Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: 6wKC8+q9kGoZC5lmg/DxQmkHE/cRqZ65NQOa4m3lIsw=
Subject key identifier: 47:33:01:58:E8:5C:AC:C4:28:10:7C:0B:B8:4E:B9:64:A7:C1:DE:7C
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 0195127E4EC5F593BEBA74145BF774A0FBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 06:00:22 +0000
Manifest this update: Mon 17 Feb 2025 06:00:22 +0000
Manifest next update: Tue 18 Feb 2025 06:00:22 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: gtDG8DyZZ1styqWMqyvwQBZ+Er2lPu4bV6KW4ycxeBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4e:c5:f5:93:be:ba:74:14:5b:f7:74:a0:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Feb 17 06:00:22 2025 GMT
Not After : Feb 18 06:00:22 2025 GMT
Subject: CN=47330158e85cacc428107c0bb84eb964a7c1de7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:eb:b8:f7:c6:e5:09:ad:7a:2c:92:78:7b:
d5:35:75:4a:96:23:60:f1:10:4e:ae:56:15:43:97:
b1:1c:22:11:d1:da:6d:f1:b5:dc:e9:bd:5c:bb:2d:
73:0e:d3:38:b5:0e:37:f8:b5:8f:23:10:7c:43:b1:
c0:bc:cf:99:54:76:eb:97:2c:a6:b4:01:e0:e0:f2:
d1:57:a9:0b:f3:c6:a6:1f:32:86:78:14:41:9e:90:
f2:2c:53:d4:74:e1:83:13:f3:55:70:d3:77:3d:4d:
4f:81:02:9d:f7:13:ce:0e:b4:3c:65:db:d9:69:88:
44:11:fd:54:75:71:a6:2e:3b:55:28:8a:d3:e1:ba:
e9:ac:d1:02:4b:58:2a:e3:8d:05:d6:7d:cf:d8:d4:
5c:a1:b9:31:fd:39:d7:e6:13:2f:1b:19:dd:95:6b:
66:42:c8:27:21:34:a7:3e:1d:89:39:71:87:1b:ea:
72:7b:78:5e:22:ce:f8:bc:3f:88:dd:b3:95:01:7a:
c4:e6:28:54:6c:9e:e8:d7:d7:6b:d5:1b:b0:85:50:
49:cf:70:49:1c:32:d8:bf:b6:d5:e8:fd:61:6b:21:
3b:34:7e:bf:05:5e:44:58:4e:ff:27:62:87:15:6c:
3d:f9:81:c8:0f:9b:cd:e3:1d:bd:ba:cd:04:2c:35:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:01:58:E8:5C:AC:C4:28:10:7C:0B:B8:4E:B9:64:A7:C1:DE:7C
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:50:81:a9:46:11:01:24:2d:f9:2b:94:e9:52:8d:ea:78:b6:
1e:4f:41:9a:b6:59:aa:c0:0b:42:b1:1e:3d:f7:22:bf:cd:57:
50:db:0d:f1:7d:77:9f:1c:50:e0:0f:ad:2d:49:a7:8d:9f:d9:
62:9f:bf:63:51:0d:5f:fd:26:37:8d:75:df:39:d9:1e:b0:d0:
ae:2c:48:c5:2c:85:d4:a7:d9:1c:7e:55:8b:37:e9:ed:99:33:
31:40:f4:e6:2f:fc:85:3f:36:e7:db:6a:b7:98:d4:82:6c:90:
4e:44:16:4c:3c:7a:86:3b:54:14:83:4e:f1:5e:a5:a6:05:06:
16:49:a1:f9:68:14:06:94:f4:3e:c9:02:ee:91:33:dd:de:c4:
51:b5:df:71:bf:49:fc:56:48:2c:8d:1b:7e:81:a9:be:bb:3f:
22:5b:e0:b1:ba:32:ce:09:e8:9b:8e:99:b7:95:f3:01:a5:6a:
3b:b6:9a:9d:8b:49:34:c6:f0:bb:13:39:5e:4f:55:29:1b:ec:
a2:a7:b6:ef:cc:aa:a3:bd:c5:c8:88:27:c2:de:95:c4:1d:49:
97:24:99:6a:bb:0c:23:3a:0d:c2:eb:b4:e4:c9:f0:e8:0f:92:
5f:94:85:a2:e3:7e:37:9a:cd:a0:d9:d3:d9:68:5d:b7:0c:f8:
76:d2:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:17 2025 by rpki-client