Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: pqjblYpn5kl0aSWQHLZBcimoMqBpT3V4dxM28HgNdCc=
Subject key identifier: 0E:3D:E0:4E:4B:26:E2:24:D9:BB:67:5B:63:84:91:B7:BB:03:A2:13
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019510FE167027D7F98739C5C16F07DB0DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 03FC
Signing time: Sun 16 Feb 2025 23:00:42 +0000
Manifest this update: Sun 16 Feb 2025 23:00:42 +0000
Manifest next update: Mon 17 Feb 2025 23:00:42 +0000
Files and hashes: 1: slxDmCt2L7uCGsUsrtR25UrWHG0.roa (hash: DyUu6++jqUZQV0Vf12twiu6zSmlHweojaxYVbm0ofdE=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: 5+qY+9ViRgxpXXV2auQB9ImZ2O/LDC8p2wGYSnYD8nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:16:70:27:d7:f9:87:39:c5:c1:6f:07:db:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Feb 16 23:00:42 2025 GMT
Not After : Feb 17 23:00:42 2025 GMT
Subject: CN=0e3de04e4b26e224d9bb675b638491b7bb03a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:ba:41:79:c5:47:fc:bf:d7:77:17:32:07:
6b:ce:fd:8a:85:e4:00:db:71:24:be:49:a7:33:d6:
85:e7:46:b3:67:a4:50:42:18:57:fc:05:c1:7d:80:
7b:79:34:63:68:2b:ca:6a:17:e0:49:de:f2:46:f3:
f7:30:20:aa:94:03:1f:89:25:2a:18:47:8c:08:18:
d7:c6:ab:0b:31:e6:a5:60:62:1d:7b:30:28:aa:4f:
b8:61:fb:55:1c:91:71:5f:91:76:a1:29:31:04:8f:
75:14:c5:78:b7:aa:31:f1:bc:16:aa:26:74:1c:3e:
e7:9a:5f:18:90:8c:f2:4f:4d:04:35:b1:66:af:12:
06:ba:63:7c:43:0e:dd:0a:f3:44:6a:c6:78:b8:3f:
d2:3c:a0:84:73:84:33:a6:53:14:24:97:69:8f:5f:
66:7e:61:0c:3e:16:cb:0b:44:39:41:c2:7e:54:43:
91:64:28:88:8d:1a:72:b6:63:3e:c3:81:08:ae:b0:
e3:48:86:ca:3c:5f:58:83:d6:6c:e7:44:53:9e:c7:
76:41:7f:5b:a7:88:10:7c:6d:e9:88:34:ae:b9:23:
1b:b0:93:fe:4d:93:e3:43:2d:70:2a:57:58:9c:13:
93:3e:3c:9f:c1:5f:69:10:fe:47:bd:8d:b6:93:44:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:E0:4E:4B:26:E2:24:D9:BB:67:5B:63:84:91:B7:BB:03:A2:13
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:c6:ea:ad:9c:34:95:a3:7a:dc:9e:b5:df:05:50:c2:12:
bb:f4:cd:17:d0:63:78:e5:fd:88:92:d5:f5:d9:36:e7:a9:9c:
8e:c6:59:6b:49:11:8a:b5:95:8b:e1:3c:3b:b0:70:f7:27:04:
71:1d:fe:87:10:3b:d3:98:22:7e:49:ab:d8:2f:d8:a2:ed:5e:
1a:62:c2:e2:33:83:11:0b:32:88:5b:f0:7f:2d:7e:8a:d5:82:
fb:48:d5:12:bb:cf:e2:2f:96:50:bb:0d:ae:bb:b9:78:1e:2e:
f4:c4:e9:b3:f2:2a:68:61:a8:fc:be:e6:05:c3:c3:82:16:a2:
bf:31:64:8d:32:70:a5:76:ea:7b:47:f0:13:f7:c3:dc:f3:21:
25:0a:f5:4f:ed:21:95:51:24:b4:d6:b7:7c:16:cf:c7:0d:26:
86:a8:2d:cd:de:c0:56:af:70:90:bb:88:3c:a3:d6:d9:57:95:
e3:fa:a6:bd:e8:3c:f4:e6:43:95:84:07:57:1e:16:00:65:52:
8b:e1:92:f2:58:58:31:ae:5d:de:16:a2:ec:2a:a0:b3:9d:ff:
5e:26:8c:2e:ee:02:99:f3:8d:00:a2:b6:77:df:38:0d:b7:74:
50:ce:53:84:c9:01:63:d9:36:b7:78:b7:09:23:b4:cd:32:6b:
ac:af:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:50 2025 by rpki-client