Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: duPMrKIQSchwp2f3DHGhAVuEGWUaMtS+ErKqlAbNFSM=
Subject key identifier: FD:71:3B:C9:0F:78:5D:44:90:CA:0E:CB:01:8C:98:BB:8E:8A:09:7A
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 019510C6DEDB8218190FCC8CFB318B9C4E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 145C
Signing time: Sun 16 Feb 2025 22:00:23 +0000
Manifest this update: Sun 16 Feb 2025 22:00:23 +0000
Manifest next update: Mon 17 Feb 2025 22:00:23 +0000
Files and hashes: 1: AGpWRsY_xlGvwtNQWAnABWymQ8A.roa (hash: pZbxN4jH7CXcAGUCPIracQWWJ5Fx7UpJPwtV6JB2GN4=)
2: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=)
3: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: hdL8ojukpQoMmrW/cpV3B6rjo9nl1tjttkv+TEjwh5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:de:db:82:18:19:0f:cc:8c:fb:31:8b:9c:4e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Feb 16 22:00:23 2025 GMT
Not After : Feb 17 22:00:23 2025 GMT
Subject: CN=fd713bc90f785d4490ca0ecb018c98bb8e8a097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:ca:97:13:24:a3:c4:5c:a6:22:36:39:54:
a3:8e:ce:93:ba:69:a7:50:a8:d1:89:43:6f:38:ff:
02:2e:e7:fb:3e:8c:e1:ab:62:07:72:38:fb:db:47:
5a:e3:bb:c0:a8:1c:47:3f:33:51:66:7a:23:5d:ee:
84:9b:47:89:76:db:17:05:e9:b7:a9:93:7c:27:4a:
5a:6b:46:5d:ac:c9:d3:bf:42:b6:6c:3a:f5:b8:e6:
85:2d:e2:72:21:ea:94:1e:22:9c:8d:80:6e:42:6c:
71:11:3d:f0:fc:c5:23:c6:90:e9:54:06:23:30:e6:
ba:09:5c:ae:d6:44:d6:d5:d5:76:22:0f:db:a3:72:
76:a2:75:0b:b5:b4:9f:ec:b5:e1:98:1a:4c:43:d5:
5d:2b:9b:09:8f:28:21:6e:0a:68:3e:46:97:d6:6e:
e2:29:bc:19:09:d7:ff:59:76:c5:a3:a7:b8:df:85:
33:ca:04:c8:82:23:89:ca:27:e6:ab:79:03:ac:ef:
48:93:68:79:49:6e:c5:82:13:b0:0a:bd:71:a0:03:
a4:85:bf:1a:b6:55:a1:30:20:a3:70:94:0b:61:8a:
99:2f:31:ee:d4:57:73:32:dd:61:4c:82:2e:37:1a:
f7:41:df:a6:8e:06:93:4e:f1:cb:55:72:07:3e:a5:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:71:3B:C9:0F:78:5D:44:90:CA:0E:CB:01:8C:98:BB:8E:8A:09:7A
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:47:8e:8f:be:c5:b5:fd:47:fa:c4:e5:df:e4:a2:61:bf:
92:5e:df:01:bd:68:4a:f8:fa:47:5f:84:b6:c5:db:7a:cf:c3:
9f:cc:9c:ea:5b:cd:d9:c6:f6:16:85:79:0a:85:bc:b1:17:24:
d4:78:76:55:98:92:3c:59:fe:91:15:93:b4:60:f1:8a:dc:c8:
79:ef:2c:39:e3:ee:fe:7e:ba:43:90:39:17:6e:76:a7:d1:71:
b4:ed:18:24:e7:82:78:92:cb:09:a2:cd:e0:3b:fa:38:ff:b7:
63:e1:94:85:1a:55:20:f0:07:f8:df:70:83:f2:a3:f9:a7:59:
e9:48:d6:81:8d:f9:b6:39:d2:20:4c:1b:53:2c:25:88:ac:9a:
2a:57:d0:f6:25:fe:3c:2b:e3:04:63:b5:54:a2:ce:fd:72:d1:
0b:a0:62:8b:6f:27:86:2a:59:ec:fb:cc:01:8a:b7:cd:95:a6:
48:c9:97:3b:d5:1a:2a:a3:32:3a:b5:44:3b:5d:13:ea:96:cd:
c7:d0:08:e3:a4:c2:78:68:07:29:75:55:6a:f2:eb:ab:a6:0b:
c5:cf:b6:0b:fb:76:f7:d1:ac:51:0c:f9:bb:c0:12:2a:45:be:
67:f7:fe:92:c2:67:ca:97:0f:8f:25:03:b5:80:4c:b8:ef:82:
22:01:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:36 2025 by rpki-client