Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: QBRUHNzFJsEnyELTgNqT0Yfnva/3TIzUGI7aEgVf8tQ=
Subject key identifier: 63:54:27:24:4F:E6:46:0B:43:0B:99:52:E1:21:B7:6C:2E:5A:2C:3B
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 0194C350C74B15E7ABF473132D873F61D5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 21:00:38 +0000
Manifest this update: Sat 01 Feb 2025 21:00:38 +0000
Manifest next update: Sun 02 Feb 2025 21:00:38 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: IbbdhH2lvhwOFXx1+GQ/uzzripyapcpRYj8JZnldGQw=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:c7:4b:15:e7:ab:f4:73:13:2d:87:3f:61:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Feb 1 21:00:38 2025 GMT
Not After : Feb 2 21:00:38 2025 GMT
Subject: CN=635427244fe6460b430b9952e121b76c2e5a2c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:26:1f:17:b1:1f:02:19:d8:b3:e0:11:de:
51:a2:04:d8:54:bc:d9:20:59:c7:d6:0a:4a:48:fc:
fc:f5:7c:7d:30:7a:b5:68:5a:22:4f:27:17:1c:46:
49:35:71:c9:cd:c1:de:bd:18:58:49:e7:09:92:83:
0e:6d:3b:7f:ea:8f:fd:86:ac:dd:eb:ca:dc:83:68:
81:45:56:28:e5:f0:6e:02:93:c4:3f:fa:ab:bf:86:
76:47:64:06:1c:92:cd:82:25:c3:5a:2a:b6:c6:f8:
af:20:58:00:b8:45:b7:aa:d3:f0:34:95:70:60:59:
36:c7:a2:0c:4d:82:d5:1c:cd:b7:8e:7f:13:98:f7:
3e:84:3f:b2:98:d8:1a:b9:be:dc:b4:62:70:5d:a2:
ad:0d:9e:23:db:05:8b:65:a7:23:90:76:52:4d:4a:
6b:33:a0:59:9a:6e:57:50:da:da:2c:02:6f:01:c6:
00:26:b7:9d:33:46:f6:ac:2e:06:04:7a:e8:63:fa:
1c:6c:23:db:c5:f9:92:b0:d2:01:05:6b:1d:a0:a0:
2c:7f:55:93:17:a7:45:bb:da:59:b7:ad:a5:c1:8d:
33:26:10:07:e8:b9:2b:37:48:d7:29:ad:4f:92:75:
0f:fa:05:70:2a:a3:9b:1d:68:be:ae:85:b4:69:07:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:27:24:4F:E6:46:0B:43:0B:99:52:E1:21:B7:6C:2E:5A:2C:3B
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:43:f0:ca:be:b6:d5:3b:67:f6:4a:67:1a:37:06:11:cf:be:
c7:91:d7:c9:f5:39:0a:e8:73:75:7c:6a:98:04:47:6c:0b:1a:
af:20:ed:d1:6d:3a:9a:a2:38:0d:76:4a:a0:f9:b3:c7:db:04:
ea:f3:5c:05:e6:f8:cc:c5:b8:b1:61:5f:6a:d2:a1:51:12:91:
b9:25:50:9f:53:15:98:0a:5d:a6:32:fe:b8:f0:2e:53:12:4e:
82:a6:c7:93:3d:bc:0d:f2:64:64:02:5e:18:4b:53:38:08:e0:
3d:f5:6d:b7:6b:2c:a8:8c:c4:9b:fb:e7:20:b2:6d:0f:92:ae:
15:1f:21:2c:58:c1:77:e3:65:ff:c3:72:61:37:2a:38:57:7d:
ab:42:7c:24:b2:d7:ad:5c:fe:9a:ee:8e:6c:14:15:a4:b2:14:
75:cb:88:9d:20:2a:57:02:6a:64:6d:01:d6:a1:fb:47:35:4c:
ee:91:e0:ab:fc:a2:6c:b2:74:b4:3a:2d:2f:f2:47:fd:66:eb:
43:2a:2e:68:df:9e:11:01:55:f2:74:bb:e8:7b:5e:32:d3:1f:
62:48:42:2e:92:38:be:96:10:fc:ee:c1:8d:fa:83:58:63:e3:
7c:26:ee:8f:18:0e:92:7f:47:8a:14:d2:da:96:83:be:75:78:
f6:c8:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:55 2025 by rpki-client