Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: e6Q5bGUh83HwrYzlSql9LT67h+85oVJctVw0Y7amSqQ=
Subject key identifier: 8D:A1:BF:B9:E2:A6:FC:05:32:28:36:1C:E9:D2:A2:D6:09:85:51:D9
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019511D9B0EA5E8E259B9D18AE098AEFBCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 094B
Signing time: Mon 17 Feb 2025 03:00:34 +0000
Manifest this update: Mon 17 Feb 2025 03:00:34 +0000
Manifest next update: Tue 18 Feb 2025 03:00:34 +0000
Files and hashes: 1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: NfobBJmOoOuUrhRDHvyDVsOqJVeC9WJ6B8BVOCa0IJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b0:ea:5e:8e:25:9b:9d:18:ae:09:8a:ef:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Feb 17 03:00:34 2025 GMT
Not After : Feb 18 03:00:34 2025 GMT
Subject: CN=8da1bfb9e2a6fc053228361ce9d2a2d6098551d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:bf:13:45:f1:db:8c:38:b4:6c:e9:04:9a:
56:79:97:c1:84:97:99:61:8a:94:ac:c0:ed:ce:b0:
2e:86:c7:4a:73:36:13:59:44:a1:89:93:e8:f6:d7:
43:f1:5c:b7:b4:9a:35:4b:01:5e:43:2b:db:97:04:
e1:5b:fe:57:94:dc:6d:67:c6:1c:7d:25:ef:c4:b4:
28:f2:6c:b9:e5:aa:d5:e8:a5:26:1a:15:63:0b:65:
99:47:3d:e2:ff:6f:81:00:05:e7:e3:1b:09:92:f6:
6d:1f:76:e7:bc:c2:53:2d:45:32:4a:0c:9e:9e:13:
1d:08:9f:72:32:3c:de:d4:fe:ef:f0:37:45:74:02:
2f:16:a1:d5:13:2d:70:a2:3b:36:5a:ff:74:41:34:
12:1b:1a:59:3f:a7:20:53:24:a9:23:69:6e:73:ee:
ef:2b:7d:38:cf:9b:84:c0:28:1e:87:5a:40:40:64:
b0:bc:1b:a1:eb:ea:0b:09:de:81:17:f4:9a:c3:f3:
39:f1:2d:d9:a3:00:f4:7b:fd:0b:2f:6b:a3:f7:04:
4b:a5:30:73:7c:75:cf:14:03:e8:e4:aa:f5:dd:0b:
b4:8b:fb:68:bd:b0:87:c8:7f:e6:f1:b0:98:ad:e2:
56:74:7c:3b:16:52:af:56:7b:79:1d:f9:c1:12:1b:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:BF:B9:E2:A6:FC:05:32:28:36:1C:E9:D2:A2:D6:09:85:51:D9
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:97:0d:a8:42:45:ca:2d:87:8b:2b:ba:ff:94:6b:58:0f:99:
c3:03:58:05:19:d8:d2:e9:0c:ff:ab:bc:66:21:b0:4e:7c:4e:
11:44:36:52:68:ca:c1:2e:cf:32:2b:b6:c1:c4:f1:7a:aa:71:
ae:f4:0c:db:33:96:f4:fd:e4:f0:73:f3:ab:12:8c:78:27:34:
56:36:37:cb:0b:78:77:ca:03:f9:f0:49:62:c2:8d:17:98:0f:
92:a0:e2:bf:bd:db:84:29:30:71:8a:1a:61:16:f9:50:a0:b7:
5e:4c:70:8f:fd:be:97:9a:1e:a1:9e:a4:1e:04:48:72:85:bd:
bf:28:7a:91:b9:77:7e:69:d6:28:8a:fe:a9:ad:52:7c:8d:18:
b7:38:df:97:89:15:55:e2:c3:cb:db:93:29:c0:6b:3a:9f:60:
0f:6e:9d:50:b2:d2:c9:aa:e7:59:53:90:a3:44:d1:99:17:c6:
00:d4:b0:be:94:72:c3:bb:3f:aa:90:d9:55:bf:bc:4c:68:91:
d9:7f:a0:9b:bb:7f:2a:40:7d:4d:90:ea:2d:85:9b:22:10:9f:
ca:0a:11:79:4c:81:b3:b7:36:f2:13:cf:11:67:51:00:a8:45:
5b:14:4e:23:84:23:17:82:8f:46:ff:d8:b0:a3:4d:a7:c1:9b:
55:cd:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:36 2025 by rpki-client