Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: 3Ybsmv38N7OeCow3UPb4FE9HC070sWuycxZ9F7y7oqg=
Subject key identifier: AF:F7:9E:5B:44:6A:57:DA:E8:55:96:93:E1:BB:AE:6A:A9:B5:87:C6
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0194BB292029DF9F0AF8E1E5AF66F129A2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0C46
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: BSjO0JhLD74w0qzpl4KXyEwfyZKWTUyDTCfEoBD7lFE=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:20:29:df:9f:0a:f8:e1:e5:af:66:f1:29:a2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=aff79e5b446a57dae8559693e1bbae6aa9b587c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:a4:53:74:24:56:19:9d:f0:33:e1:e6:6e:
44:1a:b1:7b:9e:48:d2:8b:6a:32:d8:10:bf:23:89:
75:bd:68:80:0d:e0:12:d9:90:82:a1:1d:38:d1:f2:
f5:6c:13:70:99:e1:fa:96:86:1e:4a:77:84:0a:94:
cf:5d:e7:45:31:37:de:26:46:a8:f5:2a:7f:4d:05:
52:78:7b:d8:38:44:37:95:8d:07:91:50:d6:94:b8:
2a:e4:ad:71:f1:1f:ac:1a:58:f1:0f:0b:29:6d:d5:
95:f0:93:78:fd:8c:19:ec:9b:5b:3b:20:86:25:0c:
91:3e:fd:e0:55:6e:91:6f:58:53:8f:23:0c:ac:d7:
39:ce:de:ed:46:f1:ff:87:0a:8a:79:e8:c2:d2:d0:
64:6c:e6:03:42:f0:8b:50:81:09:73:fc:81:35:48:
d6:5b:94:01:92:db:47:ab:82:5a:e7:a1:6b:6b:97:
65:ac:f8:23:af:bc:65:d1:cf:79:59:8f:a0:41:ef:
ca:a0:2f:af:33:88:66:89:a1:e6:7c:9f:62:9b:e9:
50:ff:47:e8:78:ab:dd:f8:a9:39:d6:34:d7:66:e3:
58:79:5b:8a:bf:2e:92:8c:a7:c3:d3:40:69:73:f2:
ce:77:69:93:d3:55:90:e1:19:1a:5d:e5:4b:7e:b1:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:9E:5B:44:6A:57:DA:E8:55:96:93:E1:BB:AE:6A:A9:B5:87:C6
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:6d:8e:c0:0b:c2:02:32:a4:5d:02:c7:a4:0e:86:8b:2e:
79:5d:dc:d4:1d:fd:30:02:bb:a2:4c:34:0c:a7:74:58:86:a5:
28:bb:87:b0:bb:78:45:05:33:01:e8:3c:0a:d7:5c:20:83:90:
de:ad:0f:16:ae:c9:12:ee:a5:bf:67:28:5d:68:66:4d:af:ef:
de:fa:af:33:1c:b2:19:a2:2b:39:39:8e:62:20:e9:9a:31:36:
a0:67:bf:d2:2a:31:e8:e5:b2:0a:12:56:f2:c4:d7:15:24:8a:
62:a8:f5:c6:60:19:5a:f8:25:ad:16:12:96:f8:c8:56:ca:40:
50:f2:a8:64:a9:2b:57:96:2e:6e:34:e9:b9:e3:ad:9d:26:08:
e5:e4:a1:19:23:9b:d6:d8:44:98:ad:de:bb:3b:d9:47:f9:c3:
c0:3d:ef:1c:c1:32:52:28:c2:aa:e2:04:44:34:79:4d:ff:3f:
f0:ed:f5:7c:9b:c6:53:53:2b:0c:1e:44:4d:c5:9d:ab:f3:76:
fd:d8:26:b5:3b:62:02:39:99:15:ff:37:38:73:b3:9b:21:af:
60:ca:ac:e8:52:2d:a3:8f:1c:35:6e:03:c2:cf:28:fc:21:26:
e5:e5:4d:5b:42:c2:1f:bd:67:63:b2:75:76:15:ed:a7:12:c9:
43:29:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:52 2025 by rpki-client on console-fra.rpki-client.org