Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: XoYjRq3UaZpE0548jyv3PtgMQEgHzZN1syYSEZcfbGg=
Subject key identifier: 34:62:8E:FA:CF:67:ED:91:99:D1:85:AE:22:BF:EC:D8:82:BC:1C:E1
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 019511D97AF8A3083DE190F537B65799C4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 145F
Signing time: Mon 17 Feb 2025 03:00:20 +0000
Manifest this update: Mon 17 Feb 2025 03:00:20 +0000
Manifest next update: Tue 18 Feb 2025 03:00:20 +0000
Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: gk7Eq58Z/cDT+iRKEUojarNTz8SapO0w1fS7GRUEPFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:7a:f8:a3:08:3d:e1:90:f5:37:b6:57:99:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Feb 17 03:00:20 2025 GMT
Not After : Feb 18 03:00:20 2025 GMT
Subject: CN=34628efacf67ed9199d185ae22bfecd882bc1ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:80:5e:57:b1:f9:30:9a:71:0a:30:0a:2a:
e3:df:df:95:6d:09:a9:75:70:bc:44:1d:47:db:d3:
c3:01:72:0b:fc:5c:1b:40:9a:35:e9:eb:89:f4:3b:
cb:d3:aa:5c:50:88:2a:56:96:1b:72:9c:af:c1:4b:
55:1e:0f:d2:e2:b9:d1:82:ce:24:5a:8a:a4:5c:d3:
58:b9:c4:32:ba:6b:7f:76:58:76:33:54:fa:b8:12:
d0:10:cb:f3:d9:a8:10:33:6b:c8:e0:b2:ee:d2:6b:
f6:7d:bf:10:b8:8d:8b:5b:60:fa:7d:83:32:1f:c5:
a6:62:33:b5:9f:fd:d9:9a:c9:dd:ec:e1:cb:59:71:
ff:34:dc:a8:d1:9c:55:e0:f7:d4:7e:42:89:1d:40:
46:8b:7c:25:61:88:f8:dd:ca:3c:59:2d:36:10:7b:
e2:4f:8e:05:47:27:78:75:a1:44:9d:76:b7:01:57:
5d:1a:b3:00:04:57:16:77:cc:d5:d4:eb:96:13:99:
8c:50:16:46:35:c0:d6:94:30:06:e5:0f:b3:29:2c:
c7:4b:8a:1d:c2:fd:62:94:82:19:d9:66:6c:05:77:
d1:09:9a:3b:aa:af:a8:0d:a3:db:3c:08:60:2d:98:
df:d9:86:40:da:6b:4d:a6:05:2b:08:a2:9b:6f:c5:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:8E:FA:CF:67:ED:91:99:D1:85:AE:22:BF:EC:D8:82:BC:1C:E1
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:c0:df:25:19:00:5b:3b:a3:4e:f8:89:66:c7:48:b8:ad:
0d:3f:02:6a:ec:07:53:a5:05:8c:86:38:76:a0:e5:1f:cc:fd:
55:7a:50:2d:ff:94:4d:9a:69:43:45:71:04:d7:b8:88:4a:48:
02:21:bc:04:e8:32:24:a4:90:cb:df:cb:20:52:0f:5d:95:bf:
19:6d:77:ae:f0:65:2c:c5:aa:9a:94:da:89:44:d0:f5:dc:dc:
38:17:af:f4:93:36:62:eb:27:55:ee:fd:74:77:80:f3:e5:91:
90:cf:a0:c5:e2:6a:35:2f:eb:c0:54:d5:01:e6:6e:fb:5c:4b:
e3:91:70:68:f2:f3:41:a9:41:ea:f1:31:26:7b:de:ec:7d:fe:
88:59:5c:fc:ac:8e:16:4c:10:a3:ac:c8:27:7c:b8:d0:d0:b3:
68:d7:bb:c4:e2:93:81:3b:11:e1:fd:f1:2a:b2:10:6f:a7:ba:
ee:20:98:2d:11:e2:2f:7b:bb:d5:0f:fc:12:a0:6a:bb:9b:59:
a8:58:e9:20:d6:ea:25:a8:a2:d0:cd:55:73:a5:fc:fb:03:a7:
64:d3:a0:7b:dc:3e:38:eb:e2:7f:05:0f:3c:c3:4a:97:d9:6b:
0d:58:d4:34:f9:9b:22:d0:54:6b:7c:ba:0d:1c:a9:75:93:58:
31:f4:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:56 2025 by rpki-client