Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: SGQ8dgMwxI/34dNlGNYgNKjTG6xpSzcxCx9zrM1x7jM=
Subject key identifier: 8B:69:82:8C:60:D6:4B:99:65:A4:4E:09:18:E9:B1:7E:05:84:1B:5D
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 01951134B9B1F98D462421595903D39B73AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 10FD
Signing time: Mon 17 Feb 2025 00:00:22 +0000
Manifest this update: Mon 17 Feb 2025 00:00:22 +0000
Manifest next update: Tue 18 Feb 2025 00:00:22 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: j9+pqUBCOxSY5X88UVpX5fgEfUtMM3FNOE1+qlR2c4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:b9:b1:f9:8d:46:24:21:59:59:03:d3:9b:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Feb 17 00:00:22 2025 GMT
Not After : Feb 18 00:00:22 2025 GMT
Subject: CN=8b69828c60d64b9965a44e0918e9b17e05841b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:d6:99:6f:e0:3e:c6:77:22:ed:6f:ee:67:
95:c1:64:b3:06:db:82:a0:aa:60:ed:6f:b4:22:f1:
5e:2f:77:d9:48:b2:46:5e:0b:dd:8c:e8:d4:70:8b:
c2:e2:f2:71:25:38:e1:db:a5:49:79:f2:b5:80:95:
64:7e:7c:25:2f:4e:a9:95:5b:18:10:4a:1e:ee:a2:
58:3f:08:5c:f4:79:ca:67:34:44:e5:55:13:f2:ee:
dd:7e:40:61:52:77:86:c3:45:11:c5:ad:8e:11:b1:
99:0b:33:32:38:66:06:b2:fb:5b:41:e7:e6:0f:a2:
c7:6e:ff:8e:1f:91:e5:e9:fe:3d:35:22:07:e3:3f:
08:fb:67:64:55:a9:27:5f:ee:b3:24:44:9d:6c:3c:
f8:4e:cb:17:f3:6a:7f:04:32:f2:97:04:8c:ac:96:
6d:ec:b1:f5:10:bc:5e:26:27:d1:4a:6a:2b:3d:1d:
84:7f:8e:18:77:be:6c:3d:f7:05:e8:60:2d:18:c8:
6b:64:5e:4f:0a:17:5a:9d:cf:a8:cd:4d:37:c6:ef:
4c:66:18:92:9b:4d:92:df:b4:37:28:32:f1:ce:6a:
81:8e:20:c2:91:8c:68:97:61:31:6a:ac:bb:a3:fb:
8d:c0:cb:3c:da:34:80:81:4b:e6:9e:8b:38:4e:d7:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:82:8C:60:D6:4B:99:65:A4:4E:09:18:E9:B1:7E:05:84:1B:5D
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:18:d9:3f:1b:bc:d5:bf:85:20:56:21:ce:f8:c3:0f:d9:fe:
3d:06:57:09:53:80:1c:5e:a7:ef:c7:0a:22:c4:b8:9c:9f:fe:
65:fc:e2:c8:e2:3b:3d:af:9b:92:64:63:4c:47:c4:cf:37:ce:
be:1e:3a:f2:26:aa:b0:a5:7a:e9:10:f1:08:c5:34:e7:74:cf:
e6:8e:cf:d1:af:a5:87:d7:5e:36:c8:17:87:fa:75:b9:85:90:
c6:3d:6a:8e:3c:a1:2d:60:2a:3b:d0:71:23:1d:87:ed:38:57:
16:a9:68:61:6b:3c:ff:0c:32:5c:3f:1e:20:b2:f4:0e:dd:9c:
24:07:2f:76:34:f4:32:bb:9e:0c:a1:36:a9:8b:e1:a8:44:91:
7b:3a:b0:b5:12:25:a3:3d:8f:f8:6a:48:2a:c9:42:df:f0:6a:
39:a1:5d:62:3b:23:10:3b:e0:7e:78:a3:d9:5a:0c:9e:28:74:
d2:b0:5a:fd:79:e8:f5:3c:5c:76:e0:ad:f0:55:90:7e:40:75:
b8:7f:7d:7a:7a:9d:a1:24:82:eb:ca:77:29:9b:7f:f5:13:19:
3b:85:1e:42:f3:be:31:5f:0d:4d:36:b0:c0:5e:4b:21:9e:be:
86:46:6f:fd:8a:50:99:a6:8d:3d:c9:da:9b:bc:e6:e3:2c:49:
bc:0b:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:49 2025 by rpki-client