Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: s4Zah8/Lbqqn2DyeaV2ygm/neJ/8rnMRpg6Db/O3ZZM=
Subject key identifier: B6:0A:C8:61:F5:A1:70:9D:56:B4:CE:85:4F:5E:52:FF:EB:26:A4:12
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01951135224B9B3640D1B572E5482ED75F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 111D
Signing time: Mon 17 Feb 2025 00:00:49 +0000
Manifest this update: Mon 17 Feb 2025 00:00:49 +0000
Manifest next update: Tue 18 Feb 2025 00:00:49 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: pqUrC8AYMhgjxt7vZU42mww2krQYjcFoBPwApkcUY6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:22:4b:9b:36:40:d1:b5:72:e5:48:2e:d7:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Feb 17 00:00:49 2025 GMT
Not After : Feb 18 00:00:49 2025 GMT
Subject: CN=b60ac861f5a1709d56b4ce854f5e52ffeb26a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:56:c8:a8:e0:70:bb:8a:20:69:62:80:5c:
6c:1b:37:68:92:57:e5:a0:8d:2c:d5:e7:bd:b9:58:
d5:76:9a:f2:36:e1:fd:8a:ba:99:2b:06:b0:c5:3c:
29:f2:7b:b5:2f:99:d8:22:62:79:4f:ef:ce:cc:19:
e4:f6:cd:70:d8:a5:8a:3c:c5:a4:fb:26:6b:71:0f:
64:f0:db:8f:aa:5a:be:b2:93:40:14:ae:d3:50:53:
c3:a8:da:3c:c9:cc:34:85:0c:0d:9b:b8:74:0b:85:
c9:f3:0d:f2:76:8d:b6:66:0a:11:b9:0f:42:c2:75:
05:ea:a4:f2:65:27:bc:77:f4:cf:5a:b6:b6:51:f9:
64:23:19:da:9b:02:cd:7c:08:fb:48:e7:94:8a:51:
98:41:86:8c:2f:5e:55:e0:b3:10:e0:74:91:02:87:
dc:8f:0a:e1:48:ae:45:f5:f3:65:8f:0b:90:67:3a:
48:97:c0:c0:69:96:12:08:4e:d0:77:40:3e:24:bb:
6e:bf:35:be:4c:cf:86:c6:8d:e3:19:3a:70:37:89:
54:a0:d1:95:e9:34:b9:fd:62:d8:76:87:f4:77:1b:
65:42:2f:55:28:b2:81:63:53:65:54:f1:d0:80:6a:
c7:16:c2:60:98:2c:8e:18:a7:f7:17:4f:5c:60:f1:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:C8:61:F5:A1:70:9D:56:B4:CE:85:4F:5E:52:FF:EB:26:A4:12
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:a9:75:96:fe:4d:8d:ea:3b:72:ba:b4:19:d6:39:92:b5:
9c:74:85:ab:ee:cc:d5:6c:df:e0:12:bf:97:62:1d:e1:39:12:
a0:ad:43:51:8b:d8:13:4b:5b:a0:63:a5:6c:41:51:62:92:f9:
e2:07:11:5a:f5:13:06:e2:09:31:73:17:94:45:3b:f6:12:c3:
ef:32:2a:4b:ca:0b:92:02:ec:1b:28:18:b0:92:15:5a:1e:b4:
71:2d:f1:b4:b9:0f:60:4b:21:29:4f:32:77:72:cb:32:c0:a7:
17:50:00:03:b8:f0:c5:9e:76:fe:1d:44:b7:3d:83:c8:82:22:
bd:fd:37:59:36:fc:3b:46:35:8f:b6:7c:b7:7e:1c:e2:03:c8:
e5:ad:09:ec:6b:6e:c2:90:f7:25:f9:ce:69:b6:7a:31:a2:91:
7e:4b:69:af:21:66:7b:3e:07:75:f1:ca:b6:5b:2e:cd:45:9a:
f7:56:ce:fa:f4:77:29:50:3e:03:9e:ae:3a:ec:79:8b:d3:f1:
62:a3:b2:0c:69:0f:f5:d3:fb:2b:3f:9d:4a:2d:85:d4:ad:3f:
89:15:6d:54:cf:3a:a7:3c:ba:5a:bb:40:11:a1:47:b8:c7:34:
80:fa:03:3a:80:eb:6b:62:a6:42:05:62:c1:45:29:42:fc:ff:
83:25:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:01 2025 by rpki-client