Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: Nu0AC5KJ2V9p+8BUIpj9P6/fQsBMfSIpyv35/mi9jow=
Subject key identifier: 1F:9C:9F:82:F2:26:62:C4:DD:47:B8:C6:E4:A9:6F:FA:97:C5:7F:CD
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 019510C6EFAE8893F24A1D68174325EB9450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:27 +0000
Manifest this update: Sun 16 Feb 2025 22:00:27 +0000
Manifest next update: Mon 17 Feb 2025 22:00:27 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: FNzP3fvSeolfVWuFfq8msRvKUNGD3x6YMscp6Y3dM9o=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ef:ae:88:93:f2:4a:1d:68:17:43:25:eb:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Feb 16 22:00:27 2025 GMT
Not After : Feb 17 22:00:27 2025 GMT
Subject: CN=1f9c9f82f22662c4dd47b8c6e4a96ffa97c57fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:09:22:a7:52:fa:e2:ab:98:d4:99:69:fc:
45:57:89:81:ff:fb:58:a7:ab:c0:e6:8a:f5:c4:10:
ba:31:2b:74:13:52:c0:65:e0:01:4c:e6:57:9a:2a:
20:75:ec:3d:88:c7:4d:36:44:76:e2:d1:68:d5:72:
2f:70:58:e0:d5:bd:ba:bf:69:d6:7b:95:85:4f:d7:
45:39:e7:a6:33:67:b5:a8:e0:43:96:64:a3:ab:e6:
ac:c0:83:f9:93:22:13:d8:f2:ab:0d:81:87:0a:68:
3f:b1:b7:d9:7d:a0:01:1a:c3:d7:52:81:6f:85:b5:
cf:73:f2:87:ba:53:f7:eb:63:42:44:c9:e6:c4:d7:
8e:63:4a:d5:de:90:6e:b4:bf:17:75:42:fb:d0:e2:
fe:76:5c:75:3e:f2:29:42:4f:a6:57:3d:dc:1f:7d:
52:71:4d:61:7c:64:6e:1c:24:f6:4f:8e:c8:bb:0c:
97:46:d5:29:2b:44:1d:70:90:dd:a8:49:b9:67:8d:
b8:c4:a3:77:c4:30:ce:6b:7b:35:fb:45:c2:9c:5c:
ed:a0:ff:39:f2:99:89:8b:49:37:28:f6:df:97:83:
f5:30:c1:e7:53:d9:89:cd:1a:08:01:4a:5e:8c:2b:
07:a1:5c:1a:1c:78:8f:6a:d3:dc:50:05:ad:76:60:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:9F:82:F2:26:62:C4:DD:47:B8:C6:E4:A9:6F:FA:97:C5:7F:CD
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:05:f2:66:c8:c9:24:eb:3b:e2:e4:d3:5c:61:ce:6f:52:
41:f9:ec:ea:09:ac:1f:e7:3e:7b:9d:ac:f3:ec:67:15:f9:31:
c9:6b:cb:1d:d9:b9:26:fa:d5:ea:f7:cd:f3:a4:20:eb:9b:6b:
9b:ea:ef:06:d1:d7:ff:4b:f9:30:92:b9:c1:36:bc:7e:03:77:
b3:ef:bc:97:82:21:db:f9:bd:4b:dd:2b:0b:00:55:c4:bf:5d:
35:c5:0b:d7:46:74:93:55:d9:38:08:c6:5a:dd:51:68:0d:54:
88:1d:4e:dc:1e:c6:d7:d2:e5:05:e2:6d:e9:11:84:c3:85:b2:
d6:42:7c:c1:ee:53:84:a7:dd:e1:44:77:e5:c3:a4:3c:d5:51:
7b:cd:c5:fe:bd:5e:00:10:ee:8d:df:5b:3d:f2:e2:be:80:1a:
8f:20:95:92:d6:69:74:8b:79:d4:82:70:7b:0e:83:70:c2:91:
f8:de:d5:7b:51:b4:35:e7:10:72:28:6a:5b:20:3d:55:dc:5e:
2d:3e:e0:66:3a:ab:31:c3:bc:e5:85:9c:2a:80:9e:c2:78:aa:
5c:64:4b:c1:e5:1a:5b:17:83:1b:7e:b8:8f:d9:d2:a6:d3:e3:
91:b8:31:93:9b:90:7f:d9:10:b7:78:f6:a3:10:5f:5d:8f:78:
06:6f:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:19 2025 by rpki-client