Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: OurhiAvt0e9Kanke3ef1/6PivL1Cc5UQoyyVEbN9TVU=
Subject key identifier: 58:A4:00:BE:B4:3C:F3:77:F1:1C:D2:8A:CA:AC:97:30:BA:7E:3C:0A
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0194C3BE747331735E3DFADD35742BA25A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 9C
Signing time: Sat 01 Feb 2025 23:00:26 +0000
Manifest this update: Sat 01 Feb 2025 23:00:26 +0000
Manifest next update: Sun 02 Feb 2025 23:00:26 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: F5HxN9p9t0QuuhE3RestQESXEeOWBV2ou2Gc2tVFpac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:74:73:31:73:5e:3d:fa:dd:35:74:2b:a2:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Feb 1 23:00:26 2025 GMT
Not After : Feb 2 23:00:26 2025 GMT
Subject: CN=58a400beb43cf377f11cd28acaac9730ba7e3c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:da:8f:cd:ac:a4:3c:d3:3b:55:fb:03:cc:
52:09:5e:02:33:4e:af:59:42:f4:4d:ad:ab:8c:49:
a0:dc:74:5b:90:49:33:41:f7:3f:65:0d:0d:89:42:
44:b7:2e:97:db:57:d1:0d:87:0d:94:a9:16:b4:80:
eb:12:6b:92:91:63:7c:e9:e6:fc:50:9f:ac:ae:fc:
09:13:18:ff:51:6a:80:fc:95:c9:c9:8e:ff:df:2e:
fe:f3:44:c5:5e:d5:3f:f9:69:7c:6a:cb:8e:a0:6f:
f0:fb:8d:8f:2f:f5:52:3c:a9:4e:46:6c:bc:a4:31:
73:8a:96:0a:eb:db:b7:a1:7b:74:76:ba:50:7e:b9:
7a:d8:65:b6:5e:11:56:b7:d8:d2:36:7a:38:9c:70:
19:b2:aa:ab:39:d5:55:6a:5a:a6:f6:71:45:7e:9e:
8f:1f:89:a7:93:2b:a1:3e:10:a9:08:0a:42:99:a4:
03:72:22:57:90:9e:b9:a6:eb:29:a1:8e:1a:78:70:
c5:32:52:85:01:d6:d0:bf:19:87:81:8d:43:1a:d8:
23:d8:78:bc:18:6b:f2:7f:77:ac:59:79:d1:e1:12:
1b:8a:55:c7:cc:82:bc:4f:19:47:16:b8:a1:0c:f9:
b7:84:e1:fb:23:d5:1a:fe:47:9d:0f:c4:d7:3d:22:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:00:BE:B4:3C:F3:77:F1:1C:D2:8A:CA:AC:97:30:BA:7E:3C:0A
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1e:e3:cb:e7:01:68:2c:39:f0:64:b7:24:3d:71:ce:ae:d8:
b5:0d:ce:3d:29:5b:73:fd:cd:56:a3:09:09:2a:72:df:a0:a3:
51:ee:32:ea:64:48:f1:e8:c4:51:c3:56:66:3e:de:4b:14:2b:
25:d8:85:0b:9d:f1:de:6b:2a:5d:b0:f4:3f:29:d5:96:17:39:
93:51:45:60:15:5a:6a:75:b3:40:99:27:3c:b6:59:1b:ac:7e:
ea:0d:12:c3:00:a7:59:36:41:ba:2a:2d:b0:87:98:dc:51:ff:
96:14:1f:64:b3:9a:17:57:9a:9a:46:4c:86:67:eb:88:b0:a2:
36:74:34:91:56:5e:87:1c:72:11:59:d7:34:33:54:17:a1:df:
e2:40:73:de:d6:43:29:45:ad:bf:ec:35:14:b3:c9:1d:e3:aa:
42:08:90:7a:bf:14:b7:5a:24:f4:30:7b:b0:66:bb:f3:71:76:
64:72:76:f4:86:93:97:d1:6c:a4:8a:e8:b7:53:c5:aa:d5:7e:
e7:94:86:7b:13:20:13:d4:08:6f:00:f2:6f:ba:32:6c:e7:74:
ad:c8:31:cf:bc:37:cc:e5:d1:71:ce:8a:33:09:d6:8a:7d:b0:
41:10:30:b5:b0:f8:b2:20:84:f7:c4:93:3b:86:41:ca:d0:d7:
cb:14:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:36 2025 by rpki-client