Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: dMn6Mq36EgwoUJ0BTFqTHcDXeKAXWaV0ccHplR7zzBA=
Subject key identifier: CA:9B:DA:1E:38:7E:F3:9F:65:90:68:A1:EA:FD:EC:DA:72:1A:63:66
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 0194BB292A5E541219FB83336326F5022E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 07:00:24 +0000
Manifest this update: Fri 31 Jan 2025 07:00:24 +0000
Manifest next update: Sat 01 Feb 2025 07:00:24 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: KaaK53eXNkQBTH9G+F0w4o1VvZ0yRWrwFkxCM4fT3/s=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2a:5e:54:12:19:fb:83:33:63:26:f5:02:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jan 31 07:00:24 2025 GMT
Not After : Feb 1 07:00:24 2025 GMT
Subject: CN=ca9bda1e387ef39f659068a1eafdecda721a6366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:c2:3a:a9:3d:56:f2:20:15:68:bd:56:4e:
00:a2:82:56:e5:eb:38:11:9d:85:6f:70:ce:9d:4c:
74:d0:62:3e:b4:c3:d9:1f:f6:00:99:a9:45:b9:93:
0e:c0:0f:9d:5d:5b:c6:cf:fd:f3:25:ef:d5:c3:6f:
0e:88:05:d6:d8:08:e7:ef:5d:03:97:00:61:06:4a:
ff:28:b3:13:28:02:55:d3:04:57:f3:a0:9b:3e:26:
26:3e:89:9d:da:5f:a7:76:1c:3f:f5:4b:c8:b4:c9:
da:9c:3a:b9:21:9e:dc:41:bb:9c:0e:c8:1e:44:ff:
ec:09:c6:8f:54:69:6e:d8:07:b6:b2:9c:37:00:18:
aa:67:60:72:83:ce:fb:47:d8:35:59:c1:fb:6f:80:
99:7a:ed:7f:4b:1f:0a:12:a5:d0:07:ab:a5:6f:b3:
94:c9:51:20:f6:44:2e:71:1a:94:c6:4d:7b:16:10:
ab:12:7a:82:13:ba:81:18:25:b1:7a:62:7b:34:15:
b3:36:9d:2e:17:be:fe:87:c8:cb:5e:d2:9c:94:89:
f0:7c:aa:d7:de:c4:1f:cc:15:66:61:ff:9e:25:16:
7a:af:e7:4c:5b:6d:3c:f8:40:04:74:b7:50:e6:a1:
73:4b:cf:91:0a:67:2c:f1:cb:30:65:b7:79:bf:da:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:DA:1E:38:7E:F3:9F:65:90:68:A1:EA:FD:EC:DA:72:1A:63:66
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:55:94:b5:14:78:54:eb:cf:62:00:30:f3:59:21:9f:d5:76:
0b:64:6c:80:85:ce:2e:c3:2b:da:89:52:8f:5f:94:b0:6a:63:
d2:1c:7b:a3:92:a4:38:8e:cb:f3:26:84:82:3a:0b:61:56:2a:
b5:2b:54:8a:6a:38:fc:9a:00:72:59:86:c0:19:2f:6c:80:98:
97:68:a4:d0:3b:01:98:cd:d7:1f:5e:72:7d:7a:f5:2c:a1:22:
7a:af:d0:47:c7:22:3e:86:21:96:1b:1e:7b:c7:e5:e1:a7:0c:
2f:61:de:8b:65:c2:83:9e:9b:95:b0:ae:2a:70:79:aa:8f:fd:
40:45:ab:26:68:ac:86:30:3b:e5:8a:a2:e8:90:5c:e3:03:60:
91:d4:93:b3:e9:dc:c9:97:44:40:f8:ba:fb:c1:9e:d3:2e:1c:
9a:01:40:dd:51:02:60:3d:ea:a8:72:c2:e2:8e:9e:17:0a:74:
44:f2:e8:b4:e7:0d:67:10:33:4d:93:0b:5c:29:b3:c6:f6:be:
1d:02:ad:b7:b5:6d:02:7a:ab:84:6a:f6:2e:d5:71:30:e4:dc:
b4:70:58:db:c6:28:e1:32:65:4a:f0:0f:33:ce:c6:16:a5:dd:
4b:88:7a:02:5d:e7:b6:ea:bb:ab:83:53:29:e2:cc:92:53:f8:
be:74:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:54 2025 by rpki-client on console-fra.rpki-client.org