Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: r04Ar/Kxi5kv+27wcCR4cSUqcJH0RqCjVx182RC0lx8=
Subject key identifier: 7C:87:19:9F:7A:D0:EA:B1:96:FA:09:EE:C0:E9:E3:87:42:6A:EA:8D
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0194C4636FF841B85E693BD5D7EB658355BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 02:00:38 +0000
Manifest this update: Sun 02 Feb 2025 02:00:38 +0000
Manifest next update: Mon 03 Feb 2025 02:00:38 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: VZQWL04ev3EoZxQAxyEORBqq8nqwZqlqQ6FTTA/4UrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6f:f8:41:b8:5e:69:3b:d5:d7:eb:65:83:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Feb 2 02:00:38 2025 GMT
Not After : Feb 3 02:00:38 2025 GMT
Subject: CN=7c87199f7ad0eab196fa09eec0e9e387426aea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:b3:0a:d4:36:7d:df:41:e2:36:93:55:68:
fd:81:2c:0c:50:1d:64:6c:79:22:4f:aa:95:ca:d8:
cc:4f:aa:6e:1a:75:ca:6c:7b:d4:c3:08:fb:bd:6d:
8f:e3:f3:23:f9:00:52:47:c3:95:71:9b:e8:a0:69:
cb:7b:0a:44:93:6c:cf:cf:fa:a7:91:58:f1:4d:e6:
47:b9:c5:5e:39:85:f1:7d:b1:93:8a:f4:e0:08:bc:
09:2d:db:02:98:c1:3b:5b:1b:b6:8a:2e:1c:43:2d:
3b:01:9b:db:ba:68:e1:fa:ef:a7:e5:40:5a:6a:2a:
a7:79:21:80:38:be:e1:05:3d:e7:d4:f6:06:84:87:
65:8c:de:63:9a:bc:4f:0e:69:57:f8:76:ae:99:f0:
9e:3d:50:1b:17:13:ff:b5:af:22:07:e4:c3:1f:d5:
66:b1:49:08:58:08:da:bf:40:52:59:3f:b3:3a:66:
6b:92:f6:99:8c:f8:63:d0:4e:27:3c:b9:5f:fd:02:
90:70:ea:ee:49:70:c4:7c:30:99:4d:5f:25:73:be:
ff:fc:86:d4:9d:af:10:6d:b9:14:4e:7c:c8:6d:16:
b9:a6:6b:55:2d:88:df:7d:5d:62:f7:f6:61:6b:db:
77:90:68:12:31:48:31:fc:0d:43:76:e6:cb:be:4d:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:19:9F:7A:D0:EA:B1:96:FA:09:EE:C0:E9:E3:87:42:6A:EA:8D
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:89:ab:41:9d:49:13:5c:1e:77:ab:35:65:ed:1e:80:6e:
e1:c8:c4:f0:a9:3a:ee:55:63:1c:c4:aa:c3:78:c1:40:b2:8d:
ab:90:6b:10:44:e5:bd:87:21:8c:0d:ef:a6:ab:77:fa:2e:f0:
1b:ef:0d:a8:63:56:22:e1:eb:7e:35:e0:03:54:65:1b:a5:75:
21:50:22:60:b0:ca:9a:2e:fa:29:74:80:b4:85:d8:b0:ef:46:
01:39:65:67:7a:3c:ad:e5:ff:88:b2:67:0b:3e:91:0f:74:f6:
df:b6:4a:fe:93:55:66:eb:2b:b8:bb:71:2b:f2:92:ce:b0:2a:
06:ad:a0:1b:c0:f5:10:f1:86:e8:65:14:81:b8:62:91:70:d7:
f4:f2:70:52:b0:e5:7d:6c:cc:32:ca:ff:91:62:5b:88:c8:c1:
42:6b:91:74:8f:d4:6a:61:7c:3b:00:14:b3:90:2f:81:9d:8f:
4a:70:33:bd:1a:cc:1c:2c:9a:c2:dd:f8:16:14:bb:36:74:4b:
6a:0f:0b:00:21:d5:27:ba:c0:10:f1:c5:34:be:3c:27:39:f9:
67:4a:b9:54:d4:87:f3:47:76:2a:81:bc:37:48:30:ce:6f:af:
8c:89:af:ae:c9:d6:76:00:19:41:e7:a3:76:da:b1:31:1d:f5:
d9:8b:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:21 2025 by rpki-client