Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: GoBf5QjS0Zbpr3v0tuaDCFbxutnFzBDUvoguhnqXR5k=
Subject key identifier: BE:C7:E1:EE:52:47:10:E1:5F:F9:42:AF:84:E5:AF:AF:5B:4C:38:0E
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0195113499408682DBC4E9ADD93031D73300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 07F2
Signing time: Mon 17 Feb 2025 00:00:14 +0000
Manifest this update: Mon 17 Feb 2025 00:00:14 +0000
Manifest next update: Tue 18 Feb 2025 00:00:14 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: rjT0GsMfX+bCoIwVVzObYFgMvEmd3P+fbvvoP3FR09Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:99:40:86:82:db:c4:e9:ad:d9:30:31:d7:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Feb 17 00:00:14 2025 GMT
Not After : Feb 18 00:00:14 2025 GMT
Subject: CN=bec7e1ee524710e15ff942af84e5afaf5b4c380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:7d:fd:0e:1e:73:c7:b0:80:f4:0e:1b:b3:
26:ea:8d:33:bd:de:96:23:6b:5f:4e:2a:29:40:3b:
c6:49:4b:49:34:89:2c:61:52:5d:cc:70:c7:a3:9b:
d2:f7:ba:4b:4d:2a:f9:29:5c:c7:40:b8:2d:91:5b:
9e:54:5c:ac:05:b3:e2:a8:8b:b7:3d:85:bf:af:95:
ed:62:83:73:3e:e6:d1:ba:ed:dc:72:ff:be:78:e9:
36:2b:6c:66:04:ba:88:bd:08:8c:d6:f5:06:0a:2e:
98:6a:68:53:ec:00:b3:57:4c:4f:50:d1:51:c4:60:
18:4d:6b:97:c0:42:bc:df:2b:dd:ff:90:06:3e:50:
85:e0:cc:89:f4:26:06:18:79:99:82:37:f9:42:06:
89:6b:70:d5:71:05:c0:11:31:d1:4f:28:4a:fe:96:
af:84:36:29:85:b2:86:56:c8:f6:71:2e:af:50:15:
ca:7c:d6:1c:24:a9:9f:f2:17:f0:d2:04:58:2e:c8:
95:c9:fa:fe:f9:d3:9a:02:6e:f5:88:c9:f5:62:fe:
52:88:4f:ae:8d:81:73:8c:42:f4:ad:54:81:37:e3:
d9:6a:82:16:48:d0:c8:70:3e:94:c3:ef:41:d2:49:
3a:53:ce:6e:84:11:49:47:4b:ac:6b:a9:49:0f:a3:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:E1:EE:52:47:10:E1:5F:F9:42:AF:84:E5:AF:AF:5B:4C:38:0E
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4b:5f:9e:85:8c:db:1e:13:1d:56:1a:00:79:77:0d:14:7c:
84:89:8f:82:56:9e:1f:78:ef:1c:d8:d9:c6:da:3d:71:4c:1c:
a0:30:e0:94:a4:17:d7:84:8c:73:d8:70:60:d0:62:65:67:08:
d1:af:e6:d6:fb:65:bf:2c:ac:41:54:97:e7:28:5f:92:5b:b1:
8f:c9:3c:3a:72:88:24:35:b2:3b:d3:69:d3:73:af:34:69:66:
97:2e:7e:23:ae:cd:ea:ab:f2:e3:91:52:88:c1:44:e9:10:e1:
4f:f8:55:89:b0:a0:f3:36:f0:6f:f6:a0:43:0d:6c:0e:b7:d3:
2a:be:1f:5f:cf:49:52:68:0c:38:79:e8:38:57:54:f9:f6:3e:
cc:02:c3:8f:20:91:fa:ef:c0:d4:0f:ab:f3:58:26:ad:ca:02:
f7:17:65:c9:79:18:5d:c9:58:68:d7:f1:28:37:d7:6f:61:4a:
68:e5:32:a8:ea:d2:fa:22:e4:df:b4:d7:4f:f9:3f:a7:bf:32:
0c:40:1c:09:39:8a:f4:2c:48:ae:88:e7:3e:55:46:1c:07:85:
c9:72:e1:b8:68:50:20:db:a6:cf:20:c7:2a:91:a2:93:b5:9a:
27:9c:92:62:46:26:83:48:2e:58:55:5e:65:2e:27:68:f0:f0:
db:7e:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:32 2025 by rpki-client