Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: b1sSKcavC6zIQeR7TZsHyM5uiLCerdo57q+z88ReGn0=
Subject key identifier: 25:DC:EA:B8:5D:83:55:96:2A:A3:32:9B:6C:FC:11:CA:9E:BE:F6:95
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 0194C35084B1F2C786E2241F902609562756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 7B
Signing time: Sat 01 Feb 2025 21:00:21 +0000
Manifest this update: Sat 01 Feb 2025 21:00:21 +0000
Manifest next update: Sun 02 Feb 2025 21:00:21 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: 6X+nyJbZXONCDy1N+ouYl6EBILOmP6Dj6Pv1ZL0lOuI=)
2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:84:b1:f2:c7:86:e2:24:1f:90:26:09:56:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Feb 1 21:00:21 2025 GMT
Not After : Feb 2 21:00:21 2025 GMT
Subject: CN=25dceab85d8355962aa3329b6cfc11ca9ebef695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:af:51:5a:3d:88:0c:b7:f2:52:03:42:c6:
da:bc:50:5c:93:84:6e:7c:b0:4d:06:1d:3d:ce:1f:
ac:38:7d:22:3a:53:7c:fa:09:af:d7:60:5b:59:42:
fa:9b:b7:ef:eb:be:2e:f5:6d:83:64:b6:4e:e1:71:
df:87:a6:d0:95:43:08:bd:c3:fd:24:47:30:3c:83:
f2:ee:44:ac:87:a0:76:c6:02:5d:65:36:7a:2c:3a:
58:df:a2:a9:d9:f6:38:80:a7:16:d7:0a:96:84:d7:
51:74:ce:48:e6:62:c5:81:7b:4f:3d:40:cb:76:23:
cc:90:a3:c6:80:b0:54:78:bc:68:81:9b:0a:b4:2c:
ac:25:37:27:c7:7e:7a:ce:07:e8:c7:7d:77:1b:59:
6f:3b:92:58:ce:71:50:e6:d2:50:7e:be:46:1b:f9:
20:25:8a:89:09:a7:6d:fb:6a:f8:bf:4d:ee:db:ff:
3c:93:ab:c2:dd:81:3e:6f:c5:a9:8e:94:9c:3b:5e:
9e:c4:4d:f3:19:ee:2a:af:c4:47:81:e5:7c:9f:51:
aa:33:3b:6d:7b:55:1c:72:07:24:a7:b2:4b:cb:de:
1f:7e:15:0b:8d:c4:b8:7b:cc:d2:ad:d8:4b:98:ed:
c6:55:74:17:b6:57:1b:d0:7d:39:3f:f8:68:8f:4c:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:EA:B8:5D:83:55:96:2A:A3:32:9B:6C:FC:11:CA:9E:BE:F6:95
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:86:17:74:81:16:29:a6:25:74:61:91:1c:dd:3e:fa:41:85:
d1:77:7e:50:12:fb:51:d6:4f:f6:de:7a:6d:c7:c6:fa:18:c4:
c8:36:02:77:0b:02:02:c7:9d:b9:d8:f7:9a:65:77:77:ff:4f:
d2:12:cd:a6:21:ad:a2:ca:89:16:56:0b:e2:4f:74:fd:ac:54:
d2:5f:98:37:db:cb:5f:4f:c6:5c:1f:96:01:d6:69:f0:5b:c0:
a7:b2:d9:4d:8a:9c:c0:d7:83:8a:a0:66:0d:56:82:d5:cf:89:
ab:1e:4b:4e:fe:5f:05:8c:69:ae:70:ac:1e:f1:0a:54:37:cb:
4a:43:d1:5a:51:4b:46:ec:61:a3:b8:c5:7f:a5:90:0a:69:9d:
86:8d:d2:09:6a:8e:5a:e7:fe:6c:a2:05:c2:0b:df:bb:b0:40:
7c:2a:49:75:65:c8:3a:65:5b:5e:f5:0f:60:80:29:e1:a8:f2:
a7:01:71:f8:9e:cf:91:f7:77:1b:31:f7:fa:0a:0b:89:a3:6e:
4e:9b:e4:e9:ad:ef:ad:fd:23:80:a9:1c:8c:97:ac:6d:eb:50:
f5:37:c1:78:b6:8a:36:2e:8e:4e:c3:87:f0:d0:69:80:ca:ca:
d0:e4:44:a5:2c:fb:63:b5:3c:5c:b9:ac:6a:a1:cc:f4:d0:bf:
1b:de:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:10 2025 by rpki-client