Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: BExaNykMZDA/EtmdR4tie9eC1IfAdEy0b/33ku+BEbI=
Subject key identifier: 4D:57:18:96:8A:0F:53:6E:E6:EA:0F:82:B9:C2:14:7D:07:50:26:DE
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 0194BB972F3C3DB127769019E21FFC537460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0491
Signing time: Fri 31 Jan 2025 09:00:34 +0000
Manifest this update: Fri 31 Jan 2025 09:00:34 +0000
Manifest next update: Sat 01 Feb 2025 09:00:34 +0000
Files and hashes: 1: NrYJL5cRvwpZ3RyMAVGDFH01EXU.roa (hash: fOvkxo0aYuZ6vUK7661AO18BzMq/4cGFeP4MdjUl6rw=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: OSPUEz3vi09GqvjRK3wb7/pAx5nD2wLMKwGHbUm3rI0=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:2f:3c:3d:b1:27:76:90:19:e2:1f:fc:53:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jan 31 09:00:34 2025 GMT
Not After : Feb 1 09:00:34 2025 GMT
Subject: CN=4d5718968a0f536ee6ea0f82b9c2147d075026de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:98:72:23:43:e5:e1:20:a2:15:90:20:f1:
60:f7:80:93:83:3d:25:90:3e:9d:d9:4d:74:89:73:
2d:43:4f:52:a1:28:5a:5e:eb:6a:b5:d4:9f:ac:81:
d7:8b:a7:dd:91:a2:2e:b3:08:c1:c0:01:e9:15:2d:
fc:2d:09:85:6a:b0:5f:65:39:83:ec:01:bd:cd:c0:
a7:81:cd:3a:2f:78:67:41:27:87:cb:4e:8b:1d:76:
58:23:95:9f:7b:bd:53:59:69:db:b7:8e:14:ff:ba:
80:7f:1c:97:52:d2:26:01:dd:6d:41:32:c4:9a:d8:
4e:58:f8:b7:15:f4:20:15:ec:a6:c6:a1:4e:60:9e:
95:26:0f:de:b3:9d:43:13:38:4b:d4:b8:32:57:30:
3f:ae:a3:80:2e:77:f3:a6:a2:9a:93:0f:fa:02:f0:
b3:f4:82:02:98:cc:c9:6d:16:b2:1f:a4:eb:8b:86:
9d:f8:06:d8:c0:d1:7f:df:3c:d9:9d:ff:6f:05:d7:
36:3c:1a:49:f5:e0:4d:e2:bf:bd:19:d6:1d:28:f9:
7f:00:91:ef:7f:21:53:b0:64:d4:74:6a:ab:43:c7:
6c:1b:eb:6a:57:d3:7f:24:a6:f3:2d:dd:4b:5f:f2:
bd:51:0d:aa:b0:e2:ab:ad:5c:e5:7a:39:1b:14:88:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:18:96:8A:0F:53:6E:E6:EA:0F:82:B9:C2:14:7D:07:50:26:DE
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7d:2b:a7:5d:76:60:88:37:12:00:b1:03:0a:b5:a2:a3:98:
ec:63:70:21:10:93:9b:9a:a1:9b:a1:71:fc:8a:1d:33:ff:32:
9c:7a:d2:c7:6e:d6:b7:17:de:62:cc:80:dd:d2:c4:10:95:e7:
81:7b:2e:24:f0:12:8c:1e:56:3f:24:6c:53:cd:01:41:6d:f2:
1a:2f:fd:5e:e9:af:7f:10:f8:06:e8:45:c3:8e:aa:25:0b:d1:
6c:28:37:ac:2c:19:47:96:c8:7b:22:4d:25:67:23:c2:51:c9:
7f:c9:c8:5f:d4:1e:18:1f:2d:59:c3:56:75:86:ee:6c:1e:6e:
38:ce:15:39:65:0d:59:0a:ee:d7:5f:87:e3:40:8b:7e:1f:da:
d0:97:50:2b:c6:ae:fc:c4:93:10:af:9d:f8:d8:ce:a1:22:da:
1a:ac:26:d6:82:a5:4a:90:64:e2:be:3e:56:dd:8c:a8:ec:00:
c4:e7:80:2a:1d:9f:29:ff:ca:4f:52:2e:c1:c6:ba:60:fe:4d:
18:80:75:11:f4:2e:31:e1:07:04:8b:f1:fc:99:45:27:c5:8e:
f4:88:aa:06:a0:dd:10:a6:c1:24:27:9a:95:4b:f3:b7:b1:bf:
b9:b4:5f:82:ea:ca:7d:f1:1a:87:37:21:67:0c:da:c6:9f:f6:
17:3a:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:39 2025 by rpki-client on console-fra.rpki-client.org