Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier: f6V9DTxNHHLldtk0Xn/Tdnxpb9LpTtSRo7BftaD0GZM=
Subject key identifier: 41:AC:1A:76:7C:80:8F:A3:29:04:AD:B9:69:4A:9B:F3:75:4C:BE:3A
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0194BA84305AA0F2DDAAC48AEF9440CB6B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (hash: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=)
2: 4dR87DFU1h-_n9gWgjfEcPKRNjQ.roa (hash: 2sOA9bFKi1Li43Qu+cU631T12GoMBvyIUcumh0ZnQK8=)
3: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (hash: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=)
4: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (hash: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=)
5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: B3IYEV9AYFHDVYT1yHll5wD2SPHs8wpFz2buy62LCOQ=)
6: fyUduA7iLRzPOu8jJXAMIB-HOkE.roa (hash: cIQaQBrp3go+iSKqU55ZO7AX4q6Ht8Tb5+J8gXHDuFM=)
7: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (hash: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:30:5a:a0:f2:dd:aa:c4:8a:ef:94:40:cb:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=41ac1a767c808fa32904adb9694a9bf3754cbe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:72:d4:b3:c9:54:7c:03:ad:e5:ad:a8:45:
af:66:06:e7:42:f8:4b:ee:7e:bd:1c:42:f2:94:51:
11:ea:76:52:59:5c:b1:40:2b:aa:a7:a5:d6:08:ff:
47:63:85:17:fd:ba:b8:8b:8a:4a:44:c7:ff:09:27:
2f:32:5d:32:99:3d:4e:f1:69:0e:28:7b:1d:0b:cd:
aa:e9:83:a8:09:8f:bc:38:72:a6:b1:f6:21:4c:3a:
d0:cb:99:93:28:77:16:b2:5f:f9:7c:20:9e:0b:bb:
86:5f:b5:e4:24:44:48:71:15:51:96:10:d4:2c:3c:
c6:16:f3:91:8c:d1:9c:df:26:9f:c6:d1:48:70:4d:
77:5f:39:49:12:c8:c6:1c:0f:02:cf:05:f4:00:7b:
a8:90:38:39:4c:60:e7:e3:be:47:56:b9:78:3a:ec:
3e:20:10:87:6e:04:13:11:f0:5b:68:aa:86:e8:ca:
8a:04:39:30:1a:e7:4d:6d:97:ac:08:0a:0d:b1:73:
79:ef:fa:e4:ea:65:4e:da:b6:b3:34:5e:c9:00:0d:
3d:b7:0c:dc:6c:51:be:c0:61:97:ef:09:d1:d2:b3:
6f:2b:7d:17:74:c5:6a:ab:8f:d6:65:67:b1:3a:09:
2c:f9:46:f0:df:40:e5:14:2e:8a:15:55:dd:ee:4c:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:1A:76:7C:80:8F:A3:29:04:AD:B9:69:4A:9B:F3:75:4C:BE:3A
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:24:5e:af:63:b1:67:41:e0:df:96:99:97:fc:56:88:35:
34:6f:38:3f:4a:e0:76:c6:40:bd:c8:ab:f8:48:b2:90:81:ff:
c2:37:e7:bf:a8:5e:c7:84:bc:c8:e3:e4:a3:6c:5f:4a:ba:c6:
f1:83:8b:d1:a7:78:be:76:e0:30:38:2f:99:8c:ac:2c:d2:f6:
30:07:4b:77:f7:44:ad:bb:4d:3c:db:85:76:0b:d5:c9:df:c9:
12:33:cd:db:8f:4b:e8:57:31:50:a3:3a:a0:ce:1d:fc:e8:fc:
04:63:a2:2e:2e:d8:b2:70:11:b2:09:ac:d8:05:4c:2d:33:90:
5a:e0:89:0a:65:f8:9e:1c:4e:a6:b3:c8:67:c9:78:8a:b3:5c:
33:6d:94:8b:04:7f:3a:3b:1a:ab:9b:a4:4f:82:8d:65:a2:e0:
59:5e:b5:ad:05:66:45:14:4f:72:fd:4a:1a:e3:fb:c2:bd:e6:
7e:64:cc:68:d4:36:69:4e:be:f9:a8:b7:62:d1:02:28:00:ea:
b0:20:d8:4a:ab:4f:c6:34:64:c1:47:a7:a7:de:3b:6e:dd:f7:
0f:64:19:cd:31:1f:12:62:f5:63:40:54:4f:f7:64:0b:54:dc:
8b:b8:71:3d:16:fb:4b:82:b2:ec:db:92:0b:30:be:ce:01:e7:
ea:b4:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:32 2025 by rpki-client on console-fra.rpki-client.org