Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: Sk3B16xF5MQp3jMA2YbYer7sFHGRJl8aGI0A2AeoyAg=
Subject key identifier: 8A:D2:C8:52:EA:D8:B1:07:0C:FB:66:70:2F:4B:3E:BF:22:5D:0B:5C
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0194C3F5C4E042C9A99A9ADA3FCDE02E39E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 00:00:51 +0000
Manifest this update: Sun 02 Feb 2025 00:00:51 +0000
Manifest next update: Mon 03 Feb 2025 00:00:51 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: fG4vFcxQp3L/7TZwKO66MFFmX7I09oefw2g++lL1MbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:c4:e0:42:c9:a9:9a:9a:da:3f:cd:e0:2e:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Feb 2 00:00:51 2025 GMT
Not After : Feb 3 00:00:51 2025 GMT
Subject: CN=8ad2c852ead8b1070cfb66702f4b3ebf225d0b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:9a:0a:8b:c7:64:d8:cd:c4:a8:71:07:87:
59:df:dc:b2:0e:cc:36:5f:27:fc:d6:90:05:c0:43:
b7:44:22:9d:40:16:17:79:bc:1e:4e:ea:df:c5:2b:
f9:88:cc:8e:ba:ce:20:51:2c:9a:1b:b7:8c:99:46:
3f:ee:1e:f8:0d:5f:8d:43:7f:55:db:a0:c7:7e:3b:
86:2d:ce:e2:dd:a2:c7:c6:43:5f:b1:52:bc:63:90:
21:a0:ad:dd:3d:e2:67:38:7c:5a:9f:6b:9d:fe:a4:
51:f7:73:05:ce:af:3c:68:9a:0b:d8:21:2c:51:9d:
eb:c1:cf:cf:5e:87:40:04:6c:bc:c1:8c:72:e2:c1:
31:70:13:12:15:dd:42:da:44:cc:d6:62:03:8e:5d:
a7:69:7a:78:db:bb:cc:64:69:f5:33:d6:85:da:66:
eb:58:26:08:c8:a5:9d:0a:8e:0d:16:50:4b:05:9f:
c6:57:ed:b5:81:ce:88:7f:52:47:d7:68:16:d0:77:
55:ba:fe:80:bf:50:ec:12:01:62:2d:ef:00:d0:9c:
b1:cd:d9:37:a0:82:92:cc:d1:02:fc:39:c7:b8:ab:
0a:89:b4:3b:e6:51:a7:53:79:57:6c:27:2d:d6:d2:
00:fa:25:86:c8:1d:c8:85:27:a9:28:55:e6:60:b4:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:C8:52:EA:D8:B1:07:0C:FB:66:70:2F:4B:3E:BF:22:5D:0B:5C
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ae:60:17:13:2b:33:42:67:ca:25:ff:69:44:3b:f7:43:4b:
b3:ad:1f:79:a0:43:73:63:9d:be:a9:1f:0d:9a:52:78:01:aa:
9c:b8:50:53:b1:df:5e:29:b0:58:0f:e2:d6:0f:0b:45:ed:78:
da:3b:fa:62:56:b5:41:0d:00:9e:e0:78:b2:90:d8:af:35:79:
2f:0b:ec:48:5c:2b:5f:7b:4b:02:27:3c:96:61:59:2b:a1:1e:
03:15:86:bd:0f:1b:bf:3c:69:de:65:94:2a:36:ec:fb:78:4c:
86:eb:71:b3:b2:49:5c:fe:8f:50:9a:84:42:b9:13:3a:04:b4:
97:0e:5e:ba:01:4d:46:82:94:ae:46:6f:45:5b:26:d1:d0:7a:
26:d0:78:46:9d:cf:fe:b6:57:2d:67:1c:c7:bc:58:0c:9f:cb:
ab:1e:d9:d3:a0:d9:c4:85:05:b5:56:9a:e2:c0:6e:67:7b:41:
e5:cf:9a:2a:1b:84:e3:bf:32:fe:ae:05:e9:3f:d5:32:72:ff:
aa:c0:a4:63:cb:0f:1d:52:87:88:6a:8e:dc:14:ef:5a:8e:f6:
2a:3d:b9:87:0a:f4:08:90:a8:3f:a8:48:a7:ef:5d:b6:70:79:
46:c9:61:88:95:97:54:1d:cd:c4:40:ed:d6:c4:50:84:39:44:
62:bf:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:04 2025 by rpki-client