Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: MlddbH51K1oL6CxXGIpZsW9g/uaRuXfYjRLlyApGHlg=
Subject key identifier: 2B:9E:83:E2:42:90:00:48:E7:98:15:A2:65:E6:EF:27:7E:62:13:2B
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0194BA84769D40F3148EE3AC84178D1D517A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: PBUzgBlZFW4/oVCoQ8Zd8xWGBwBpu2QHxFBJ4fAwm98=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:76:9d:40:f3:14:8e:e3:ac:84:17:8d:1d:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=2b9e83e242900048e79815a265e6ef277e62132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:df:48:46:03:2e:aa:09:64:21:28:ab:a4:
ab:ae:37:71:cf:21:d9:1a:f7:32:95:80:1a:36:b2:
ae:43:37:f4:43:b3:14:dd:78:04:0d:aa:f4:a3:29:
0c:50:12:a6:3f:10:d1:44:73:85:03:e2:12:2c:c2:
20:aa:05:17:77:1f:af:ec:fd:c7:2b:a4:31:eb:32:
2d:97:b9:ac:a6:a8:71:4d:19:e2:75:f6:fd:f4:10:
35:4b:63:51:98:39:8d:d7:eb:72:bd:17:b0:db:84:
e3:4c:f6:49:98:41:01:5d:87:ec:18:7c:70:6c:ef:
a4:4f:8a:9a:f6:95:8c:a2:98:79:a8:3d:34:d1:ab:
b9:b1:73:e7:c4:d9:e7:55:76:4b:71:9f:e5:88:14:
f1:d6:93:8c:8d:9a:22:1f:4b:fb:3c:49:ed:eb:0a:
ba:8b:97:74:c3:5e:87:30:e5:32:83:2d:74:dd:b8:
b4:33:7a:21:7a:e2:8a:c0:a9:38:65:05:94:43:24:
18:7f:3b:c6:cb:ef:cf:5b:54:1f:0c:89:c0:19:54:
91:83:4c:8a:19:3d:2f:20:12:f9:c7:fb:2c:91:9f:
54:c5:93:88:8f:5b:44:32:0d:19:9a:1d:dc:ac:4a:
d2:05:18:5a:45:2f:df:68:7f:b5:cc:f8:95:b6:7e:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:83:E2:42:90:00:48:E7:98:15:A2:65:E6:EF:27:7E:62:13:2B
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:8c:71:f7:e5:a0:89:f9:ea:63:89:12:fb:93:03:de:76:
a5:3f:4f:f7:33:5d:44:f0:a2:f6:f9:34:17:24:7c:af:71:76:
16:bb:56:26:34:d4:ba:dd:0d:bd:4b:83:e5:09:b5:5c:45:02:
32:86:43:a0:f0:c2:0d:9e:d5:8d:5c:00:08:1b:93:ec:a4:e5:
55:0a:56:89:a7:0a:60:3e:bd:2f:56:b4:55:11:b6:b2:40:81:
43:06:54:6b:47:62:9a:f7:c8:d6:29:ae:da:c3:68:cf:44:f5:
1c:66:62:b4:af:b0:a6:2f:88:09:11:9a:ff:85:2f:f7:a9:2a:
ef:f6:35:29:e0:23:14:8e:2a:fb:33:42:8f:fa:6b:a1:00:1c:
78:26:de:18:66:6b:48:54:ce:5b:1b:b2:ed:d9:b5:f7:a8:76:
15:57:d1:40:65:fc:1f:61:82:8b:de:93:aa:c4:70:6c:dc:a8:
bf:9b:56:a9:b6:18:3e:28:55:db:9f:46:03:e6:de:c5:8a:06:
31:5c:06:ff:a5:1a:38:d5:b6:77:8f:06:ab:8a:ac:40:ac:fd:
a1:15:30:20:19:51:6e:e6:ce:82:ef:a8:85:75:fb:0d:6f:91:
83:ef:cf:4b:b1:b4:bb:c3:68:87:df:5b:9e:a2:d8:8a:9c:59:
cd:87:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:18 2025 by rpki-client on console-fra.rpki-client.org