Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: jvIk/TEs414IKftOx8Vo3LBSQGlK83ezq7Ivj6dRviY=
Subject key identifier: B8:42:B9:23:F8:63:6C:0C:BB:FD:AB:37:1B:AD:53:D4:77:15:8C:CF
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0194BB975A0E9CC63F7BF0E2747AAA6DB91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1197
Signing time: Fri 31 Jan 2025 09:00:45 +0000
Manifest this update: Fri 31 Jan 2025 09:00:45 +0000
Manifest next update: Sat 01 Feb 2025 09:00:45 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: IlYYDCeitjE6WFdWrSMN+KgoNSSO3LGsr65XpFh3qgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:5a:0e:9c:c6:3f:7b:f0:e2:74:7a:aa:6d:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jan 31 09:00:45 2025 GMT
Not After : Feb 1 09:00:45 2025 GMT
Subject: CN=b842b923f8636c0cbbfdab371bad53d477158ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0c:ee:38:98:7e:de:64:c8:df:18:d1:19:96:
64:55:40:39:77:1e:6d:67:d8:f1:51:02:a9:fb:15:
81:62:c1:fd:7f:14:49:a8:8a:ec:0e:24:3e:22:64:
00:6a:1e:2b:76:d2:e9:fb:0b:c9:b2:13:dc:66:4e:
a6:65:d9:89:50:95:17:ae:fc:ed:89:93:4a:ac:d1:
fc:fb:a7:fe:ad:2f:f6:18:c6:44:44:0f:18:e0:80:
85:0b:2b:78:2e:02:f1:87:b1:77:fc:58:2b:89:5f:
83:39:21:f1:73:77:78:19:b3:d7:fa:45:09:40:82:
48:ac:2a:49:aa:71:f3:04:d5:3d:f1:c5:73:06:90:
61:0c:18:83:db:45:12:fe:37:ca:9c:fc:b6:48:39:
b6:21:18:9f:f5:5d:07:cd:04:1b:e3:32:ff:1e:ba:
f5:dd:4a:8e:da:8d:b5:41:2a:65:19:ce:b2:28:d2:
b0:25:46:ff:c2:d3:92:05:66:40:79:9b:48:83:5e:
01:3f:1e:8c:82:02:88:88:66:bc:25:61:bf:37:96:
79:93:6f:c9:7a:71:4a:28:1c:67:eb:d6:3f:96:c3:
c5:cd:c1:59:64:e1:c6:f2:b8:f5:a0:21:1c:b8:c2:
33:48:55:bc:31:9c:f2:61:ee:cc:2f:05:07:55:cf:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:B9:23:F8:63:6C:0C:BB:FD:AB:37:1B:AD:53:D4:77:15:8C:CF
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:47:b8:d3:94:e8:95:ad:1c:99:ba:72:3d:38:c5:01:10:f5:
63:b8:75:47:d6:9f:df:40:01:3d:99:f0:cf:55:b6:d4:5e:ab:
f7:64:8c:b5:90:36:44:cc:74:de:75:e9:63:50:85:9a:10:85:
c0:13:a6:87:31:dd:e8:47:0c:26:3a:d6:cc:ad:a1:1c:64:f7:
51:67:c6:78:60:f1:94:2a:d2:fd:8c:5e:27:3a:c3:67:20:8c:
35:cb:b4:88:ff:cf:ab:f2:67:31:0a:6b:6c:86:75:03:2e:62:
48:6c:b7:d7:9a:a7:43:65:49:fe:4d:cd:c0:7e:d3:b7:05:45:
27:8f:d8:ce:4b:59:ff:90:ec:76:04:89:0b:5e:1c:a2:96:dc:
19:e8:da:69:52:83:46:9b:40:a7:62:dc:32:ce:90:67:22:54:
9b:30:d3:c2:ed:40:38:c4:0c:2c:0b:63:8b:11:a2:fa:fa:9a:
07:a6:cd:ad:db:2c:93:d6:42:c5:08:c1:be:8a:f4:b1:7b:24:
4f:7a:b2:c7:e5:61:a1:55:34:52:39:aa:21:ee:1f:27:1c:1b:
4d:33:0f:ed:a9:10:36:cc:03:b7:86:a6:b1:0e:8b:a4:3c:f6:
9d:6a:a6:84:7f:f8:17:d8:1a:66:2b:27:b4:9a:f6:a8:7a:73:
a7:15:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:08 2025 by rpki-client on console-fra.rpki-client.org