Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: x+g8vybO0TAuIVluugi9Bw4XZuhkaXoHYpphi+SKf7o=
Subject key identifier: 74:C9:4A:E3:DE:CF:94:19:70:D7:6A:A2:C7:61:9C:43:26:E3:6E:00
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 019511D976D6CCD7B7576E7DFCFE9609F6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 03:00:19 +0000
Manifest this update: Mon 17 Feb 2025 03:00:19 +0000
Manifest next update: Tue 18 Feb 2025 03:00:19 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: eWEv02CYSOtgrPrRgsSGJM/5PAfGuTIyAzbXi6DXXB4=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:76:d6:cc:d7:b7:57:6e:7d:fc:fe:96:09:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Feb 17 03:00:19 2025 GMT
Not After : Feb 18 03:00:19 2025 GMT
Subject: CN=74c94ae3decf941970d76aa2c7619c4326e36e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:94:92:92:30:1c:98:5d:8a:49:bf:a6:16:
8a:0a:39:57:95:a8:a2:92:ab:76:1f:24:72:aa:bc:
68:53:86:0d:e6:bc:f1:db:75:99:23:a9:cc:57:ce:
3b:aa:fe:e1:09:1e:bf:52:3f:3e:b3:81:57:8a:46:
69:72:bb:ab:50:eb:5f:2d:f3:a9:a3:7b:b7:bf:de:
71:d3:31:dc:98:dd:ac:6e:bc:ea:af:2c:19:cf:03:
49:62:c5:77:d8:27:b0:19:3d:4e:af:a3:26:2b:c1:
08:8c:51:0f:15:23:27:53:9b:f1:2b:28:62:5e:48:
ae:b0:66:85:2c:83:6c:24:07:5d:2a:36:fb:5d:8d:
d0:73:c6:a1:41:47:bc:79:ba:39:1b:b0:30:43:bb:
ca:da:39:75:ea:01:20:3d:e2:cd:84:79:63:1c:16:
9e:51:a5:79:cc:0d:6b:7c:2d:bb:b8:66:97:7a:87:
ff:c9:01:7e:67:26:8f:0e:98:88:5c:f4:2f:27:55:
84:95:0f:63:2d:41:33:77:2e:f1:fb:17:57:27:33:
97:a8:9d:83:a6:9d:ea:c5:2b:34:1d:00:56:fc:24:
a8:4d:84:1b:82:1e:f2:0e:3b:e7:78:a6:23:60:1a:
e1:1a:b1:a9:ca:f2:af:17:97:b4:a2:a0:f2:dc:43:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:4A:E3:DE:CF:94:19:70:D7:6A:A2:C7:61:9C:43:26:E3:6E:00
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ad:3f:2b:43:2e:cc:95:1b:44:66:5e:9e:6a:db:4c:c6:d9:
c4:9e:14:37:73:04:c2:4d:9b:40:fd:8b:38:74:20:e3:6a:2a:
da:a4:6b:ca:d1:0d:9e:db:1a:48:57:02:80:61:9c:ca:79:c7:
c7:5d:7a:be:ab:54:6a:28:41:38:75:67:4d:ea:75:f1:66:fc:
ed:9a:72:7e:5b:01:1c:bd:3b:4a:9e:1e:4e:05:d4:ee:68:50:
1b:27:02:ed:17:6d:60:d4:4e:93:fb:3c:07:22:bb:24:c5:bf:
c2:42:56:d9:0f:5e:6c:d5:fa:77:90:ad:6e:f3:f5:c9:f1:cf:
74:f7:55:27:3d:82:d8:b8:6e:5f:10:89:c8:cc:69:bb:c4:33:
cd:9e:6c:83:8d:2f:0a:a6:22:c7:a3:4c:37:dd:62:f8:01:25:
d2:be:7d:bc:40:30:7e:d9:ca:bd:64:e4:14:51:19:0d:dc:b7:
e1:f4:3c:d8:a1:40:cd:b4:3d:7d:a6:b1:ba:8b:a1:82:ce:cb:
ba:2e:8b:0b:f4:c9:04:e6:bb:96:73:59:d1:e2:14:0b:c6:5d:
bb:24:88:3d:85:cd:0c:bf:78:e1:3c:df:2e:72:34:7e:b7:0a:
53:31:d8:bf:9e:a0:5d:b4:b9:46:41:9e:d8:c9:ab:b7:59:27:
6e:7f:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:02 2025 by rpki-client