Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
File: Rzmd24xw_jNP6cKHtpJpRihRjGk.mft (raw, json)
Hash identifier: 1u+bjrtZIMmOhSSq8ylyq7Tw3xQjZI47getAiouPBeQ=
Subject key identifier: 29:9C:4A:5C:69:A1:2B:6E:4E:6F:5C:5B:6E:A3:C8:4B:1F:68:00:37
Authority key identifier: 47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
Certificate issuer: /CN=47399ddb8c70fe334fe9c287b692694628518c69
Certificate serial: 019510FDF587A220F287BBCFDCFD5B9BD131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
Manifest number: 0763
Signing time: Sun 16 Feb 2025 23:00:33 +0000
Manifest this update: Sun 16 Feb 2025 23:00:33 +0000
Manifest next update: Mon 17 Feb 2025 23:00:33 +0000
Files and hashes: 1: QtxEQGYqA7zt6kbo76L4Elg-1BE.roa (hash: BDm7256ve39MMR4Mv9LtNp15OMRgK9Ec6rAqIR1Wgck=)
2: Rzmd24xw_jNP6cKHtpJpRihRjGk.crl (hash: 1xqNSHNM+xykjChXe4D4UYyE8pAkztEC7q3Im71uPIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f5:87:a2:20:f2:87:bb:cf:dc:fd:5b:9b:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47399ddb8c70fe334fe9c287b692694628518c69
Validity
Not Before: Feb 16 23:00:33 2025 GMT
Not After : Feb 17 23:00:33 2025 GMT
Subject: CN=299c4a5c69a12b6e4e6f5c5b6ea3c84b1f680037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:cb:d2:a8:4d:9d:9b:24:c4:ca:68:39:99:
5f:5a:b9:a9:0c:bd:91:39:3b:cd:9e:eb:4d:87:44:
67:43:5e:e4:f7:1b:17:74:38:cd:8a:cb:9f:ff:03:
d7:e4:ac:78:78:4b:2d:be:08:3f:4e:ac:60:f2:02:
0e:8c:dc:65:76:83:76:22:52:d4:23:ff:7c:42:b1:
c6:6f:6c:00:60:ff:da:43:1e:d6:4d:ec:26:50:55:
65:d5:48:f7:c5:f6:da:f3:63:4f:40:ef:f7:1b:d1:
93:a1:6b:e4:31:ab:1d:82:e8:19:fc:e1:30:1f:97:
6b:d2:cf:8f:15:75:bd:28:7c:e0:68:6f:8b:06:57:
c3:57:e2:0d:af:4d:e6:40:c9:c0:96:db:c6:de:83:
be:78:07:ae:39:6c:ef:2c:b0:d2:81:fa:ec:88:b5:
5c:f3:cf:0c:d6:51:21:61:b5:26:80:40:03:35:5d:
a2:24:76:bf:c9:43:61:bb:8e:7e:93:06:dc:6f:83:
04:dd:6e:36:0d:b6:3b:3f:ad:c6:17:e7:23:eb:d1:
3b:ed:e9:a3:43:29:66:a8:9c:f3:b3:66:af:6c:f5:
80:33:27:6a:4a:93:33:7a:c3:eb:55:c6:ed:14:38:
66:62:73:7a:82:4d:61:23:e3:62:e6:c9:b8:af:20:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:4A:5C:69:A1:2B:6E:4E:6F:5C:5B:6E:A3:C8:4B:1F:68:00:37
X509v3 Authority Key Identifier:
keyid:47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:be:a3:52:1e:bc:6e:5a:cd:31:13:d1:91:44:e4:5c:51:52:
6b:d6:c2:46:da:91:62:f8:fa:d8:28:d9:6a:9d:88:ee:57:dd:
48:05:37:73:0a:8d:86:9c:d2:5f:a8:ee:5e:cd:5b:7b:fa:c9:
02:c6:2d:86:42:cb:2e:8b:5c:3a:41:3c:b4:78:78:55:e5:bb:
51:bc:e2:37:49:75:ba:e5:fa:98:94:a2:f5:e3:76:a8:b3:ed:
c3:68:b3:08:01:81:90:33:62:4a:93:98:58:2f:b8:79:4e:ae:
b4:ca:6d:25:4a:69:10:0a:c1:3d:da:de:b1:cf:60:bd:22:2b:
50:bc:9d:20:ea:b4:ff:45:b8:93:0d:d2:42:ee:25:0f:67:e1:
ef:fb:2d:aa:2c:11:7f:01:27:9c:52:12:ce:cd:60:04:30:35:
b9:32:88:f5:6c:06:01:9a:0a:7c:43:06:d1:e6:4f:5b:92:b6:
5f:af:01:d8:2e:e9:97:b6:98:3a:51:f6:29:66:7c:72:55:12:
d9:53:b0:c1:f7:45:3e:64:8e:c0:94:a5:9e:20:95:2f:cc:69:
3b:ae:39:38:2a:c8:39:1b:8f:49:30:1e:d1:c5:07:c4:6f:67:
a9:7a:2c:de:c2:35:a1:26:57:7b:07:a8:a5:3f:5d:ea:f4:c6:
8b:da:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:56 2025 by rpki-client