Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: t+t/jDXejvbRwZXJgueGZ9w96fv9cMfYoQSXmqY6a90=
Subject key identifier: 9D:B4:2F:9B:1C:88:25:B1:93:D1:D9:D3:D6:CC:6C:0A:61:64:C3:BF
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 0194BBCDF7A483F527958DA78C951C02341C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0874
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: laUTkCNXKTbCiI8xQkYvMqDy8jhfJaaME+MXDfppqS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:a4:83:f5:27:95:8d:a7:8c:95:1c:02:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=9db42f9b1c8825b193d1d9d3d6cc6c0a6164c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:52:b8:3f:98:0f:59:b0:cb:9d:c6:24:93:
60:c9:6a:57:cd:56:19:ff:0d:7f:7d:fe:4d:bb:fb:
36:10:da:48:c4:4a:49:a0:a2:aa:d8:3b:6c:c8:ff:
62:c6:67:d2:48:41:05:9f:75:4b:bb:9b:85:56:d7:
15:b2:3b:ce:6a:69:7c:98:31:c8:92:25:77:2d:af:
ea:34:8c:82:fc:99:da:a8:a6:c7:ad:e3:a9:08:35:
05:5b:8a:29:af:8f:3a:04:c6:db:2c:fe:2e:da:ac:
a8:f0:9e:c4:b6:e5:cb:98:1c:81:2a:4a:67:98:2d:
a8:6b:80:c8:3f:77:1e:20:c0:01:3b:7d:f7:74:d5:
8d:4c:21:d5:32:0b:fa:05:b4:ea:9f:a2:41:3f:b5:
35:f3:8e:54:6a:46:cf:74:f6:fc:03:8b:4f:df:27:
a1:10:73:5a:5f:a4:41:fd:57:71:46:08:95:89:4c:
d6:22:76:51:b0:1b:ee:d8:21:89:01:8b:b6:d6:08:
71:ee:90:98:70:c9:fe:09:9e:0d:55:75:f4:98:7d:
72:fd:fb:b5:76:af:c1:e0:f1:0b:d0:66:d1:f6:06:
48:46:3d:89:1e:0e:8e:97:dd:33:0a:ca:be:f3:21:
b4:5a:7a:b0:ad:70:cd:d2:40:49:a4:b5:91:2e:a7:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B4:2F:9B:1C:88:25:B1:93:D1:D9:D3:D6:CC:6C:0A:61:64:C3:BF
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:f4:de:30:b5:21:31:8c:69:9a:79:b4:90:6c:ff:1e:3e:
61:1d:c3:a1:73:3d:56:25:54:69:06:e1:6d:54:20:eb:33:ec:
e4:84:5d:b1:30:65:5c:f4:af:f7:36:01:a7:c1:cc:c3:ba:8f:
2f:f2:f5:9e:da:ae:96:8c:37:fd:34:2d:48:85:b2:ab:f6:ad:
cb:48:64:88:a2:97:56:e1:93:a9:9b:08:58:28:cd:7d:9b:de:
f3:49:16:7d:ba:b1:24:0f:86:1f:ba:c8:75:a7:2c:6b:e9:e7:
40:64:c9:f3:36:5f:40:fa:fc:c4:eb:f7:07:f2:ba:46:11:7e:
05:bf:f2:ed:42:ce:d8:31:65:ed:c5:74:e8:da:00:5b:e9:98:
c5:16:97:8b:93:ad:b7:a7:f7:e8:1e:69:59:a6:27:df:84:80:
83:b5:72:b6:23:39:fd:40:09:f1:3a:09:20:e9:40:2a:25:4f:
4d:37:e4:33:cc:53:fd:c9:ee:0b:63:fd:ba:5a:e3:66:1e:c8:
d3:ea:40:f6:45:eb:8d:08:47:5e:45:cf:48:e6:f8:a9:53:39:
06:80:fd:d7:d3:37:7d:b0:e5:d5:68:75:47:55:d0:09:f8:41:
1f:d2:14:29:00:e0:c6:9b:26:4b:b2:bd:f1:7e:67:b5:f3:44:
56:81:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:14 2025 by rpki-client on console-fra.rpki-client.org