Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier: Zq7GYU3oCSAEryfCkMa4CYpa6YbggC6Jdu3SmJpcRVk=
Subject key identifier: B2:33:32:B0:CD:CE:F9:4B:75:5D:4E:3B:AE:1F:B3:35:79:DE:CE:1D
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 019511D95E2DF6120327B507F835FA93EB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number: 0A09
Signing time: Mon 17 Feb 2025 03:00:12 +0000
Manifest this update: Mon 17 Feb 2025 03:00:12 +0000
Manifest next update: Tue 18 Feb 2025 03:00:12 +0000
Files and hashes: 1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=)
2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: kLszVMW2QeGnaj9Y03KGVuSW7M47L8WAIiFh5Z2DNoI=)
3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=)
4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5e:2d:f6:12:03:27:b5:07:f8:35:fa:93:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Feb 17 03:00:12 2025 GMT
Not After : Feb 18 03:00:12 2025 GMT
Subject: CN=b23332b0cdcef94b755d4e3bae1fb33579dece1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:b0:4f:b6:e3:57:4a:09:a0:f3:d0:34:df:
b3:50:75:d9:da:ac:9e:54:11:60:a8:46:e8:bc:8c:
e5:1f:3f:fb:28:63:70:28:2b:1c:05:52:9d:c4:ad:
f6:4f:d0:a7:a8:f4:df:c1:28:45:2b:53:7d:1c:0d:
03:a3:b2:45:03:43:3e:9f:99:a6:00:7f:d0:56:29:
a1:50:18:09:17:48:fc:7d:f3:07:cb:9b:18:3b:f4:
08:75:79:77:65:92:5c:c6:35:af:2e:b2:0d:22:1d:
5a:e7:b4:1d:8c:37:88:1b:71:3f:3e:08:ba:d3:c2:
7d:52:af:72:79:b0:31:32:4c:e5:f7:9b:9c:6d:b6:
dd:b7:b7:4c:6b:7c:9b:9a:85:d9:20:64:cf:9e:a9:
b4:f6:81:62:10:60:b7:8e:c2:7e:4f:89:11:f5:8c:
66:73:91:e1:f2:ac:90:fc:92:0d:16:6e:39:4d:4e:
36:db:21:70:96:33:79:cb:cb:a7:ab:31:3b:70:fc:
cf:16:f6:a6:b4:85:bd:e2:0d:69:0c:fc:c8:d3:d9:
13:37:b5:1c:c9:61:05:9b:0d:0d:76:ca:dc:2a:ab:
a8:6c:f9:96:65:fd:e0:b4:9d:d6:aa:ba:af:ec:1c:
33:e6:ea:95:c4:18:52:36:fa:41:16:6f:10:f3:e9:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:32:B0:CD:CE:F9:4B:75:5D:4E:3B:AE:1F:B3:35:79:DE:CE:1D
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:f9:b2:3c:a4:ed:4b:bb:3d:75:fc:fc:e2:cf:1a:41:d4:
cc:43:90:97:95:43:30:8c:93:16:9c:63:e8:73:e4:04:34:ca:
9e:2b:b6:3a:57:2f:05:56:31:59:3c:49:d9:48:fc:ce:ca:4f:
7b:6c:5b:b6:35:66:40:d9:c5:9e:8d:6c:59:63:4f:b1:cf:38:
e8:c7:99:28:76:f3:73:6e:7d:d9:6e:97:55:e2:82:86:a3:60:
86:8e:3d:fb:7a:8a:6b:63:6b:07:3d:e2:fe:ea:e3:dc:09:1f:
fc:48:85:61:b1:bc:ce:06:5b:8d:15:70:c1:01:f6:a7:87:bd:
4f:df:51:d5:26:77:1f:52:81:30:0f:22:4a:4a:dd:2e:45:8c:
9b:8c:e5:63:60:b9:2a:dd:5f:5e:c7:9d:ec:5a:37:8f:b2:86:
f7:69:5f:3b:08:ce:7c:1f:ed:fb:c5:b7:5f:4e:66:87:79:13:
2c:ea:82:b1:37:95:64:f7:5f:3b:6a:74:b2:21:c9:6f:59:8a:
85:17:ec:d2:fb:a0:e6:33:ea:2f:37:43:1b:f7:39:d0:ea:7a:
a1:8c:c0:ef:ed:f0:96:33:59:da:73:35:39:f4:e8:d9:db:d8:
c1:31:1c:3c:33:d3:f0:3f:45:b9:5f:4c:6b:b1:b6:95:e9:5f:
51:57:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:56 2025 by rpki-client