Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: N1ZVr6oIK+NhvAOZYT15BY/81/dCBmBXGnUU+flxpE4=
Subject key identifier: E6:D2:9F:A9:84:9F:3E:5F:81:42:CA:06:9D:31:25:63:26:89:A7:B4
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0194C42C5C1ECEB53D43CBC5DD9C858E360A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 23
Signing time: Sun 02 Feb 2025 01:00:28 +0000
Manifest this update: Sun 02 Feb 2025 01:00:28 +0000
Manifest next update: Mon 03 Feb 2025 01:00:28 +0000
Files and hashes: 1: Rh1-3odcKsHE-cbcsOPqzTGwaik.roa (hash: gW+wBKfqraJTbuMXfCglcuvN6Kb55qCQd+sGLIt/fpk=)
2: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: L3wGkwXDRAwLfdu54UZbQgrAStkUTVF36eWtph+n0tI=)
3: oZpGbVUpKUH0VrpNLhpu97i1M_M.roa (hash: oW6hkmxowE3qg/Jyo6V/wTo6z6868bLjjZkfHvalrnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:5c:1e:ce:b5:3d:43:cb:c5:dd:9c:85:8e:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Feb 2 01:00:28 2025 GMT
Not After : Feb 3 01:00:28 2025 GMT
Subject: CN=e6d29fa9849f3e5f8142ca069d3125632689a7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:9b:a6:2d:ab:38:9e:2a:70:85:08:2d:88:
a9:7e:d4:a4:ed:c8:c9:6a:5c:6f:06:9a:9f:8e:d9:
a9:32:ae:02:9f:4b:d8:63:9f:f6:36:4b:be:e0:a5:
08:7b:c9:3c:c8:43:62:66:89:a5:55:6e:6e:2d:12:
d3:19:bb:41:d6:78:1d:c5:5c:f3:89:47:38:61:3e:
b0:5e:2e:73:b8:49:6c:de:a3:6e:51:38:3e:39:2a:
75:4d:df:3f:27:57:a1:1a:48:99:75:5a:12:8d:5c:
f6:ab:4d:6e:9f:a1:4a:d1:81:de:29:4b:fd:b0:3f:
20:e7:56:41:69:4f:30:c7:e2:de:d7:ab:e4:7a:89:
8e:00:39:11:f9:96:f7:0e:5a:e0:40:fe:48:88:c5:
f8:a7:43:d7:88:f1:2c:9c:65:3a:c4:da:1a:b0:66:
bc:95:79:6e:88:9e:70:39:4a:a5:ca:15:9e:6d:75:
98:fb:46:7d:b2:ea:42:5b:40:96:7f:61:d3:87:ef:
b6:4b:d2:fc:57:6c:96:03:9c:30:1b:d6:8e:e0:31:
3a:f3:a7:e4:3e:15:74:72:79:27:7d:5f:96:39:ba:
f0:8a:47:41:58:7e:ec:04:ba:32:50:38:0b:9a:48:
95:58:83:52:7c:4a:02:ff:08:2b:67:81:95:f6:a6:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:9F:A9:84:9F:3E:5F:81:42:CA:06:9D:31:25:63:26:89:A7:B4
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:8d:32:f9:6e:4a:7c:7a:3f:04:57:c4:f2:5d:69:06:45:
ea:cc:ee:40:67:37:68:13:f8:b3:74:00:b9:ef:96:6c:5e:d6:
42:53:ee:cd:26:87:4b:7b:0f:98:5b:be:99:9c:25:6e:05:8a:
a6:47:b8:1e:fa:52:7d:70:55:77:9d:4a:2b:ad:96:23:96:0b:
37:d4:5b:b5:6a:d0:ff:10:97:25:c6:03:4d:81:be:1c:02:76:
e7:99:f5:17:19:f5:b8:4d:7c:74:f8:77:50:19:da:f8:c9:fc:
73:0c:87:95:94:c5:90:bd:4d:32:be:b7:af:0d:99:19:ca:5a:
f0:62:4b:d3:b3:5e:9e:2a:1b:0a:b0:8f:07:b0:2a:fd:92:d0:
c3:f4:38:b6:86:80:d0:4f:90:76:31:d1:26:dd:9e:8e:d0:b2:
52:36:db:d4:d0:51:1f:d1:de:01:41:5e:95:62:37:54:f9:d9:
81:49:03:af:c0:21:1f:ee:4a:f8:61:e8:da:f0:59:f1:8a:2e:
43:b4:7b:4d:b7:5f:7e:ad:07:22:34:f1:29:ef:1a:1e:3b:fe:
21:5f:4e:dc:85:33:30:c9:84:cc:fc:88:9b:1c:07:e1:60:87:
64:b5:20:1a:77:ac:af:0c:96:61:bc:e0:a0:6a:ec:ab:af:83:
2e:79:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:15 2025 by rpki-client