Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: M7/JT//gb9xY+cav7jr4RoApq/caNNJ6RHyCWGV30RA=
Subject key identifier: CD:FA:64:F7:F4:1A:32:07:E2:39:08:D9:39:AF:FF:50:92:12:7B:1F
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 0194C3BE2B3C9B4A678D96C6C98EE59AFD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: B4
Signing time: Sat 01 Feb 2025 23:00:07 +0000
Manifest this update: Sat 01 Feb 2025 23:00:07 +0000
Manifest next update: Sun 02 Feb 2025 23:00:07 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: YJEAMzhUAewoDjqzU4H9xDwQW04pbAffWpiDFXxVc+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:2b:3c:9b:4a:67:8d:96:c6:c9:8e:e5:9a:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Feb 1 23:00:07 2025 GMT
Not After : Feb 2 23:00:07 2025 GMT
Subject: CN=cdfa64f7f41a3207e23908d939afff5092127b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:c4:d7:0c:e2:d1:38:c9:8a:0a:9d:65:ca:
99:6e:cd:10:18:d4:80:41:9c:3f:73:5b:c9:68:f3:
8b:ca:be:07:20:03:e6:70:5f:0e:d2:78:b3:77:13:
8a:d3:14:e1:4d:a3:a1:5c:bb:a8:ba:fb:70:7d:2c:
71:be:f9:52:f3:f3:c4:f9:43:23:51:3a:8c:70:7b:
38:be:6e:f4:73:2b:55:b3:e1:af:0d:b2:c0:22:60:
c6:c2:64:9b:3e:18:f0:e6:db:01:8b:4d:e5:2c:60:
62:4f:08:d8:ab:ac:40:e0:00:76:8c:be:28:dc:69:
b4:3c:41:ce:7e:12:74:58:08:fa:e8:02:20:17:7c:
19:36:9b:c0:5b:82:6c:3a:78:69:2c:de:c4:32:f9:
66:90:3a:66:ac:4b:64:de:19:87:26:2a:ce:6f:db:
7c:ce:1e:39:02:f7:7d:a2:5b:ce:e4:e1:0c:3d:03:
52:db:0e:31:2e:55:df:5f:8a:5f:ec:d5:f5:a8:cf:
6a:d8:8a:2c:57:32:17:12:d8:97:ca:9b:42:95:dd:
ee:78:f7:54:3c:03:b6:e6:8b:66:ee:b8:c8:21:c1:
28:51:c5:82:32:c3:10:b3:db:fb:d0:c1:47:8b:7a:
61:f1:75:e2:9a:bd:b5:79:24:ea:a0:cb:17:20:50:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FA:64:F7:F4:1A:32:07:E2:39:08:D9:39:AF:FF:50:92:12:7B:1F
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:8b:0c:0b:ff:39:b7:43:30:c5:d3:67:77:ae:74:78:fd:
d3:49:85:9f:5e:98:4d:4f:1e:12:93:3b:aa:2d:e7:f2:51:70:
69:8c:d5:5e:fc:30:0a:64:3a:91:72:83:5b:28:bb:17:9c:cf:
cc:54:bb:09:c0:39:d8:ee:f2:39:57:82:09:58:8f:c6:df:af:
cd:27:9f:ae:c7:ca:a5:9c:c4:55:46:60:82:cc:89:a1:d2:c7:
ee:5a:01:cf:bb:3c:44:58:a2:8b:ce:71:6c:38:df:3b:69:4f:
47:ea:a3:c4:ae:f8:03:47:2c:68:3c:e5:24:90:9a:b2:f5:e0:
a0:d9:5d:de:b1:89:31:72:08:35:19:02:c6:9f:2d:dc:66:e9:
ae:a7:cc:6a:72:26:f2:a0:58:bb:3e:12:cc:c5:bf:31:3e:a2:
ec:cf:27:61:16:02:42:55:12:c3:f6:4e:18:c9:60:f6:7c:db:
ed:51:07:a5:06:f8:2d:17:13:42:c5:82:87:c6:6d:05:5f:9b:
86:3f:42:df:44:dc:19:87:2d:d9:4b:75:0c:0d:15:f1:7a:83:
ca:87:d7:fb:69:76:f0:2a:89:57:48:d7:06:42:e5:86:dc:c6:
89:ba:12:8e:29:a2:7e:0f:72:17:5f:fe:cc:39:6d:f2:77:b7:
44:1a:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:47 2025 by rpki-client