Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 2faSvn/vlPIeodDZjl/+lVPFAiAmTTRd7vxS7XIZeO8=
Subject key identifier: D5:81:5B:BB:3C:D9:FB:95:FD:C8:71:7B:27:E9:74:9D:DB:91:38:3F
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019511352950000A0C5B12D7674BE88F0867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:51 +0000
Manifest this update: Mon 17 Feb 2025 00:00:51 +0000
Manifest next update: Tue 18 Feb 2025 00:00:51 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: v5YFUJJPf6IxTqDUo3vKLH3ovKe0w/nRJcy7WO/EDj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:29:50:00:0a:0c:5b:12:d7:67:4b:e8:8f:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Feb 17 00:00:51 2025 GMT
Not After : Feb 18 00:00:51 2025 GMT
Subject: CN=d5815bbb3cd9fb95fdc8717b27e9749ddb91383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:aa:45:90:c8:03:ae:67:32:84:68:13:bf:
80:7b:59:cf:f1:a9:07:11:89:2c:e8:54:e3:d9:7e:
fb:5a:73:60:c1:fc:77:1c:09:95:52:ad:9f:66:22:
ff:75:db:14:80:71:46:cf:ea:7f:fe:98:cb:8e:ff:
ff:79:c3:68:ce:11:37:f0:2a:b7:af:98:cb:90:8f:
18:bc:c9:39:61:4c:c5:ae:10:3e:9b:56:95:76:49:
d9:a2:60:fe:dc:f7:22:af:70:e2:6f:f4:32:f1:c3:
e3:48:68:dc:c4:ad:10:99:4a:62:60:94:f0:26:27:
bb:34:f4:d8:86:d6:45:62:4f:dc:5f:06:d2:5b:77:
b0:d2:b2:62:67:28:ff:42:0b:44:df:05:1c:79:b6:
77:0e:4d:1a:4c:10:2c:91:49:79:3a:6a:45:12:14:
cb:3e:5d:8f:20:d3:b0:72:ed:a4:a7:32:55:09:8a:
b8:35:cc:29:c5:4b:69:85:64:32:8a:89:de:33:51:
fb:31:f9:9a:b6:61:48:d5:aa:73:64:cb:76:51:53:
6c:09:c8:e3:a2:2d:62:ee:8c:d8:e5:ac:f9:ac:49:
58:c6:2d:91:4c:13:ed:16:43:ab:f6:d8:cc:34:37:
7d:25:55:91:b9:13:79:80:65:52:e9:1f:0d:d6:53:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:5B:BB:3C:D9:FB:95:FD:C8:71:7B:27:E9:74:9D:DB:91:38:3F
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:92:ba:d0:d5:16:39:f7:9d:8c:c5:bf:86:1a:69:25:8f:af:
f9:81:a9:c9:3b:15:a7:fc:62:d2:4a:7c:2e:90:56:c5:78:ae:
0c:61:6e:7e:ef:9f:f8:80:e4:ae:ac:39:af:31:44:fd:89:7f:
21:06:e5:3f:df:df:5f:53:25:69:c7:d0:6b:d6:51:98:4f:36:
8f:61:c3:c2:48:15:d2:a9:86:90:e2:03:12:26:e5:ea:bc:f1:
47:54:8e:85:a9:52:d3:6a:fe:5e:6d:32:ec:46:3f:2b:81:04:
e1:02:8c:0f:a4:2c:cb:0a:99:f0:c7:ae:86:a1:b2:ea:bc:79:
a9:18:90:fb:72:08:f0:60:2a:b2:b9:07:0e:4d:13:70:ef:ee:
2c:e0:33:09:de:91:3c:a8:ac:85:b6:42:19:ac:a5:27:14:52:
45:34:58:5d:6f:78:f3:0a:6e:fa:86:7e:4d:59:e6:3e:41:5c:
f1:49:72:04:79:a3:fb:f6:41:26:09:81:b7:b3:9c:18:84:a1:
8d:ff:1c:32:1a:bc:aa:ba:1f:bc:13:c7:4c:84:26:a2:4a:d7:
1e:6f:2a:9b:7c:0f:dd:4a:64:57:8e:91:1b:fb:90:ab:6c:14:
d5:cf:20:1a:71:ea:49:38:cc:83:36:da:2d:a6:53:9a:5f:3e:
4b:5f:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:51 2025 by rpki-client