Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: rnQNOsSGOF5a+C3D9MkDKe6UBACx4MMWBm0Ank7h8ro=
Subject key identifier: 8B:A4:60:BC:26:9F:60:41:AB:20:AB:CD:D1:87:2A:82:ED:2A:1D:3D
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 0194C38790E69CAB670AE7A758B2E06068C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 22:00:29 +0000
Manifest this update: Sat 01 Feb 2025 22:00:29 +0000
Manifest next update: Sun 02 Feb 2025 22:00:29 +0000
Files and hashes: 1: W2DMRJ_k9e8AoJXRItyS4Y_0GsE.roa (hash: u28JHNr8um784JuRkZF/hrHuBy1UKccyyYxb4cD+A4A=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: yrN6W8CIAeDhPyAlONpoE4F2k3ULzfTcRP1bckW6lFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:90:e6:9c:ab:67:0a:e7:a7:58:b2:e0:60:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Feb 1 22:00:29 2025 GMT
Not After : Feb 2 22:00:29 2025 GMT
Subject: CN=8ba460bc269f6041ab20abcdd1872a82ed2a1d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:f5:77:62:0e:ec:26:d6:bd:c2:8b:7b:dd:
b7:6b:b9:66:c6:57:51:c6:bf:98:6e:19:df:ad:9c:
e5:60:8f:31:36:ce:ee:a1:5a:ca:ba:ef:3b:21:1b:
c5:69:88:dc:04:68:ca:01:3c:0e:d5:c4:2a:90:93:
b3:e7:5f:49:6a:eb:b9:f4:9e:a3:11:33:0a:01:6c:
00:1e:9a:fb:ed:af:65:93:a4:bc:c0:17:37:95:89:
03:ee:b5:65:7c:cf:a1:35:6f:ea:21:2d:3f:24:a3:
e8:75:19:de:56:c5:d6:79:99:8b:cb:c1:26:2f:46:
21:7d:db:e8:5a:bb:8b:94:24:26:ec:b3:b9:ee:e0:
6c:ef:31:63:fd:69:16:86:b8:ba:1f:82:02:e3:3d:
18:9a:53:82:a4:9b:1a:29:d6:09:15:07:bb:23:13:
6d:f0:2d:60:5c:b4:7e:e2:01:fa:3c:c7:3e:36:0f:
4b:55:5f:1a:04:1f:4c:92:45:ef:d5:b6:bf:50:86:
a2:00:a8:7e:08:96:e4:e6:3e:a1:54:48:d1:94:60:
55:0a:da:7d:4f:50:bf:f2:1a:82:f9:4a:a0:d3:59:
60:6b:de:04:b9:c9:9b:84:73:7b:83:fd:da:74:d6:
00:99:b0:f0:3d:b1:cb:d4:d9:35:8a:a3:57:a3:a9:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:60:BC:26:9F:60:41:AB:20:AB:CD:D1:87:2A:82:ED:2A:1D:3D
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:a9:11:c2:dd:6f:91:98:b3:57:73:82:e2:ba:10:9c:2c:
9b:92:ee:4b:32:cb:00:60:4a:99:d0:1c:80:26:40:40:14:42:
3c:e3:28:82:61:e7:7a:35:fb:67:69:e5:4a:b2:57:90:36:23:
b0:95:1b:d7:b7:71:89:a8:31:cc:5f:b6:b1:3d:ef:b8:87:61:
61:8b:78:85:6f:2e:07:9c:ac:87:67:fd:72:32:56:6b:42:ae:
c5:3d:f1:49:f5:11:8e:80:99:c0:d0:93:19:8e:54:08:44:21:
61:4a:58:f0:7f:d9:44:89:c1:fe:af:80:7b:8f:4c:44:dd:01:
77:a2:02:97:e3:81:05:c9:8b:f5:e9:df:07:e5:9b:23:56:de:
cb:c6:9f:03:a6:9d:f9:05:04:33:e2:c8:e0:9a:c7:a9:5d:fc:
87:29:00:73:c3:9f:92:a8:c8:cf:f6:3a:84:9e:ea:f4:a1:26:
30:36:62:e6:05:2d:46:e1:ec:31:fe:5c:a1:91:f0:16:7c:fd:
9e:ee:7f:ae:c9:cf:bf:48:12:8e:c4:bf:f7:a6:43:9f:da:9a:
8f:c7:1e:51:73:b0:c8:c9:6a:ee:46:82:c1:13:16:8c:72:83:
47:4c:ae:37:74:87:ac:bf:02:a4:69:db:47:95:f7:86:17:f2:
ff:fe:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:42 2025 by rpki-client