Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: PqRfaJp+wzBrTF+3TRUNRYgC43waAfJXptCNt17/2+k=
Subject key identifier: 51:2C:C4:94:A8:12:9F:DD:42:BB:A3:E4:2B:37:EC:40:5C:E8:FF:D8
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0194C49A0AE8E08A2EDC095EA75BF299DA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 1083
Signing time: Sun 02 Feb 2025 03:00:17 +0000
Manifest this update: Sun 02 Feb 2025 03:00:17 +0000
Manifest next update: Mon 03 Feb 2025 03:00:17 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: 77YQrtegXnr2/XgC2gprtUd5r1jXkYDNyE+uihdMWoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:0a:e8:e0:8a:2e:dc:09:5e:a7:5b:f2:99:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Feb 2 03:00:17 2025 GMT
Not After : Feb 3 03:00:17 2025 GMT
Subject: CN=512cc494a8129fdd42bba3e42b37ec405ce8ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:94:7e:5a:52:9f:5e:14:47:5b:85:db:95:
5a:1c:bf:5d:fb:cd:a8:a1:10:98:d4:66:80:ad:5e:
ab:c5:93:72:50:bd:a7:ec:db:b1:67:dd:93:44:d8:
1a:09:fd:8a:3a:19:0a:7c:0f:ae:f6:a1:29:08:89:
0e:69:f8:c2:3e:f5:6b:d6:ea:03:07:89:3a:74:6f:
28:c3:88:0a:bc:78:82:33:a2:1e:8c:3a:8b:df:49:
3e:11:8d:d4:e4:5e:e8:68:13:d1:5e:8c:7e:c8:8b:
d5:c4:da:de:0b:af:a2:6a:56:b4:af:6b:00:a9:e3:
40:83:8f:9c:7b:c1:a4:3e:8c:e5:8e:01:73:a2:5f:
3b:98:2a:65:a8:71:0a:fd:64:b7:54:90:ef:6c:da:
42:c7:0c:b0:b7:36:b0:1a:5a:96:7c:0b:f5:79:5d:
3e:12:54:e3:39:dc:a3:53:e2:8d:77:ab:47:4c:b5:
c2:bb:9c:86:e0:26:49:62:51:54:cb:66:83:60:9a:
94:98:49:11:4a:9b:d6:38:6d:d6:b4:51:16:d8:de:
62:83:e5:d7:67:a1:86:b7:ca:82:09:3f:a6:6a:ef:
fd:d6:5e:81:9a:04:64:d7:cc:e5:d5:6d:55:e5:17:
7f:05:df:69:6b:8b:f0:cf:9f:38:21:16:d0:52:ea:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:C4:94:A8:12:9F:DD:42:BB:A3:E4:2B:37:EC:40:5C:E8:FF:D8
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:12:d4:e3:8b:6d:3f:1e:85:14:bb:06:25:ae:b5:05:1a:
48:9a:e8:5f:cd:d9:f0:12:9a:74:79:b4:c0:5e:fa:e2:a5:bc:
97:ba:81:ff:b9:ec:3e:35:09:19:de:02:13:2e:22:a5:4f:0f:
2f:9b:1b:c0:27:10:41:e3:c4:48:2f:50:de:99:91:0d:86:8d:
95:2c:a3:27:2c:5e:5b:d4:14:af:7d:04:7e:09:da:e6:08:0e:
8a:fe:6b:b3:ac:c8:26:a4:8b:9a:6a:2a:f3:a5:95:71:81:fa:
72:d1:bd:0e:92:dd:40:fd:80:2d:a6:ac:1e:2b:31:d9:a1:b6:
27:40:b6:33:95:9e:0b:6a:64:e2:95:cd:7b:df:53:12:20:de:
df:58:07:bd:e6:0a:24:0d:be:21:f6:9a:64:60:7a:34:df:39:
c4:f9:04:6a:21:02:90:64:7c:27:d7:0d:96:58:4f:9a:30:4c:
43:29:1b:a8:18:b0:09:1e:fe:33:86:7b:52:14:ec:15:a0:32:
77:2c:34:af:11:e4:01:7b:88:3d:43:20:c8:6c:9e:c9:ca:e4:
10:87:de:e3:b1:f5:62:ee:59:25:a7:98:2a:40:45:63:a1:fc:
2f:33:d3:b2:4e:58:46:73:16:ac:60:a9:f4:de:5f:c6:4f:83:
42:d2:6f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmgro4Iou3Alep1vymdpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTI1OTM3MzJkZmZlMzg1ZTY3NmU5MDU2ODc3MjMwNmNk
YWViNzIwHhcNMjUwMjAyMDMwMDE3WhcNMjUwMjAzMDMwMDE3WjAzMTEwLwYDVQQD
Eyg1MTJjYzQ5NGE4MTI5ZmRkNDJiYmEzZTQyYjM3ZWM0MDVjZThmZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IqUflpSn14UR1uF25VaHL9d+82o
oRCY1GaArV6rxZNyUL2n7NuxZ92TRNgaCf2KOhkKfA+u9qEpCIkOafjCPvVr1uoD
B4k6dG8ow4gKvHiCM6IejDqL30k+EY3U5F7oaBPRXox+yIvVxNreC6+iala0r2sA
qeNAg4+ce8GkPozljgFzol87mCplqHEK/WS3VJDvbNpCxwywtzawGlqWfAv1eV0+
ElTjOdyjU+KNd6tHTLXCu5yG4CZJYlFUy2aDYJqUmEkRSpvWOG3WtFEW2N5ig+XX
Z6GGt8qCCT+mau/91l6BmgRk18zl1W1V5Rd/Bd9pa4vwz584IRbQUuo+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEsxJSoEp/dQruj5Cs37EBc6P/YMB8GA1UdIwQY
MBaAFKcSWTcy3/44XmdukFaHcjBs2utyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEt
OThkYjRkNWNkYjMzLzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEtOThkYjRkNWNkYjMz
LzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesgS1OOL
bT8ehRS7BiWutQUaSJroX83Z8BKadHm0wF764qW8l7qB/7nsPjUJGd4CEy4ipU8P
L5sbwCcQQePESC9Q3pmRDYaNlSyjJyxeW9QUr30Efgna5ggOiv5rs6zIJqSLmmoq
86WVcYH6ctG9DpLdQP2ALaasHisx2aG2J0C2M5WeC2pk4pXNe99TEiDe31gHveYK
JA2+IfaaZGB6NN85xPkEaiECkGR8J9cNllhPmjBMQykbqBiwCR7+M4Z7UhTsFaAy
dyw0rxHkAXuIPUMgyGyeycrkEIfe47H1Yu5ZJaeYKkBFY6H8LzPTsk5YRnMWrGCp
9N5fxk+DQtJvQA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:18 2025 by rpki-client