Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: Aw4T6F7DSO7G9iAhDqm0wROpAxtBZ8NWsWiW6O6cI94=
Subject key identifier: 49:DB:85:6D:A2:18:98:FE:69:E8:69:CC:47:2E:BE:FC:67:20:91:01
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 0194BB96EE584BC3913706069287E5C76A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: vDM8TKmbfzlwiEX/Rd26UW5kC2G9nmo5J/HjqvFyGiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ee:58:4b:c3:91:37:06:06:92:87:e5:c7:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=49db856da21898fe69e869cc472ebefc67209101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:37:21:3d:78:a8:f8:1a:88:38:55:3c:99:
b8:91:de:7f:ff:3d:e4:79:d7:ef:f0:a1:68:3a:9a:
83:94:b7:ec:7c:a5:dd:c8:c5:96:95:13:75:a7:76:
1e:87:c5:5f:fc:2c:85:42:c6:39:37:0c:e2:9e:b1:
a2:69:3a:ed:fa:0b:3d:47:e2:dd:47:3f:0a:1c:70:
d8:08:c5:d8:ad:e0:60:3c:f6:68:3d:18:f4:d4:83:
c2:0a:a0:91:de:91:30:00:91:ae:de:72:4f:cb:fc:
4d:dd:a9:59:7e:0d:1e:1b:60:8e:07:6c:d1:ac:9f:
60:47:27:f6:f5:4d:46:6f:a9:ea:b8:f4:75:76:ad:
b3:61:f4:f8:a8:e3:e0:69:d8:e6:5e:ba:ad:75:63:
3b:8f:74:de:5e:2f:95:e1:6f:2a:bf:95:51:6e:ea:
29:59:aa:aa:3b:8c:f3:08:22:65:6a:29:06:ad:6b:
1d:64:c7:5f:51:3c:90:69:3b:84:b7:a7:2c:a8:5c:
54:23:8f:fe:bf:c5:1b:e9:48:0b:d5:13:a9:21:e9:
8c:0b:a5:67:eb:22:45:bb:a1:15:d2:b4:7b:d6:61:
9f:c1:a1:cc:0d:89:50:1c:68:75:76:ba:10:8d:11:
a6:50:d3:5a:52:e7:99:c8:5c:e6:73:ae:62:85:a5:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:85:6D:A2:18:98:FE:69:E8:69:CC:47:2E:BE:FC:67:20:91:01
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:ab:2c:20:34:e7:9a:95:0f:9a:fe:e1:bc:e9:0d:3f:1d:
bd:d3:4b:8b:30:0b:21:d3:85:eb:ff:5a:06:45:3a:fb:2b:85:
2b:6d:c7:08:7d:fc:4c:b3:8f:fa:0d:77:55:7b:87:7c:77:08:
c6:58:55:13:bd:a3:34:2e:59:68:31:56:f6:39:61:8b:7d:16:
ea:bc:28:7b:dd:86:ab:90:1c:97:16:4f:80:f8:af:07:66:e9:
df:5c:56:d7:7e:1b:4e:ab:20:a8:e5:7c:d6:94:12:46:28:43:
6f:2b:df:33:cd:b4:bc:03:96:0d:cb:c3:3b:1d:d1:4a:b9:ee:
a7:d5:6c:f1:97:a5:cd:ad:04:2b:b7:c8:6b:59:ae:83:33:29:
40:b4:f5:66:f1:93:0a:60:30:5c:0c:ec:0d:ee:bb:9c:4b:82:
3d:3b:f9:0c:7d:3c:d4:91:21:cf:a6:77:f1:fd:a0:10:bf:f7:
0c:4b:4a:70:10:45:e4:0f:5b:99:45:ae:7b:fe:3b:10:e7:f5:
d7:a4:f4:da:80:6f:2a:c3:a0:92:39:2f:08:a8:fb:24:68:f0:
9c:d8:d0:a7:e5:14:5f:02:57:35:a7:e0:f1:55:35:66:49:17:
f3:d4:10:2b:db:8a:b0:9a:82:49:aa:ed:69:a1:0b:12:40:05:
f7:01:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:47 2025 by rpki-client on console-fra.rpki-client.org