:a7:fa:2a:2f:bd:d8:
00:70:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:09 2025 by rpki-client