Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: pxrAoo+i22z7/S6dnpDSl5HU99q8cswZX0McBlEiJMw=
Subject key identifier: 27:C0:09:3D:D0:AF:9E:A2:34:A2:AB:DF:70:18:28:25:A8:38:A5:97
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019510C72E74CD59D408BC2610AB4232FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:43 +0000
Manifest this update: Sun 16 Feb 2025 22:00:43 +0000
Manifest next update: Mon 17 Feb 2025 22:00:43 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: uRp+8bVXzGJAitMIbIEQWZ8q0dMCQW/meTPj+ZzkBEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2e:74:cd:59:d4:08:bc:26:10:ab:42:32:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Feb 16 22:00:43 2025 GMT
Not After : Feb 17 22:00:43 2025 GMT
Subject: CN=27c0093dd0af9ea234a2abdf70182825a838a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:63:93:81:0c:46:d5:5d:02:9f:61:bf:d9:
63:ac:32:42:11:10:41:d1:61:11:11:63:8f:3a:cc:
a7:ce:c4:24:0d:97:e6:93:ae:9f:38:c3:f9:b6:85:
17:c1:11:4a:26:81:61:d5:72:04:7d:03:17:ed:af:
85:56:73:32:8f:0b:e2:28:94:83:49:c4:45:a5:f7:
35:25:89:f3:e0:19:0e:15:30:9a:fc:62:88:31:b9:
f8:a1:4c:4a:26:5a:41:15:07:f8:0a:0f:9c:74:8b:
01:93:83:51:1d:36:83:a7:bd:f0:09:26:f9:b3:75:
1a:c8:0d:3f:3d:73:84:18:9c:e8:ff:e6:9a:5f:a1:
08:13:06:4f:2c:45:c7:ef:be:38:92:fc:a5:e7:35:
ea:e6:a7:47:5b:3b:4d:51:de:b2:35:37:b9:2f:68:
cb:94:c9:65:c1:d9:b9:ff:44:a2:97:5a:c3:c9:cf:
a6:eb:1d:af:f1:51:aa:51:82:72:12:e5:e5:58:99:
5b:99:e7:18:9a:43:72:ea:e5:0b:a9:6a:ea:80:ca:
c4:3e:ee:bb:d2:8d:12:f0:7e:25:4a:8c:82:64:b8:
92:3d:3e:31:c4:92:e1:87:9a:12:38:e5:67:77:39:
ee:12:5f:e4:77:dc:9b:65:17:4d:39:b9:9e:44:88:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:09:3D:D0:AF:9E:A2:34:A2:AB:DF:70:18:28:25:A8:38:A5:97
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:d7:d0:84:19:0e:58:1e:1e:e9:e9:99:df:ed:76:84:21:
1a:d8:9b:98:b1:4c:76:67:38:20:bc:a3:8c:c1:f7:28:51:44:
e0:70:c1:28:6b:3c:a9:46:a6:2c:87:b1:e3:c1:59:9b:05:56:
34:2e:14:a4:40:69:ab:2f:a9:96:27:a5:53:22:53:7d:d1:92:
0d:fb:9d:27:e6:73:ea:c5:2c:c8:d1:eb:61:e0:a6:2b:3f:df:
5c:59:fc:1f:1d:cd:29:74:3a:eb:5d:c9:ed:e4:0b:10:a2:7a:
4e:e5:15:a6:fe:a5:bd:e6:c5:91:ab:22:ab:32:9c:fb:b9:9f:
aa:5c:52:23:63:05:6b:52:a1:d1:a1:7c:b4:f6:1a:0b:a8:68:
ad:d5:0e:e8:f8:95:69:d2:8f:4a:0d:78:8c:11:f7:31:c2:96:
3e:29:23:29:6c:d1:ec:8f:a2:02:91:c0:8c:1f:22:80:f2:28:
b0:47:66:50:8d:6e:40:17:ec:fb:bc:f4:78:8c:9a:ae:6f:76:
ec:92:a5:fc:25:7e:cd:99:2a:9a:9e:a4:40:17:cc:4d:38:d3:
89:97:b1:20:8c:ed:53:3b:bf:6a:58:ea:90:cc:43:b2:9a:48:
8a:bc:0a:81:8e:ae:1f:ca:19:7e:4e:9c:af:46:99:7d:c4:17:
68:69:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:32 2025 by rpki-client