Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: YP6xpPpDRuCzfn7p1x6CUT8AHIqaHKZxP1U9vXZilJY=
Subject key identifier: 1F:DB:AB:0E:8E:80:76:2E:64:AE:D1:6F:3C:9D:9B:CB:BC:FD:87:0A
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0194C46362DBA4F64E4D52C4217F7E47206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 013C
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: px2TWzcNTpei13M8g+Yl5I5ef3CiV4AXU3sN8XIOqhY=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:62:db:a4:f6:4e:4d:52:c4:21:7f:7e:47:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=1fdbab0e8e80762e64aed16f3c9d9bcbbcfd870a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:7f:55:e3:c0:38:5b:8f:b9:8f:2a:ed:48:
60:d1:6e:08:bd:d0:cd:1f:1a:2e:eb:10:b6:5b:d4:
d2:54:ac:42:fc:a1:a3:8c:8b:a9:9b:37:de:a4:14:
d1:b1:d7:a1:41:9f:2a:61:95:19:71:7f:44:e9:9e:
03:d6:7f:f6:9c:ae:5d:12:6f:4c:6a:e2:ad:7f:63:
9d:b1:a3:92:f0:ec:6a:be:56:8d:64:5f:14:c9:df:
c0:5b:27:ee:9a:00:7f:e9:08:fa:26:21:b6:7d:de:
3d:f2:18:d0:e0:1a:61:50:a8:d2:4e:d0:76:5a:70:
fb:5a:21:be:a2:9e:11:a1:ee:7f:87:6b:82:34:46:
2d:09:9d:be:b4:0b:ed:19:f6:b3:4e:59:e4:89:22:
a3:9d:b3:4e:1b:71:6c:e6:30:41:cd:06:6b:c7:80:
fb:6b:89:ba:ee:53:f9:02:db:1c:10:c8:0f:06:d2:
2b:6b:7a:37:93:dc:67:97:b2:84:6e:91:3c:44:f7:
69:20:b1:a7:7b:99:02:b6:f0:98:78:9d:10:e8:fd:
de:e1:59:03:e2:a7:21:94:b7:c8:aa:cb:f2:1e:04:
65:be:ab:1d:dc:81:07:5f:f6:f8:73:13:65:20:db:
bb:9e:b5:f0:f2:03:bf:28:21:de:61:ec:3a:8d:d3:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:AB:0E:8E:80:76:2E:64:AE:D1:6F:3C:9D:9B:CB:BC:FD:87:0A
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:b4:4a:e3:86:17:da:ba:91:37:d0:f8:2d:fc:db:80:44:
78:a7:4e:c2:8d:c3:77:ed:22:4a:aa:34:3c:14:cc:ee:76:99:
8d:25:52:80:42:2b:ce:55:af:87:87:5c:7d:25:a7:b3:dd:95:
78:de:16:7f:48:89:b0:20:94:3e:89:3d:d6:66:17:28:79:bc:
f2:ca:a8:cb:a9:d6:52:3e:19:a9:2f:3a:54:ce:bf:26:d7:06:
93:7c:84:b6:40:a9:4a:38:87:9b:12:ac:d7:8e:a3:4f:5c:80:
c4:da:64:ba:d9:6c:4e:77:84:41:f6:77:6a:07:9e:30:b6:39:
11:e4:0c:8d:3f:93:c6:b5:f0:d1:0c:93:74:c8:86:b7:17:de:
2b:df:13:73:8b:d8:ce:eb:9f:1c:73:29:33:e9:00:3c:7f:4d:
bf:9f:54:d1:77:38:46:62:c6:0c:3d:b7:a4:b0:d4:9f:a2:42:
42:2f:2d:06:59:14:63:05:cf:37:22:39:41:d5:1a:ff:46:f9:
43:a7:3b:61:4d:99:d7:82:ff:af:3e:5e:02:45:03:d0:40:c1:
13:a7:1c:44:9b:12:2e:76:31:0a:27:bb:bf:07:8c:58:9f:98:
a3:35:ef:7c:4f:d9:c2:5c:d9:89:96:dc:60:60:66:2a:12:23:
51:d4:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:39 2025 by rpki-client