Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: L8lXhn7HGUVF3Q1KyY6SCxG3lKcVFqrMBIvrm3k8ZVA=
Subject key identifier: 73:8A:1D:69:B4:D4:9C:50:97:AE:2A:F8:F2:03:18:F8:E6:CD:F9:B5
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0194C387EA53E9DB7F6BFDCD714F2C380D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0795
Signing time: Sat 01 Feb 2025 22:00:51 +0000
Manifest this update: Sat 01 Feb 2025 22:00:51 +0000
Manifest next update: Sun 02 Feb 2025 22:00:51 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: ScOUC/Kp8vGx1wg9phHg7TLLEnsT4QfCPo5A55ISAdg=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:ea:53:e9:db:7f:6b:fd:cd:71:4f:2c:38:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Feb 1 22:00:51 2025 GMT
Not After : Feb 2 22:00:51 2025 GMT
Subject: CN=738a1d69b4d49c5097ae2af8f20318f8e6cdf9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:64:0e:1b:0e:36:2c:80:43:57:06:ce:5a:
e6:54:2a:c7:2b:ba:dd:4f:f4:61:74:20:48:f0:c5:
cd:f2:04:78:86:b3:e4:03:7e:9a:d8:b3:b9:dd:3c:
fe:d8:89:ff:22:73:b4:87:11:68:6c:9b:a8:d1:f8:
6c:da:36:df:0f:3a:7c:00:f6:a5:90:87:e7:7a:d9:
36:03:69:e2:81:c0:4f:17:3d:0f:44:23:bd:f8:a5:
78:9e:2a:69:c7:51:ef:fa:87:6c:7c:69:2e:67:b1:
5f:23:6f:46:50:9c:24:96:8a:fd:2a:ce:a3:36:28:
ba:09:1f:42:14:9a:62:e3:3f:8e:7d:7e:c8:d7:65:
4e:ee:25:51:fc:aa:eb:d3:2e:b0:4f:02:d7:30:33:
ed:48:10:f8:73:e3:87:4b:cd:da:ab:40:ca:46:8b:
a8:ad:03:89:4f:3a:68:a0:14:03:6a:82:63:a3:8b:
05:29:6d:39:d0:61:53:c4:fa:36:1c:3f:f6:b5:e0:
f0:1b:69:76:78:fe:d8:9b:6c:ac:f7:b7:95:7a:a0:
75:13:26:45:a0:2e:2a:00:63:79:72:fa:68:cc:9e:
a0:83:ed:49:a2:b9:37:a6:6b:20:c0:b8:91:b4:57:
c0:c9:79:48:0d:c8:31:6e:e6:1f:1d:78:90:8a:34:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:1D:69:B4:D4:9C:50:97:AE:2A:F8:F2:03:18:F8:E6:CD:F9:B5
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:b1:40:c3:43:fc:d7:9e:fa:76:b2:60:1f:f1:dd:01:52:
b2:95:80:01:f7:b3:8f:ed:ba:6d:79:49:46:7b:90:b6:a4:56:
cd:78:22:ea:4d:98:6e:66:a0:30:79:17:5e:dc:11:6d:b8:cf:
39:b1:21:70:30:8c:d9:fb:ca:02:41:e7:76:d8:64:e1:6f:77:
00:5d:e3:c6:64:4c:67:28:e6:78:7d:61:91:ee:04:82:56:75:
dc:01:e5:da:2d:73:09:bf:a6:7e:e9:e2:0b:a0:46:7b:e8:bb:
58:11:73:61:21:4f:4d:ef:98:89:c7:79:e3:b8:d1:cd:d1:5a:
38:d8:95:76:08:1c:94:f0:c5:31:a5:42:c0:5c:29:27:e0:43:
5c:fd:1a:53:92:69:3e:d5:56:19:9e:05:c3:91:43:a2:f5:5c:
bc:b0:59:05:2e:6c:50:a5:5c:39:08:92:7e:70:d6:19:fa:b6:
e1:b0:c2:89:0e:0b:88:d7:03:6f:d2:7c:ff:a6:da:d8:e0:ba:
4c:ab:44:82:5f:20:0e:a9:b7:11:c1:2e:81:b9:33:02:38:0d:
b4:6d:69:2a:01:2b:d5:65:6e:c9:a2:fb:1b:92:a3:81:88:4a:
f9:68:81:90:ad:d6:f8:75:d4:97:77:c0:22:6f:34:2e:f3:1c:
40:35:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:47 2025 by rpki-client