Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: VLAcZyoir/uWdgvDns+Y+JBe1o1b5YAJwQv+EP7d/S4=
Subject key identifier: 14:03:C1:C4:37:07:AE:F8:38:21:DC:40:A0:05:91:80:75:60:3F:A3
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019512477D361A629CA7AD22BE19E45E9140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 03C2
Signing time: Mon 17 Feb 2025 05:00:29 +0000
Manifest this update: Mon 17 Feb 2025 05:00:29 +0000
Manifest next update: Tue 18 Feb 2025 05:00:29 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: wLvuddgbmaSiMmeiKYmnOJ+S/g48ajW6J6i9u+nuNhw=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:7d:36:1a:62:9c:a7:ad:22:be:19:e4:5e:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Feb 17 05:00:29 2025 GMT
Not After : Feb 18 05:00:29 2025 GMT
Subject: CN=1403c1c43707aef83821dc40a005918075603fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:c5:95:f0:67:ea:1f:e3:ad:43:b7:69:71:
74:15:ad:d9:ac:43:b0:6b:70:d8:6b:6b:da:4c:2e:
d8:8e:bd:82:5a:f0:13:c9:4f:43:eb:54:69:99:10:
8d:f5:41:b2:fa:eb:4b:4a:03:bb:00:4f:f8:fc:b5:
a7:92:36:28:5c:58:37:d7:ae:6b:a1:a6:4f:19:91:
90:83:80:94:db:23:04:45:c5:28:96:63:eb:83:e9:
6d:c8:2f:a1:d9:86:d0:40:0f:2f:43:05:aa:3a:59:
6d:08:10:a3:48:a7:42:b9:21:6e:0d:d9:19:07:97:
69:5c:1a:10:02:29:89:3c:98:c6:ab:ba:37:0e:f1:
37:bd:f9:a2:71:ab:c7:1b:ad:47:c4:b9:6d:08:eb:
10:97:e7:cd:fe:e1:6a:90:26:36:e0:92:c0:ee:4e:
10:9d:77:2d:c9:1e:05:1f:d8:52:fe:94:7c:a8:1c:
c8:b3:85:f6:bc:46:41:2b:08:21:b4:2d:7c:56:ea:
42:b3:3a:ff:36:a0:92:fe:77:d7:ce:ab:0c:f5:c5:
f7:c1:9d:97:6b:4c:2a:5f:26:fd:15:c1:fe:2f:58:
b7:e3:4a:c1:cf:bd:44:60:41:2f:53:8d:ef:b7:c2:
86:02:f8:9b:3d:5e:5a:2d:e5:b1:6e:be:d5:02:20:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:C1:C4:37:07:AE:F8:38:21:DC:40:A0:05:91:80:75:60:3F:A3
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:eb:a2:05:68:fb:f0:0b:f1:de:a9:e8:88:a1:73:db:61:85:
02:25:f0:b0:15:43:55:7d:ac:fe:8d:59:32:e2:6c:15:5e:33:
c5:1e:15:59:da:2f:93:c0:26:6e:4b:0d:d9:cf:59:b9:5e:36:
a9:d9:7e:0d:bc:4f:9d:b6:df:4e:b6:aa:1d:79:a4:1e:79:84:
6d:27:3a:82:03:18:3d:64:af:82:51:37:b1:3c:1d:f3:e1:e9:
07:3b:ed:04:48:85:0e:f4:2e:e3:fd:45:ae:78:e6:71:0a:d1:
31:68:d6:d6:a9:63:64:4e:e7:d5:54:5f:76:13:96:4d:0b:03:
b0:bc:55:ec:be:a6:fb:eb:b6:24:30:a5:37:2c:73:e7:9e:f1:
9b:a1:dc:ae:b2:86:b8:ef:88:1c:15:50:02:71:dd:33:10:58:
01:44:94:60:a3:08:5a:04:93:ca:c1:83:12:c9:d9:13:bb:f9:
e4:7f:90:79:5b:04:03:96:ca:d8:44:08:ba:ff:76:85:95:ac:
78:bb:3f:8e:c4:fe:7e:92:08:ae:b4:f4:61:c0:be:a9:85:75:
6f:04:54:d8:fe:16:49:38:d8:08:96:9e:3e:9e:0a:10:04:61:
12:5a:b6:cc:27:ba:31:31:c1:2b:67:77:c5:dc:f9:06:df:02:
e2:b2:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:09 2025 by rpki-client