Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: Sibr5PO+n5TRfIBtiaxKi0jY8ozZRQHxcJavECHMQ3k=
Subject key identifier: DF:DD:5C:28:42:5A:BE:9F:83:BC:B9:0E:28:48:D1:3F:37:A7:66:71
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019511347CE72D8B9ED32AA03DC048AC3F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0ABB
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: ZvaFOD7bQSwG3f0zAaO4O+bQmjWgA0GogrByf3LMvzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7c:e7:2d:8b:9e:d3:2a:a0:3d:c0:48:ac:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=dfdd5c28425abe9f83bcb90e2848d13f37a76671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:0a:92:9f:b7:c8:ca:00:8f:84:34:7b:da:
a1:4b:e1:07:aa:15:79:3e:b5:cf:d7:33:dc:04:63:
a0:35:29:60:b6:66:f4:06:2f:d0:4e:3c:be:75:92:
30:53:78:3c:76:06:53:d3:4c:64:6b:77:ba:3e:80:
e6:17:46:1b:f2:13:65:65:c0:3f:48:c2:b7:52:c4:
fe:5f:83:cc:ce:ee:c5:e3:9c:c2:73:6a:db:46:ea:
c6:19:de:37:20:de:93:6d:fb:1e:99:a0:6c:18:6d:
80:3e:98:29:36:7c:56:cc:ac:70:98:0b:a5:eb:54:
c9:25:34:32:8d:2c:d6:55:5d:e6:7b:0f:9f:aa:47:
6d:f9:91:4c:0b:d4:61:90:e1:7c:96:e5:ec:3d:6d:
e8:28:7d:09:c4:8a:3e:84:4f:3e:40:32:ba:12:d0:
3a:d7:85:d1:0a:ab:0f:55:7d:22:8c:1e:84:5b:2d:
da:45:95:f8:8c:a5:60:54:13:97:df:64:45:4d:38:
d4:4e:d2:52:45:77:3b:e1:0b:9a:16:2b:89:03:c5:
21:23:f2:72:61:ac:93:b3:0a:f5:2d:86:84:7d:2a:
18:64:2d:eb:f2:18:7b:8c:04:0b:9e:68:3b:9e:af:
1f:cf:df:87:29:76:9a:5b:1b:59:ce:b3:1d:dd:60:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:5C:28:42:5A:BE:9F:83:BC:B9:0E:28:48:D1:3F:37:A7:66:71
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e0:e1:90:f5:3e:c1:2e:4c:c6:35:23:c2:cf:ec:b6:cc:e2:
48:e0:14:a1:2d:30:6b:88:51:53:5a:8e:c0:73:ce:af:76:19:
e4:ed:37:2f:29:ba:76:cf:e9:92:b2:2a:93:9b:fc:ff:bf:32:
28:73:07:ce:81:a4:f4:b1:4b:ae:17:e3:86:89:1c:75:47:f5:
f3:0c:e2:a7:a8:7e:78:79:30:6c:da:2d:38:1a:18:e6:87:9b:
0c:82:df:8e:03:dd:47:a1:4c:a6:28:12:9e:19:ec:98:60:7a:
f0:b4:b3:4c:08:6f:cb:4d:a2:4d:02:41:a7:36:01:3a:65:ad:
e5:79:78:8a:ef:9d:df:3c:73:42:3f:79:50:fe:4c:a9:23:d8:
39:fb:ac:43:2a:e6:61:62:fe:c8:16:7e:20:96:16:70:9f:68:
fc:ff:20:cd:49:27:db:d6:0e:e4:06:bb:33:04:ce:d6:49:cc:
b0:6a:87:da:f3:8a:e9:19:d9:5b:b0:ff:4e:2e:69:d6:13:40:
9a:3b:61:5f:1e:39:6f:e4:28:fe:10:4a:d2:27:d8:b6:92:1a:
ea:92:cb:6d:af:8a:d3:9b:f3:31:3f:b7:8f:64:d0:05:29:52:
8b:e8:12:8a:c0:22:f5:6f:eb:30:6a:12:a1:85:8a:19:53:53:
dd:e1:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:59 2025 by rpki-client