Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: Nslmn6ZwTCfCSR384TMjBqX5Ayz+NNJ7PqryiUX6GzI=
Subject key identifier: DF:62:01:F9:C8:D3:EA:0D:2A:6C:2B:A5:BE:F4:B0:74:5E:7F:53:5B
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019511D958C38F95F2B08F7BE7CCB5870381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:11 +0000
Manifest this update: Mon 17 Feb 2025 03:00:11 +0000
Manifest next update: Tue 18 Feb 2025 03:00:11 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: RGKzBARC8UVcACcS13stzibX08FRM1fUuWW9zmxDicw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:58:c3:8f:95:f2:b0:8f:7b:e7:cc:b5:87:03:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Feb 17 03:00:11 2025 GMT
Not After : Feb 18 03:00:11 2025 GMT
Subject: CN=df6201f9c8d3ea0d2a6c2ba5bef4b0745e7f535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:c3:84:75:96:de:53:a6:ee:58:6c:83:f1:
8a:55:9d:cb:fc:19:d2:66:28:af:b2:02:68:ca:3d:
c6:33:66:8d:a1:91:5d:b1:b1:3c:6c:5e:e7:80:0b:
f0:7a:7d:c3:31:7c:43:e5:b3:f5:0f:04:a8:97:98:
67:21:91:3b:6e:f1:80:a2:37:d1:84:0a:bd:5c:10:
53:f7:4d:d8:63:45:86:7e:9b:95:f9:52:1d:9e:d5:
dc:46:54:16:e6:b9:69:db:59:01:61:ae:17:3e:ec:
8c:33:16:6c:ac:d6:e9:a9:e4:f7:7d:80:b5:75:f3:
e5:29:b8:a4:32:3c:39:94:6a:8a:66:77:58:cf:fa:
f2:39:a8:48:79:02:5a:b1:da:56:e2:98:39:7f:89:
16:be:5c:95:19:fe:00:bf:7e:45:82:22:2c:14:a9:
dd:ce:08:05:97:7d:bc:26:17:5a:68:af:98:67:f2:
3e:13:fd:5d:7d:78:0d:f0:eb:7a:96:e8:30:db:a5:
9c:ab:97:9e:6a:5b:10:fc:14:e4:31:93:1c:38:6e:
5b:95:2a:8d:1a:6e:79:5f:be:4d:71:92:d9:32:d1:
b7:6c:cb:12:c5:e9:36:d1:60:3a:e5:3f:f6:24:bd:
5a:c6:c2:3b:b8:c5:1a:a7:60:d1:2b:dc:ad:4f:e1:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:01:F9:C8:D3:EA:0D:2A:6C:2B:A5:BE:F4:B0:74:5E:7F:53:5B
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2b:4a:63:97:57:0d:bd:f7:4a:ac:3e:78:60:97:b9:3a:f6:
cf:4d:89:08:67:c3:94:79:d2:25:3f:53:d6:d5:9c:07:e7:3d:
11:0d:cc:d4:b8:05:37:26:b2:6d:63:e8:a2:7e:72:c7:c7:c1:
ce:aa:a4:08:eb:92:03:5d:b9:f0:de:48:81:0e:eb:08:cf:f6:
dd:5e:64:d2:fc:a3:9a:fe:10:2a:2c:cd:b7:12:bb:dd:ff:9b:
cf:c8:a5:30:8c:58:dd:89:4a:0c:70:46:9e:60:21:46:08:1c:
05:1e:2f:90:9a:df:b6:b6:d3:2f:d8:63:01:d1:3f:3d:18:78:
44:08:71:34:19:8a:d2:3d:f8:5e:ac:53:93:c2:81:5e:86:32:
2d:ee:91:83:b4:f2:48:0c:8b:3e:54:8d:b0:74:50:f3:a3:f4:
f0:5e:bd:ea:34:99:2f:f2:65:7a:ba:6f:b8:2f:94:82:98:d2:
e7:10:2f:9d:8e:38:b7:70:ec:8f:64:74:7a:17:bd:c1:f4:f4:
64:82:1f:d9:37:2b:8d:9b:67:82:21:32:d1:60:3d:72:ab:28:
f8:8a:ca:2a:c5:dc:f3:bf:62:ac:6b:27:72:e6:55:96:6e:80:
48:d3:df:57:cb:74:c4:70:17:9a:5f:52:12:ca:66:76:c8:ac:
ed:92:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:44 2025 by rpki-client