Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: XBAXDbg0zOwgg9tmGldNbjtmql0exblfIUz0X4T6wSc=
Subject key identifier: E1:58:98:56:B4:23:72:1E:81:02:5D:AD:F7:38:55:B5:B5:BD:AA:2F
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0195127E12F7925DC250B59A69E8AEEF83C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 06:00:06 +0000
Manifest this update: Mon 17 Feb 2025 06:00:06 +0000
Manifest next update: Tue 18 Feb 2025 06:00:06 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 6O5jkKL25OrFnf4KqhplpeBh2RltnaXUrQCwkduySuM=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:12:f7:92:5d:c2:50:b5:9a:69:e8:ae:ef:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Feb 17 06:00:06 2025 GMT
Not After : Feb 18 06:00:06 2025 GMT
Subject: CN=e1589856b423721e81025dadf73855b5b5bdaa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:f1:9a:6b:bf:01:d4:11:a5:48:34:6f:11:
1e:a1:53:0f:ce:e8:d1:0c:74:b9:75:59:73:d2:00:
6d:0a:14:95:6c:88:87:ee:d0:ec:7b:4a:56:7e:5b:
8d:7f:85:56:03:4f:34:ee:a9:24:60:9e:e3:3b:58:
1f:63:ff:85:5d:8e:c0:bc:e1:e9:db:67:cb:8d:02:
17:35:17:14:fb:12:93:18:22:bd:4b:76:3b:1a:20:
27:0a:03:3e:ac:6c:72:8b:d4:0c:cd:11:7d:e7:fc:
e0:e4:ca:b2:95:bc:a2:39:35:81:5c:da:2b:9e:54:
e1:12:d2:5f:35:f4:17:7d:85:a0:d0:c3:fc:ed:42:
f3:12:5b:76:7c:e8:11:e3:cf:f9:42:6d:75:b1:a0:
2e:9e:01:2d:01:9d:85:e4:a9:4b:b4:9d:fa:28:fa:
d8:16:ca:6b:9b:34:bb:c7:b9:74:97:58:94:5c:ec:
dc:5f:fc:85:ca:30:2f:f4:05:bb:45:fb:dc:ee:28:
84:92:9a:a2:da:10:5d:92:d4:42:b1:07:58:8d:cb:
7a:00:0f:f8:78:7c:51:43:65:ce:d2:af:f5:50:a8:
92:84:51:b7:6e:b5:cd:f5:cb:c5:67:9e:14:8a:f8:
12:7c:3d:7f:29:08:56:f7:87:af:d2:4a:74:5d:0e:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:98:56:B4:23:72:1E:81:02:5D:AD:F7:38:55:B5:B5:BD:AA:2F
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:99:93:eb:76:79:2e:e6:a4:97:f7:bc:a2:b0:8d:1b:80:04:
47:41:28:51:68:7d:7b:bd:30:ec:c2:01:ca:ac:bc:2e:c9:12:
2f:fa:6b:61:53:29:20:15:8b:60:be:d5:05:f6:d8:15:9d:34:
2e:76:00:67:3a:7e:0b:54:86:0e:7b:00:db:32:31:38:9e:6f:
c6:02:05:7c:09:c0:2d:18:1e:7f:df:bd:a9:7c:a2:52:25:39:
8d:fc:8f:58:2e:04:5b:b1:6b:94:91:75:d0:f2:54:d0:03:90:
3f:6e:5e:11:10:5d:75:3a:98:8d:c4:24:fa:4c:3f:e8:df:58:
f8:e2:d4:c3:84:3c:67:35:5f:1a:4f:94:49:d0:0a:48:85:e0:
58:6d:c2:2d:40:99:b9:72:7b:cf:5e:74:62:a8:3b:3c:c9:be:
50:08:3e:b8:3a:48:f1:5f:29:f9:83:fe:4c:26:a8:0b:69:61:
9f:3f:9c:8e:c9:d8:91:7f:98:fc:8b:34:ef:de:5a:90:29:1b:
65:3e:e7:ff:c2:77:a1:b6:b9:a9:68:fe:2f:b8:de:a4:15:e1:
31:03:cd:be:a1:2b:01:87:7f:c0:b3:c7:b1:1f:03:94:1e:c4:
e2:6a:da:c4:ec:29:f0:e8:60:a6:c0:6a:17:d0:ea:9f:1a:17:
19:1c:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:36 2025 by rpki-client