Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: SFFg0caNLzJRsVj0x3+PnQOBo+iVjtEIWxxBtjGipwI=
Subject key identifier: 03:17:74:D8:EB:3A:6F:E4:42:4E:8A:5D:4A:96:9C:64:97:AC:C6:49
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 0194BC04DA9A1F7FCFF07474561333CBFC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 139E
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: Oy+dWOxMDvA4KRTZpHbVwzXp6EmD4qzA7WEaF5SY9VI=)
2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:9a:1f:7f:cf:f0:74:74:56:13:33:cb:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=031774d8eb3a6fe4424e8a5d4a969c6497acc649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:36:de:4e:8d:fe:5b:97:d1:cc:2c:10:31:
21:95:63:17:ec:51:9a:da:67:ee:45:58:5e:44:60:
ea:5f:86:2f:30:5d:3e:b4:0f:5f:97:28:db:d5:8d:
f1:18:51:b5:ff:98:1d:27:fc:8e:5e:8d:ef:16:ac:
65:1d:ed:03:11:99:31:9b:53:bd:08:b2:96:fc:a4:
37:25:3d:a1:c6:cc:27:ed:05:b2:b2:cc:31:ec:c3:
f5:10:8c:5d:e4:da:3f:3d:50:5d:3b:18:e4:cd:43:
13:18:1c:04:b5:e7:35:0f:5a:df:5c:bc:2d:40:39:
66:ac:8f:3c:6d:cf:b8:0f:ab:2c:9c:07:f1:c7:f9:
7e:09:ac:c7:ec:cb:e0:2b:d4:10:7c:59:66:64:32:
ff:e0:aa:b3:a6:eb:43:7c:4b:a3:09:57:07:4a:61:
4f:88:c2:54:53:21:a7:44:bb:02:d9:43:22:8b:ea:
95:e9:62:89:05:a2:1e:24:4c:37:40:f0:d1:87:e0:
46:bf:6b:b4:03:3d:4f:84:a4:cc:8d:41:d0:61:95:
c0:70:6c:dd:65:66:18:ef:ce:e7:b7:9b:13:af:f9:
ca:e2:4b:aa:03:0f:1d:a0:bb:e3:92:67:30:9c:a5:
91:dd:45:bd:72:c7:23:d2:be:3f:ad:04:ff:12:78:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:74:D8:EB:3A:6F:E4:42:4E:8A:5D:4A:96:9C:64:97:AC:C6:49
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cd:2e:2b:95:69:ea:c8:8d:c5:64:65:36:31:00:f0:d6:cd:
11:4e:f6:c0:cc:02:8e:0a:bb:c9:fb:33:de:1b:cf:37:46:c8:
fd:ea:cd:14:80:33:9f:79:75:8f:2b:c4:35:a0:30:4a:c1:ca:
a2:69:b0:f5:b2:59:bc:c7:78:2a:1c:3c:02:b3:be:5e:dd:f3:
16:51:84:49:53:32:05:c9:90:ee:7e:cc:23:58:5c:07:6b:95:
46:13:ac:9c:73:84:e5:49:23:e8:85:22:58:f6:45:ab:fe:26:
3a:a2:c8:fd:e6:8b:b6:6a:29:44:21:8a:a3:02:18:6c:f8:d8:
be:14:1d:5f:99:57:54:f1:fc:44:08:b3:b1:71:2b:8e:ee:db:
fe:8c:5c:b3:75:eb:f1:8d:e2:ac:1c:08:d4:06:e0:cd:6d:d2:
de:32:83:0e:28:7b:b7:22:8e:54:6b:00:33:df:1d:41:29:7a:
1d:87:28:6f:46:06:c6:e4:d6:18:63:2a:ec:ee:7c:de:d3:e6:
ef:9f:b9:8a:8f:ae:78:b5:7b:7e:cd:b7:be:fe:d6:d3:33:d2:
02:33:42:35:f6:a2:f0:a4:47:fa:da:ba:df:72:0f:a5:6d:b4:
56:b3:68:28:7d:b7:d0:d8:a6:fb:27:02:84:3f:b3:61:ac:40:
48:48:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:03 2025 by rpki-client on console-fra.rpki-client.org