Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: yr7tFSxoUslRgHBhAVErRqK80j+DnjoVBVz7VNnW65w=
Subject key identifier: 7A:67:6F:BF:39:BF:4A:9A:2B:32:27:EE:5A:06:ED:C5:CE:CB:21:D6
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 0194C3882A26B6415C3A3E1F053D64E33FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 0D3F
Signing time: Sat 01 Feb 2025 22:01:08 +0000
Manifest this update: Sat 01 Feb 2025 22:01:08 +0000
Manifest next update: Sun 02 Feb 2025 22:01:08 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: HDbq7NHhYWuXnv0nNIOR3yPAAKgI+knaOncB401Wgt4=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:2a:26:b6:41:5c:3a:3e:1f:05:3d:64:e3:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Feb 1 22:01:08 2025 GMT
Not After : Feb 2 22:01:08 2025 GMT
Subject: CN=7a676fbf39bf4a9a2b3227ee5a06edc5cecb21d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:e5:89:24:29:f1:1e:bd:bc:91:56:20:d5:
54:31:a5:66:9a:8d:42:bb:09:ba:22:57:06:2d:1e:
f4:6c:a0:64:d4:2d:aa:70:b2:af:72:31:4a:4d:4c:
6d:4a:1e:a4:36:4b:ac:b6:bc:46:2c:08:df:cc:19:
0c:74:6f:43:ea:4d:ab:4b:88:c1:38:2b:c1:e6:e1:
ad:a0:1b:98:35:70:ff:af:35:ff:b4:29:19:72:5b:
b1:03:be:ec:96:ea:5a:37:28:ba:ce:3f:8a:32:6b:
af:34:32:f2:9b:0a:43:11:3e:93:56:c1:2d:6c:ea:
c1:3d:53:56:75:ab:53:66:14:f8:3d:00:4d:9e:df:
d7:75:e9:92:81:e2:4d:07:90:fd:d4:0e:8c:10:51:
f1:62:75:17:27:fd:92:7c:3b:2f:5d:7b:98:db:cd:
98:28:2d:94:96:54:d0:96:23:38:ce:60:39:4b:af:
e3:09:f8:e6:e5:e5:40:2d:0c:9a:cd:14:f0:df:29:
7e:2c:ce:32:a7:3a:5f:4f:d3:8f:f3:e6:44:a2:10:
b5:cc:a1:be:70:66:72:9f:34:eb:3d:52:20:d8:82:
f0:25:38:a1:e4:47:85:09:9e:40:93:b0:1d:b3:85:
d4:3b:24:ea:42:c4:cf:31:78:a2:b7:db:d4:0d:22:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:6F:BF:39:BF:4A:9A:2B:32:27:EE:5A:06:ED:C5:CE:CB:21:D6
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:c5:0c:4a:2e:1e:eb:61:fe:64:5c:f6:6d:c5:92:82:7e:
b8:79:17:87:b8:3e:c7:0b:a2:5e:8d:63:9b:53:37:43:3e:f0:
f4:24:51:db:39:14:6f:d4:0f:f2:80:26:e3:f3:fe:8a:db:2a:
45:17:bc:53:3f:33:91:7c:22:4c:f6:6c:c8:27:aa:34:87:9f:
40:22:8f:b5:5a:03:ce:20:c6:77:9f:f2:3f:dc:64:1e:ad:9e:
99:9b:c3:f0:86:2c:fe:79:72:5a:f0:23:4e:30:66:cd:61:7c:
6b:33:c6:0e:29:97:40:58:df:01:7d:84:a4:89:a8:85:9f:b3:
0a:de:b7:8f:8a:28:c1:39:43:db:e7:8a:c0:9c:1b:32:5a:d1:
84:16:f0:62:38:d9:05:53:95:60:41:f9:86:73:c7:25:27:25:
eb:4a:1f:1c:18:15:41:95:bc:9d:78:26:01:ac:f7:dd:3e:34:
d1:24:ff:19:c2:35:2a:25:66:b7:f2:7d:9b:ad:be:d4:8d:d4:
5c:4c:a8:03:2a:22:48:9d:ff:45:24:ad:ce:a3:88:36:37:8f:
d6:98:3b:c5:a5:52:8f:5f:a0:cb:67:26:bf:b0:cb:bb:d2:a5:
72:55:d1:16:fa:58:76:84:ec:69:e8:3f:5b:f9:01:45:b6:d7:
e4:5e:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:38 2025 by rpki-client