Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
File: z_XcdutvgU7WAVaP3SyBEO3vjBc.mft (raw, json)
Hash identifier: +Vd6R0dUTUJ+TyPG5kAbHIddA8I9eMc/CdNId/eWDos=
Subject key identifier: 6C:34:93:8B:47:33:5A:E4:1E:91:CA:2C:A1:F6:FE:F6:55:39:15:E5
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 0194BAF22494D18E2CBCB637BD32B52C5DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
Manifest number: 0651
Signing time: Fri 31 Jan 2025 06:00:18 +0000
Manifest this update: Fri 31 Jan 2025 06:00:18 +0000
Manifest next update: Sat 01 Feb 2025 06:00:18 +0000
Files and hashes: 1: fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa (hash: 93CR6TY7DEqZVxX2jIz+No9D+VOTLrGIoOBFxhhep+M=)
2: wey0C1mE-I7Q_DwhL1U5777Ego4.roa (hash: msSNP+OWSu/l7L1W+jddczo39swU6ms6DyPahC8MyPE=)
3: yTfvgCzBX5KpMte61Zg26iCGXLo.roa (hash: +V/hMZljZPtxUcKR56JEEYbLGPxCc6haoD/lYyBDsO8=)
4: z_XcdutvgU7WAVaP3SyBEO3vjBc.crl (hash: tV5AdDe3vj8AfgxnfD+eM5EQEhkiy8kCrc3z7/PmAls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:24:94:d1:8e:2c:bc:b6:37:bd:32:b5:2c:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 31 06:00:18 2025 GMT
Not After : Feb 1 06:00:18 2025 GMT
Subject: CN=6c34938b47335ae41e91ca2ca1f6fef6553915e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:84:6e:9a:31:36:e0:75:de:50:66:0d:79:
13:8d:08:05:f4:16:d2:12:94:15:ab:05:b1:38:31:
9a:a8:f2:c9:29:05:3d:38:79:9f:a5:8c:e7:b6:2d:
99:37:f4:b9:fe:5b:c5:55:26:2c:a4:c3:16:09:65:
d2:2c:ea:67:ca:01:23:2f:b9:e0:b4:db:38:ce:bf:
38:ba:f4:a0:d6:ee:86:51:c7:f1:da:2b:03:7e:44:
2b:f3:15:4c:55:d9:1c:9a:ed:96:30:13:15:af:6f:
51:dd:f3:04:52:0e:44:c1:1c:91:f0:07:19:41:88:
1d:f9:fa:f3:b6:0d:54:fc:6a:f0:ac:13:40:1b:46:
17:9a:3b:47:c3:8d:1f:64:ca:62:3a:fc:bf:03:d0:
83:22:ad:47:e8:7f:62:95:75:5c:04:02:c4:4c:cb:
b8:9e:24:eb:ea:7a:dc:00:02:ec:46:42:ff:14:7a:
97:13:59:cb:fc:1f:f3:d9:28:31:24:80:62:26:9b:
35:de:6a:7f:19:05:06:c6:dd:49:ae:b2:b0:92:35:
6d:0d:06:9c:01:29:7d:81:ee:22:65:1b:39:12:0d:
34:c6:20:20:df:84:4d:09:1d:a8:54:13:99:d5:e4:
ad:3e:55:45:f4:ef:cf:20:90:eb:ff:ea:d4:6a:56:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:93:8B:47:33:5A:E4:1E:91:CA:2C:A1:F6:FE:F6:55:39:15:E5
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:d4:fd:d1:6f:5d:6a:3f:0f:77:8b:9e:2b:a5:f9:cb:a6:
a4:cd:ce:ad:76:d2:c5:d9:3c:3c:ce:00:fd:4c:01:06:d4:3a:
de:7e:f6:65:88:6c:a4:a0:77:58:ee:0a:f0:a5:6d:a9:98:82:
ee:79:10:63:2e:5e:29:8a:f9:61:42:a6:2a:d9:ac:3a:8a:a1:
ab:ae:a3:f3:0c:2e:7e:bc:19:d2:41:6c:eb:a5:0d:62:e7:32:
c2:b7:13:e0:2b:a8:f5:67:04:4e:0d:87:7e:67:e8:9e:b7:b3:
25:2d:c3:ee:e6:be:2c:88:dc:66:ce:8a:fe:8c:01:35:90:51:
46:be:49:38:08:73:ab:d2:ab:e1:31:ef:ec:11:a4:d5:3f:a6:
bc:3c:de:db:d0:46:b4:d3:6b:96:08:23:08:1a:03:c0:97:81:
83:41:d8:d1:d2:9d:b3:c4:37:f5:b0:c8:ff:a8:12:5b:a2:f1:
20:b6:a2:0d:1c:bf:85:d4:91:e0:96:8f:ef:a9:ec:e6:52:48:
46:de:f7:79:e5:71:d5:9b:61:35:18:cd:8f:bc:65:bd:8d:d2:
cf:a6:60:95:d6:10:ac:c6:39:92:45:47:80:77:fc:dc:ff:a2:
b9:07:b0:5f:b4:53:7c:65:f3:f9:92:cc:48:32:84:06:e0:45:
34:fe:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:48 2025 by rpki-client on console-fra.rpki-client.org