Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: i2gHDIBPXbSuoI7nSg4rXTr76PvjCodQWk/RuOoMlWs=
Subject key identifier: B0:C3:C5:9E:F7:E9:1B:F6:CD:66:18:56:28:E3:D6:B1:4F:F8:85:26
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0195124726EC71A432CFEF20080675A076CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0799
Signing time: Mon 17 Feb 2025 05:00:07 +0000
Manifest this update: Mon 17 Feb 2025 05:00:07 +0000
Manifest next update: Tue 18 Feb 2025 05:00:07 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: t65TS8Yc0rerBhqO2S1eXW0gAjiHF/gCHS5+HakLH90=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:26:ec:71:a4:32:cf:ef:20:08:06:75:a0:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Feb 17 05:00:07 2025 GMT
Not After : Feb 18 05:00:07 2025 GMT
Subject: CN=b0c3c59ef7e91bf6cd66185628e3d6b14ff88526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:68:08:cb:08:ab:29:46:87:14:c8:0b:13:
52:5b:f6:30:9d:02:da:99:14:81:45:81:b8:85:c1:
a1:42:48:4f:ff:61:73:45:a2:ea:29:5a:fd:4b:fc:
87:8a:bf:6a:73:0f:b3:fe:b2:c7:74:5c:8c:7a:8f:
5d:f5:90:5e:33:fd:ea:55:c7:26:59:df:83:78:88:
db:92:2b:6a:2b:02:45:d4:f6:11:d1:d2:66:b3:21:
8f:68:ae:86:b4:02:8f:90:72:30:e4:e4:a5:69:de:
69:c3:8b:55:b4:0d:bf:aa:71:b6:69:cc:ff:93:79:
50:41:52:ce:c9:f9:d1:43:2d:57:fd:69:e9:f6:80:
48:63:b5:20:05:f0:20:c5:b9:81:b5:40:34:f0:01:
70:25:40:75:43:7a:13:2f:41:bf:cd:3e:b0:84:d5:
79:8d:28:f5:46:80:30:1d:72:f2:25:f1:01:05:cc:
6a:2e:64:8b:f5:b1:8c:af:aa:78:0d:e2:4c:08:a3:
c8:6e:d4:b5:ec:9b:f3:1c:a5:72:88:e7:e9:ec:eb:
0b:f6:63:7e:34:7a:57:f8:d8:3f:27:20:45:5e:05:
a3:d6:7e:3d:47:3e:e9:77:e1:ec:81:85:95:90:a4:
20:d0:c1:fd:b4:41:68:b3:e6:64:12:df:76:76:e4:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:C5:9E:F7:E9:1B:F6:CD:66:18:56:28:E3:D6:B1:4F:F8:85:26
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:ee:92:c0:0e:30:e7:fe:2e:79:15:a1:ba:8e:36:6b:81:
af:73:37:46:87:b7:2b:1a:2f:bb:b3:43:8d:47:68:1b:b4:ea:
c2:eb:a5:9d:41:c6:8f:77:82:5b:6c:25:1b:0d:38:b9:ed:d3:
87:bb:11:73:46:5d:d0:1b:a6:c5:c1:33:29:55:c2:e7:7b:d0:
a7:b6:07:32:f2:d3:28:d9:a6:d4:56:60:30:20:37:dc:73:ff:
22:fc:e8:5a:d9:10:24:21:f2:5e:c3:5b:38:35:9b:29:39:3a:
35:fc:5e:c7:93:53:6a:97:34:fc:16:aa:03:e7:95:24:4e:c4:
b8:72:78:32:ad:53:f9:f8:b9:fe:49:15:ad:3c:11:4e:17:d1:
6d:47:a4:cb:67:95:a8:e1:0a:df:e6:d7:b7:bb:17:3e:9c:a4:
b6:28:89:35:3e:cb:92:c0:f4:e0:ce:cd:5f:70:fe:b4:0b:b3:
ab:97:e2:27:e5:21:68:19:12:a1:e8:f1:2b:cc:18:ee:e9:2d:
b1:fd:e7:94:ea:1c:f4:29:9f:c8:d2:f6:4b:92:d2:3f:8e:b0:
6b:67:90:91:59:f1:f7:fa:38:cd:b6:36:a8:8a:c2:3a:22:4f:
c7:63:37:f5:c9:e8:1c:79:ff:d7:45:69:44:a2:f4:aa:cc:54:
81:ea:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:32 2025 by rpki-client