Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: 4e/dkoWSzyRk+QzzaOwivUn8uc8uGVD21LvM1WYzCXQ=
Subject key identifier: CA:5B:AE:75:F1:D9:A7:B4:1D:B5:39:12:8B:65:E1:2C:83:EA:9C:9D
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 0194BAF2589A0A079131FCB01FE75794675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:31 +0000
Manifest this update: Fri 31 Jan 2025 06:00:31 +0000
Manifest next update: Sat 01 Feb 2025 06:00:31 +0000
Files and hashes: 1: PXbhZwxgnHhuLjwlWCx5dOlGReg.roa (hash: j01BLIn3vk3ptsAnq3fQBlO6Lv4NALx1Y8dTw8r7J30=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: vc2SgmUDUd9hzNwAxin4xd4bLYJkgSQCdxCi137qJmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:58:9a:0a:07:91:31:fc:b0:1f:e7:57:94:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Jan 31 06:00:31 2025 GMT
Not After : Feb 1 06:00:31 2025 GMT
Subject: CN=ca5bae75f1d9a7b41db539128b65e12c83ea9c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:7c:68:0c:14:a8:e5:b2:b3:5e:02:38:94:
47:84:11:c0:17:a4:c1:61:16:9c:91:df:1f:7a:e5:
ce:c5:c0:dd:46:54:9b:49:11:1b:34:88:35:e2:f2:
b9:70:dd:9c:a0:6b:a8:8a:fb:46:ac:fd:93:ed:c8:
72:d2:18:7d:d1:bc:ff:b8:e1:fb:e4:b1:37:b4:95:
84:7e:d9:ab:01:93:25:31:a7:22:df:ff:56:2f:08:
e9:4c:4c:91:d7:3d:27:2a:55:e3:07:3f:56:5d:5f:
d5:1e:89:7c:87:d4:c8:d0:c9:8c:ad:fc:07:e9:02:
95:3f:4b:38:8a:eb:4f:ac:74:33:5c:26:87:44:6e:
b1:14:4d:03:70:a2:89:76:eb:99:26:ac:88:15:96:
30:64:3f:49:86:28:8c:f7:5f:53:36:14:8d:79:a1:
fb:b2:01:37:da:68:14:99:dd:eb:60:e6:f8:1d:3d:
b8:29:47:59:81:66:5f:7d:66:8b:86:06:f5:ce:58:
aa:99:2d:89:6b:7c:cd:bb:36:7f:51:4b:fa:92:8e:
69:78:3e:5a:95:25:81:ef:31:fd:b4:65:cc:7b:a3:
e3:92:f5:e2:00:4e:38:40:3c:ff:80:30:a2:a4:71:
73:e8:a3:3d:11:1c:99:c1:f1:93:53:84:1b:9e:24:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:AE:75:F1:D9:A7:B4:1D:B5:39:12:8B:65:E1:2C:83:EA:9C:9D
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:a2:0f:ce:bd:1b:ca:a6:44:a5:b6:cc:04:dc:50:d4:e0:
38:98:da:54:a6:2c:3d:49:ba:84:e4:04:54:c8:e5:5b:49:84:
35:cd:85:04:bf:f5:b6:fe:24:d1:b8:97:6b:0d:31:db:36:c6:
59:b2:ea:98:cf:2c:04:a0:b9:37:36:6d:48:e7:b8:82:e6:90:
45:70:58:46:d7:32:50:92:db:4e:18:79:09:88:f5:f9:53:93:
68:e2:ef:df:8d:38:bb:1a:42:d8:12:78:1f:7d:fd:22:1c:90:
a2:e1:bf:18:26:bf:cb:09:4f:9e:5f:a3:fb:aa:a9:20:49:f4:
84:d6:ab:e4:55:45:fb:a0:39:0f:b8:ea:df:75:88:c1:dc:cc:
03:93:bb:71:e4:00:90:3b:03:2d:85:9e:1d:87:f8:d5:4b:0c:
8e:fc:19:7f:b6:f3:5f:ea:ab:b3:ef:ba:1e:84:c2:12:e5:0b:
21:f4:29:6e:4f:6e:70:4c:0c:2c:ee:6b:8a:c5:2f:33:91:bc:
6b:2b:61:43:93:2e:c6:00:06:c3:02:eb:c4:93:5b:c2:2c:a0:
1c:b0:66:bc:c6:d8:1d:15:ee:8e:a6:1a:c3:a4:8f:88:fb:7e:
b4:36:db:c2:bf:2a:4e:83:bb:38:1e:3f:db:c7:5d:eb:94:a7:
cb:14:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:00 2025 by rpki-client on console-fra.rpki-client.org