Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: 1Nru219mgqWjD9W38u45Gmv21a+4yQEs02jApBJ2mB0=
Subject key identifier: 17:CA:C5:4B:83:CF:44:F7:2F:EC:21:71:EB:0A:68:30:D6:70:CD:48
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019510C7BEBDE3DA20775DB8BE6BA9B1E7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0BF1
Signing time: Sun 16 Feb 2025 22:01:20 +0000
Manifest this update: Sun 16 Feb 2025 22:01:20 +0000
Manifest next update: Mon 17 Feb 2025 22:01:20 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: knHeLNbMw+XXPUgwRILirfWHxgR5OTLtrR65cUppGx4=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:be:bd:e3:da:20:77:5d:b8:be:6b:a9:b1:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Feb 16 22:01:20 2025 GMT
Not After : Feb 17 22:01:20 2025 GMT
Subject: CN=17cac54b83cf44f72fec2171eb0a6830d670cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:6b:c3:82:8d:4c:95:6e:b8:68:d0:eb:10:
b6:47:0c:e1:e5:a4:31:55:1f:40:88:ef:e2:4c:67:
60:54:be:59:4e:72:98:bf:bf:72:80:77:cc:3f:46:
47:bf:f5:a8:e7:2c:27:e1:b8:39:4d:4f:93:0a:db:
60:6c:0b:d0:a7:b6:8e:fa:0f:97:de:f6:f5:20:5a:
a5:09:bf:69:c6:c2:0d:0c:ac:97:21:4d:57:fb:38:
eb:61:86:52:53:50:45:51:22:28:2d:2c:db:4c:68:
2a:16:3b:ff:9a:27:6e:65:fc:ea:57:cb:55:bb:bc:
bf:b3:66:0a:85:43:61:1d:22:48:00:48:83:9c:a3:
90:05:e7:f2:cf:d2:97:34:66:88:86:1c:27:36:93:
6e:c7:dc:fe:5c:5a:d9:eb:b3:c8:ff:44:a3:f7:f1:
7b:9b:81:df:44:94:40:ee:e9:c8:4f:d0:c6:f6:f5:
e5:fa:40:cd:c4:64:42:47:b3:ee:bc:29:36:a5:e8:
c4:16:2e:52:5e:25:28:f3:52:75:49:0a:38:e3:9d:
eb:e5:88:fe:43:56:51:9e:68:54:53:a1:3d:12:9a:
e1:b8:1b:7d:3f:c9:19:ac:90:54:1c:9b:b3:d9:89:
36:36:b7:6f:e9:32:f8:21:f4:3c:30:fa:c3:ab:6a:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:C5:4B:83:CF:44:F7:2F:EC:21:71:EB:0A:68:30:D6:70:CD:48
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:ba:96:ea:34:f5:a9:91:1b:0f:35:73:b4:1e:71:ba:3f:
eb:fb:cb:5e:c6:80:9c:c5:4e:7a:ef:1d:85:5d:ba:5c:73:86:
6d:e8:57:96:8b:d6:cb:74:e7:6a:c0:5e:e4:67:96:a6:cb:1c:
ac:f4:2f:96:04:83:0f:52:f1:b5:d9:04:8e:d4:8b:b6:b2:74:
75:a8:ff:6f:79:c1:dc:7f:1a:5e:b4:c7:1b:7b:92:a4:ea:1a:
a5:73:f5:25:86:bb:38:56:df:a4:3f:dc:30:e1:84:8b:d0:9e:
5f:36:c4:e2:0c:24:00:39:47:b1:40:29:25:68:7c:bd:fe:47:
95:47:eb:32:de:26:c5:87:04:4f:d8:d4:ae:1d:4c:21:ff:a9:
79:f9:81:bd:65:84:3b:6c:93:c5:8e:8c:de:d5:be:b4:71:3d:
39:57:81:de:b2:9f:0b:be:62:31:bb:f2:11:a9:07:12:75:e4:
2b:24:c5:da:d4:a5:86:5f:35:f1:34:35:20:69:1c:47:ae:a5:
e7:f3:5f:53:da:71:66:86:0a:75:86:7e:38:85:18:9d:3e:75:
3e:1c:11:fb:51:bf:09:66:5b:40:5e:19:74:0b:ed:67:1a:08:
5b:8b:f5:7b:f1:a2:1c:ad:b2:6f:3b:f3:90:5b:fb:52:bb:07:
f0:55:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:43 2025 by rpki-client