Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: zPbrSZ9sxJ+xhRBE76ysWODUOQk6S9eCiZbS/vOIpnE=
Subject key identifier: FD:12:70:CE:8E:B2:C7:94:90:8B:5F:58:83:33:C2:78:29:39:70:7A
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 019511A3072457DC361BE0CF8D4D6E3C94FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: ky2Mg6WFmPoKWu3cg9GV/GRJsD38UYXN+SrZsrDXM0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:07:24:57:dc:36:1b:e0:cf:8d:4d:6e:3c:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=fd1270ce8eb2c794908b5f588333c2782939707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:cf:52:22:a7:21:dd:9d:4c:f1:a9:e7:c2:
46:32:2a:67:01:28:b3:10:03:02:92:6f:e4:fc:d9:
10:3a:c5:a8:db:28:ba:25:6f:93:35:a5:26:31:d8:
fc:59:cb:b1:d9:68:06:9a:c3:7e:03:07:07:be:af:
7f:08:7e:d7:93:72:2e:09:e1:48:2f:cf:5f:d1:32:
28:aa:1e:54:69:b7:1e:26:72:ac:bd:1a:28:c3:47:
11:2c:59:98:8a:94:60:e5:15:d0:3d:6f:c7:d4:99:
9d:92:44:e2:0e:85:a0:ad:98:6f:b3:f3:e4:62:0c:
58:98:9a:99:b5:46:8f:0a:6f:2a:ba:fc:5a:5d:c9:
85:0e:ab:04:f6:84:59:77:69:a4:6b:8d:27:3c:7f:
c9:a5:4f:60:4a:f6:d7:69:f8:d5:3e:ee:d8:4a:a0:
81:d1:26:f4:b0:fc:d4:30:7c:6b:05:8f:6b:30:53:
af:89:bc:81:b4:39:22:e1:20:a9:42:a3:ab:35:2c:
c3:22:41:e3:01:9b:d1:01:d2:e0:12:04:24:03:95:
bd:dc:b2:48:5b:33:44:fa:bd:71:2f:5b:44:92:80:
ce:69:28:2f:d2:87:8d:1f:f8:89:4d:75:84:a3:34:
4a:e6:26:eb:54:19:d8:51:7f:1e:16:9d:33:99:0b:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:70:CE:8E:B2:C7:94:90:8B:5F:58:83:33:C2:78:29:39:70:7A
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:7e:3f:54:3d:88:f8:4c:4f:43:47:4b:48:ec:e4:61:bf:
d9:28:4c:ab:18:01:08:81:bd:45:de:44:12:27:e4:d8:3a:42:
01:59:7f:ec:87:9c:d0:82:2f:7d:8d:24:64:7f:03:7f:0e:d1:
38:64:d6:a1:67:1b:08:16:2f:d5:fa:a7:99:81:08:77:d6:0f:
c8:1e:8a:ef:5f:cc:41:48:d6:1f:31:d0:e9:b8:78:14:bb:50:
8f:ac:74:81:53:db:7f:99:10:d7:17:06:c8:60:de:03:bc:99:
33:93:0a:3c:9e:46:e0:ec:16:36:28:a7:07:83:be:79:28:1d:
f6:51:ee:6a:a7:ab:65:18:98:ef:94:03:5e:43:5d:86:c0:f0:
c7:18:0a:fb:ee:46:15:de:4b:94:d7:b0:dc:51:74:b2:fe:63:
69:0e:87:23:ef:81:f7:c6:04:75:98:4d:cc:d1:31:a3:ca:2d:
88:4f:bc:f2:a5:89:fd:e6:1a:86:6a:97:d5:23:b5:02:f9:b5:
db:00:90:d7:e7:ea:66:de:7a:2d:a5:5c:92:6a:fa:4d:25:fc:
29:b6:a1:4a:13:fc:50:2d:4c:96:c4:15:81:a8:6b:e7:cf:92:
a8:91:90:47:d0:5a:76:45:b7:62:c6:59:0c:69:84:fe:3c:62:
ad:32:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:39 2025 by rpki-client