Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: MkYm6ukTxYFmnZ75kurQguva7DGVIFtX5LGYyJ30FFQ=
Subject key identifier: C4:59:31:DB:99:D5:86:DF:57:6E:7E:52:F7:A5:8A:F2:48:6C:71:FB
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 0194C4D16202713F03BA1012EC48E11EDF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 0E97
Signing time: Sun 02 Feb 2025 04:00:43 +0000
Manifest this update: Sun 02 Feb 2025 04:00:43 +0000
Manifest next update: Mon 03 Feb 2025 04:00:43 +0000
Files and hashes: 1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: MwceTNhvDdsiUQ4ROdyVZj/shi16xTKV/Ty6ZtVzaas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:62:02:71:3f:03:ba:10:12:ec:48:e1:1e:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Feb 2 04:00:43 2025 GMT
Not After : Feb 3 04:00:43 2025 GMT
Subject: CN=c45931db99d586df576e7e52f7a58af2486c71fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:0b:56:ba:b1:25:22:0f:d3:f7:3f:74:9b:
95:c7:24:ed:fa:c3:d1:fc:05:26:b2:ad:38:1a:2e:
fd:71:76:7e:8c:08:89:22:18:73:97:6e:2b:28:1a:
2c:b7:42:48:56:d9:37:63:69:d9:f5:3e:c6:9f:f4:
ba:eb:08:9d:5d:92:0d:29:23:9f:db:c3:10:26:c4:
fb:d1:3d:19:44:cd:e4:df:b5:a2:ac:7c:cc:7f:6a:
87:47:5f:9b:9d:4e:6e:1b:d1:09:78:8d:3e:4d:fd:
e5:9b:9b:9e:61:4b:be:39:d0:84:20:ff:eb:66:af:
e2:74:a3:03:2f:bc:b0:92:14:0a:ff:80:8c:23:30:
d4:b4:75:7f:37:11:45:81:f8:ed:b0:bf:03:ac:b1:
8c:dc:bc:84:11:8b:74:fb:88:d0:0a:bf:3d:eb:b8:
2b:09:f0:0e:4d:48:1a:9f:73:45:12:11:94:83:ec:
e3:e3:71:78:d6:c2:ba:4d:c0:b5:c2:52:90:4f:36:
60:27:75:80:0b:4d:1b:64:4d:35:33:fb:17:1e:d4:
bf:01:0f:a1:96:26:4c:af:8f:b5:e6:39:81:31:ac:
02:22:73:18:cc:4b:60:64:6e:b1:f1:c1:f2:65:21:
f7:ff:f3:ec:f2:47:1c:57:de:ff:cd:1a:d0:63:cd:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:31:DB:99:D5:86:DF:57:6E:7E:52:F7:A5:8A:F2:48:6C:71:FB
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8b:20:e1:a6:fd:7f:08:0a:58:df:d4:e8:32:62:92:cd:21:
37:2c:c3:cd:56:ee:3a:f4:59:45:d5:da:fb:0d:07:d6:f9:ba:
ae:e7:1e:48:d6:44:49:f8:b0:40:89:04:7d:68:ae:c2:ee:0c:
34:61:51:f8:28:28:5f:45:f1:76:39:e5:5f:db:c8:cb:0a:f5:
59:29:88:57:fc:54:9e:26:8b:d6:df:8d:d9:cc:8e:a6:a7:68:
a7:d1:49:bf:20:52:87:be:96:59:bc:33:db:c6:b8:0c:0d:57:
38:65:9e:e3:ed:57:4c:6e:c1:78:50:25:20:f5:b7:f3:b4:e2:
60:53:97:b3:dd:81:e8:c8:aa:e7:70:c4:4f:a0:08:55:a9:47:
71:ba:2d:ad:b5:a8:ba:67:48:17:9e:59:b7:10:fe:00:28:97:
99:f0:2b:31:07:57:a6:05:31:23:d0:0c:e9:b0:f7:1a:fe:8f:
10:14:0d:d4:5d:b1:64:53:c3:c5:cd:0e:d6:ec:94:76:e6:a1:
3d:41:3f:00:92:a8:19:8f:1a:a8:4f:4d:0c:6b:08:b2:0f:51:
4c:d7:73:f6:80:b9:6a:ce:0c:2b:88:88:1a:51:2d:22:f0:04:
6d:72:6c:62:af:e9:65:de:16:4d:e2:11:9a:87:cc:ce:cf:ca:
20:4a:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:33 2025 by rpki-client