Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: oHc/Hn4EvNGphJbIH9Vz0b6EtZByINgU3o8NRBi9oQA=
Subject key identifier: D2:6D:31:AC:C3:ED:0E:6B:85:A5:4F:75:26:6B:3E:E6:B1:F7:6C:86
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0194BAFA331FE3B790000D4DEE3266661F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0C89
Signing time: Fri 31 Jan 2025 06:09:06 +0000
Manifest this update: Fri 31 Jan 2025 06:09:06 +0000
Manifest next update: Sat 01 Feb 2025 06:09:06 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: bINu56vZzGoYv45YIKg2JxSnbArX+jMDBFW/XAU/1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:fa:33:1f:e3:b7:90:00:0d:4d:ee:32:66:66:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Jan 31 06:09:06 2025 GMT
Not After : Feb 1 06:09:06 2025 GMT
Subject: CN=d26d31acc3ed0e6b85a54f75266b3ee6b1f76c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:29:e9:d1:84:4b:f7:de:4a:dd:2b:b9:7b:
73:10:ca:65:88:0d:79:6f:47:0d:db:5e:01:90:cf:
78:36:13:aa:dd:e9:af:9c:b0:8b:8e:5e:cb:f3:c3:
30:05:b6:33:3d:9b:67:64:a2:57:f6:39:e3:09:49:
c6:f8:c9:d0:03:42:12:0c:e3:81:a9:82:32:44:fb:
e3:f7:ed:dc:f2:e7:e5:3e:92:3b:45:14:06:67:b0:
89:eb:04:40:c9:fd:4f:f1:84:5b:f5:c6:54:60:d3:
92:9f:cd:93:63:1d:e7:da:12:f0:d4:45:98:f9:02:
c5:b7:da:2b:a9:93:04:fa:9f:9e:b4:23:91:e8:3d:
5c:ef:b4:af:66:9f:7f:ab:48:e5:85:13:33:af:cd:
35:b0:0f:2b:b8:39:73:d7:1d:e6:2f:4a:bc:4e:3d:
a7:60:3b:59:bd:b3:bc:09:52:e0:c4:e7:32:91:2b:
71:21:ad:29:a9:9b:f9:0f:3b:14:77:1e:cb:92:16:
f8:9d:ad:b7:1e:fc:4d:91:ac:62:4e:9b:f3:9c:f5:
ef:1a:af:11:eb:9c:bf:12:fc:65:43:1a:a9:fd:8a:
ce:a9:21:45:59:fd:9d:fe:14:1f:87:b2:e3:e9:b3:
42:06:82:9b:c3:b6:b1:d9:77:70:84:48:83:57:92:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:31:AC:C3:ED:0E:6B:85:A5:4F:75:26:6B:3E:E6:B1:F7:6C:86
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:b7:f2:3d:8c:4a:62:ce:1e:9e:22:42:6a:34:d2:5d:b6:
99:45:45:7f:da:63:99:7b:2f:26:c5:f6:74:a6:08:c2:a4:89:
57:ac:78:94:b8:5e:21:f1:46:57:d1:3e:50:2a:42:2f:4e:97:
32:55:2c:11:12:fc:33:2e:59:ef:92:d2:cb:49:ad:c1:58:fa:
51:ed:e1:b7:d8:c3:b7:46:57:39:8a:85:53:64:f9:62:e5:a6:
84:88:d5:7e:2d:bc:d8:99:e0:a6:18:ca:e7:21:58:70:15:e2:
43:65:92:f1:13:3d:b3:c4:63:9a:7c:99:2c:8d:50:e4:5c:9d:
d7:bc:07:b8:75:35:10:51:e3:b7:b1:ca:74:6a:45:be:02:0e:
01:ad:f0:dc:4e:d3:a9:c2:1a:16:83:86:32:45:e3:33:81:69:
f5:f7:80:90:13:c7:47:44:96:fc:33:75:06:8e:09:94:f0:5c:
08:8a:78:25:df:c4:41:26:92:f9:44:b6:cb:96:8e:fc:b8:6f:
3e:24:84:69:40:5b:91:34:2d:6f:24:a5:00:21:d1:65:c2:f8:
5d:de:55:87:50:4d:48:fc:61:c3:52:b9:43:31:21:3d:70:91:
80:c3:60:53:3c:81:11:ce:e6:7f:98:4d:48:29:54:a0:b2:0f:
17:31:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:48 2025 by rpki-client on console-fra.rpki-client.org