Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: 1jS0OwwoYzE4zPT71e+P9ltrPBZLWqrF9NhyocYWxnU=
Subject key identifier: 95:90:50:D9:E7:5A:D2:E3:EF:54:9F:A3:B7:AE:2C:25:71:BD:25:CB
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0194BB971A59303507B2AD8E763B54AC025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:29 +0000
Manifest this update: Fri 31 Jan 2025 09:00:29 +0000
Manifest next update: Sat 01 Feb 2025 09:00:29 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: SNIMCRSkrqcfqEf0ygHzwvjR4upUCf7/LWGvmTbfYPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1a:59:30:35:07:b2:ad:8e:76:3b:54:ac:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 31 09:00:29 2025 GMT
Not After : Feb 1 09:00:29 2025 GMT
Subject: CN=959050d9e75ad2e3ef549fa3b7ae2c2571bd25cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:4f:b2:a4:88:fb:d5:ce:c9:11:63:cf:87:
d6:19:82:52:3a:bd:f8:d7:73:28:a3:30:39:67:95:
ab:0c:be:55:fe:37:2a:b9:54:d2:ec:49:d7:a6:f5:
ca:7b:06:2a:79:f2:36:8d:39:99:68:22:29:d1:98:
f2:a1:76:b0:b1:0e:bd:8d:8c:c5:5a:b8:1e:90:83:
88:2d:34:4e:dd:9d:ba:89:1e:19:17:ca:06:ba:5d:
ba:41:61:77:cd:fc:f3:fe:cb:9f:3a:1c:6a:41:59:
6d:25:e2:11:d1:ac:74:97:e5:74:94:57:60:20:ce:
e2:b3:fc:4b:e8:82:68:51:b9:4c:ac:d4:36:dc:b1:
9b:f2:5d:70:b7:66:c3:ac:c3:d2:df:c9:85:02:73:
b6:b7:bd:68:63:10:b9:5d:2c:fd:ab:5f:97:36:37:
c4:88:f2:33:e9:69:ee:48:93:63:69:3f:5f:4c:2f:
6b:a3:f3:75:ed:20:4a:63:c1:75:13:bb:9a:fa:af:
6c:8c:cc:e2:3b:07:c9:40:74:4d:77:fb:db:53:9e:
d6:31:ee:e7:a9:9c:06:df:f2:8b:bc:d2:48:11:8b:
2e:5d:3c:3e:f2:33:97:a0:d2:67:8e:98:01:77:b3:
35:39:65:23:5f:8c:3e:92:db:74:15:9b:11:80:73:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:50:D9:E7:5A:D2:E3:EF:54:9F:A3:B7:AE:2C:25:71:BD:25:CB
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:77:c0:b8:83:46:fc:f7:38:02:de:f4:9f:a5:df:e8:56:
c4:06:41:16:ce:28:a8:15:9d:ef:c4:9c:65:b7:d2:78:dd:b9:
4d:44:27:a9:09:d7:19:cf:42:f5:b1:de:d2:1b:3b:74:cb:e4:
33:a3:c1:3a:ca:4f:e1:08:35:83:92:bd:da:5e:87:a9:3b:31:
4c:64:42:4b:4f:7a:9c:2b:d7:f2:fb:62:33:86:13:fc:2a:d2:
6b:a5:24:97:04:87:26:0d:2f:0b:e9:4e:24:4a:07:1d:7f:11:
0b:b8:2e:4d:d3:fa:ab:6b:03:d3:04:6c:d3:26:3d:1c:ba:ed:
dd:42:a9:1a:dc:f4:e8:46:fb:7f:76:ea:d9:0a:ae:06:0d:b7:
cf:b2:03:7c:d9:98:09:8a:6d:b9:b9:8b:5a:8b:fa:e3:59:a3:
54:d6:7b:26:a3:fe:84:44:c6:b9:8c:69:41:31:40:34:cd:58:
ae:ac:37:35:4e:e0:20:0b:6d:6b:71:77:63:7a:6f:14:94:e4:
58:93:9d:1e:4b:2b:69:c4:c4:bc:89:cf:d9:49:70:53:78:7b:
01:da:ec:57:c6:e1:01:5e:33:6c:af:8e:3e:a3:96:69:f2:de:
32:ce:f1:60:e4:64:5e:24:fa:38:6b:c2:d7:29:de:e6:bb:7e:
19:64:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:05 2025 by rpki-client on console-fra.rpki-client.org