Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: Hs7JHAT1zJ+rbqJdDSx+ldLfu5X2hSdFDasyikZaUgk=
Subject key identifier: BA:B9:A6:09:8F:C3:2A:69:26:3B:1C:E0:A3:2C:76:67:A4:59:9E:B5
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019511347F19ACA5977C40C87D716839C9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: Bsh+e+b+Ci9sMMcGqvdidWmRboDdrPz1uEcvRi+5LJw=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7f:19:ac:a5:97:7c:40:c8:7d:71:68:39:c9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=bab9a6098fc32a69263b1ce0a32c7667a4599eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:fb:84:8a:96:97:83:38:17:b7:56:1a:77:
ac:56:c6:f0:a6:d7:91:23:d2:65:49:a8:ea:cf:24:
86:0e:fd:e6:8b:11:d2:7c:bb:cc:9c:66:28:de:ea:
83:b6:de:ab:39:89:e8:59:a2:7b:b4:e3:5e:cc:25:
53:6e:63:2e:84:9f:29:23:e9:1a:c3:2b:27:d5:6f:
f1:b1:e1:6e:bf:d5:b6:66:40:81:db:6f:01:93:c8:
c2:37:aa:e8:b6:21:ac:29:62:a0:17:e0:9e:9d:d0:
f7:a4:4a:85:ee:94:a8:e0:fd:93:1c:db:ef:2c:49:
33:d5:d9:c1:a9:b1:8a:80:99:9b:02:b1:e7:8b:4f:
6e:cc:1a:21:fc:a1:9f:b6:53:4b:2e:d7:bf:38:88:
b0:34:1d:2a:a2:11:42:48:39:d3:be:a7:54:84:6b:
1d:20:a3:2f:ee:42:15:bf:d9:b2:55:17:bb:5e:cf:
46:89:29:cc:9d:99:a2:b6:56:cf:2a:87:bb:00:85:
b6:85:d7:43:b3:5d:22:a5:9d:91:e4:3c:ba:c9:05:
55:30:5b:d5:4c:bc:bd:4f:1d:92:9c:9f:06:a3:be:
f0:f9:c9:69:a4:35:7a:ee:0c:65:3b:a0:be:08:63:
0d:91:fe:a8:18:5a:84:58:5f:e2:c3:98:92:db:9d:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:A6:09:8F:C3:2A:69:26:3B:1C:E0:A3:2C:76:67:A4:59:9E:B5
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:ab:a4:2e:c2:44:86:9e:28:62:89:eb:84:be:8a:69:b2:
2d:44:ae:04:47:e6:7e:99:5c:7c:dd:8d:d9:d1:aa:ed:f5:1e:
93:59:a7:f1:5f:08:a0:b6:50:f0:e6:b1:3f:60:59:44:52:d5:
43:29:1e:01:41:a6:f9:7f:e2:d7:cf:3c:5a:f9:26:29:15:26:
e1:a0:1e:ba:b3:6a:8b:82:d3:c1:56:05:db:47:f9:af:65:4b:
89:db:6d:4e:65:0d:d0:3d:19:e1:a5:1b:b4:69:08:8d:9f:7c:
3c:14:06:08:db:16:19:c1:9f:04:72:2e:75:04:4a:ef:20:9c:
12:3e:41:f4:c3:62:a1:0a:05:9c:6c:ad:a7:4c:a6:b4:42:df:
93:7c:c8:f7:d6:9b:f2:82:33:2a:ff:59:6f:01:8c:bb:d3:f9:
53:a7:a7:e4:3a:36:67:e4:3e:6b:55:24:be:c3:6f:11:f8:6d:
b7:d5:f9:b0:de:1b:6a:b3:49:af:74:d0:47:0c:ab:3f:1e:74:
c6:51:ab:6e:de:08:30:41:a0:d0:32:67:c2:04:fa:ec:4c:97:
70:93:ef:41:74:7c:ba:2d:76:4c:08:45:8e:8f:50:53:11:02:
07:ca:bb:1a:c9:d3:0e:60:54:80:ec:13:20:57:5f:a4:5b:21:
5c:c8:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:01 2025 by rpki-client