Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: 5rCHkDJwllyr30C4G98H3lDI2zwXeikTM9L8YJwJhbA=
Subject key identifier: 44:93:76:64:B0:E1:F9:79:9D:C0:28:37:7B:E9:89:F4:CF:EC:CB:C7
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019510FE08C6993A704D6CE642F0C85080D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0A04
Signing time: Sun 16 Feb 2025 23:00:38 +0000
Manifest this update: Sun 16 Feb 2025 23:00:38 +0000
Manifest next update: Mon 17 Feb 2025 23:00:38 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: YG9VahSHgJg+3dkeua0bHn/ZI6DmN1O2BwG3IU8RZY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:08:c6:99:3a:70:4d:6c:e6:42:f0:c8:50:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Feb 16 23:00:38 2025 GMT
Not After : Feb 17 23:00:38 2025 GMT
Subject: CN=44937664b0e1f9799dc028377be989f4cfeccbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:5f:75:00:a1:7d:23:74:0f:08:cb:0d:00:
3f:eb:29:9a:4f:99:48:4c:7c:a5:63:30:15:07:e6:
bf:35:ce:ea:87:1e:62:6e:81:d3:1e:9f:67:56:ea:
ce:5e:8a:4f:f6:23:2b:7a:c9:22:59:d7:c4:d6:eb:
1d:6b:70:80:df:d3:f2:ad:85:46:e7:3a:f0:30:e6:
3b:5c:d6:ba:17:21:d4:e8:43:86:07:bf:6b:87:7e:
95:6d:9b:c8:07:7a:36:d9:4a:e1:c8:14:e1:00:bb:
11:15:c5:da:e4:95:79:b2:6b:55:a6:bb:a1:c9:43:
ef:28:f9:1d:1c:0d:64:6e:80:8a:f7:d9:3f:67:dd:
44:0d:7b:34:ab:4c:c5:87:5a:e5:e2:40:76:94:e3:
4e:09:2a:e5:33:2d:87:79:9f:bf:f4:b8:c8:90:22:
84:0a:24:38:f5:82:24:12:97:65:25:27:8a:91:a8:
5a:15:a6:42:e8:11:2b:53:89:6c:03:b5:56:21:6c:
d9:3e:92:24:82:a0:85:ba:72:5f:7b:fe:a0:f0:16:
02:4c:59:70:ff:92:fe:b9:22:83:92:9b:96:9a:ac:
e0:f3:c6:b9:7f:4b:60:a7:39:ca:ba:9f:8b:96:36:
a7:17:dd:e2:09:62:df:72:1c:a9:7a:c0:68:27:a1:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:76:64:B0:E1:F9:79:9D:C0:28:37:7B:E9:89:F4:CF:EC:CB:C7
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e4:b4:15:31:77:57:ad:40:ff:5e:40:22:76:59:3c:cb:ce:
03:63:fa:a8:0a:b9:cd:69:6c:1a:4e:46:c0:0b:69:c3:ca:37:
ad:c7:25:98:7f:33:ec:3e:75:89:c0:1b:02:b7:25:16:4c:66:
38:29:a5:da:1a:94:b5:50:5b:39:f8:6f:cd:66:34:69:9a:8e:
0d:9f:5f:e3:a2:77:40:5f:04:9d:94:df:b6:f5:90:77:fd:29:
1d:fb:cb:24:11:79:1c:07:a7:b8:f4:46:6f:96:6c:b0:39:d9:
92:1a:e5:2c:bb:52:d7:9e:3c:07:56:30:ae:25:83:4b:64:7d:
13:df:8a:26:3e:50:b4:95:b0:2e:30:97:26:19:a7:9d:20:0a:
ed:a2:70:3b:ff:fc:bf:a6:98:07:d5:c2:a8:58:60:88:3d:d1:
7c:90:2a:0b:85:24:11:5c:b6:a3:6c:52:c0:2d:72:cc:96:e9:
4b:e6:ae:24:2f:b9:2a:02:fa:67:e2:c5:54:e1:e3:b4:49:96:
70:85:5e:21:fb:ba:b1:96:7c:d7:a8:08:9a:bf:44:c2:4e:0c:
b0:4d:af:b9:6c:dc:c6:24:a5:76:99:cd:d0:39:59:2c:9a:c7:
48:65:27:22:c9:3d:4d:2b:21:59:ac:9a:67:19:60:e2:63:8d:
f0:24:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:48 2025 by rpki-client