Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: OKCWD9+OcHkhg/dfSQlf0moCiypJCApdPtmt+U9AAec=
Subject key identifier: 65:D5:D6:5D:D4:04:5A:97:F6:B6:5B:6C:C6:3B:C8:47:CE:BB:C3:9D
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019511D9B2B9AAC33694C09AFA015D0C5C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:34 +0000
Manifest this update: Mon 17 Feb 2025 03:00:34 +0000
Manifest next update: Tue 18 Feb 2025 03:00:34 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: nUs8TRbuTHyMdmNu2UMAic/t+IR0wABD2w8PNNEDwb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b2:b9:aa:c3:36:94:c0:9a:fa:01:5d:0c:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Feb 17 03:00:34 2025 GMT
Not After : Feb 18 03:00:34 2025 GMT
Subject: CN=65d5d65dd4045a97f6b65b6cc63bc847cebbc39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:b0:df:0e:fb:9e:a6:23:81:af:06:69:3f:
4f:07:92:69:a2:ff:02:7d:33:76:5c:e6:e9:1a:fe:
1a:c5:4d:44:a6:65:4b:53:dd:cd:ff:8c:8d:82:14:
1d:29:6c:06:54:6a:2d:c1:88:f5:2e:60:0d:56:61:
0b:07:e5:78:c7:47:7f:e8:1d:ad:bd:5f:5c:b8:bf:
d8:8b:95:3e:7f:00:b5:08:e6:1e:80:93:2b:3f:c8:
2a:91:32:2c:8b:94:7d:ac:83:89:18:61:b9:7e:84:
2c:68:94:4a:d7:ac:73:29:78:5e:ae:b7:45:96:44:
92:a5:97:62:55:6a:52:45:16:0d:26:b4:03:0e:fc:
05:fb:18:69:1f:d5:66:1f:97:86:61:af:94:47:02:
b8:c5:f8:02:1e:19:3f:2b:5a:c8:bf:0c:29:19:27:
53:d3:55:fc:e5:89:84:47:40:51:f6:14:d8:e1:23:
78:3f:4f:f4:9d:7f:8f:77:9a:c0:22:66:bc:59:97:
0d:68:41:78:5f:2a:0c:26:86:c9:a8:34:cd:80:e8:
a7:9d:5b:cd:bb:50:0a:5a:35:01:6e:72:11:2e:db:
8e:c4:5f:fe:65:06:3a:94:96:12:06:a5:ad:26:c3:
cc:e2:a7:e6:d0:78:5e:9b:bc:a1:e4:1e:9c:60:66:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:D6:5D:D4:04:5A:97:F6:B6:5B:6C:C6:3B:C8:47:CE:BB:C3:9D
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:33:1a:56:ba:a5:01:13:b0:57:a4:70:b2:ac:11:f0:75:
6b:68:be:b6:cb:19:60:72:2d:b7:12:2e:4e:28:36:93:83:03:
9a:0c:0d:f7:dd:d4:b6:3d:71:19:06:ee:af:ec:cb:cb:4b:06:
9c:dc:92:37:15:95:2f:d9:89:0e:e6:f3:84:7b:90:2a:11:38:
06:1e:d5:35:e6:95:9d:a3:f6:3c:38:8e:d7:ce:64:1c:3f:12:
97:76:6f:25:ae:cb:e2:19:fd:bc:ea:eb:b2:38:ee:c6:9e:c2:
22:f8:d8:2a:59:43:39:ff:fb:55:18:a6:55:12:ce:60:86:00:
9e:32:85:4c:97:a4:d6:82:de:2f:29:64:7c:c8:b7:b9:3e:1b:
46:55:d7:4c:d7:7e:e0:c8:c5:81:f1:18:ba:f0:d5:77:68:91:
27:c5:f6:ed:07:1a:0f:b2:f1:2d:4b:cc:18:b0:06:99:37:bf:
93:32:96:e8:07:4c:61:2d:36:d1:3e:4a:bf:0a:19:de:d9:2f:
0d:99:e2:86:b0:0c:0b:24:b6:ed:7c:11:a2:09:61:59:59:c7:
c3:7e:a5:53:00:89:1d:42:fa:22:60:41:57:84:84:73:14:71:
81:de:b6:22:25:0f:a2:f3:b5:b2:17:73:fa:2a:5a:91:d3:8c:
77:29:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:46 2025 by rpki-client