Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: +I9SMgfBCK7o+DAFkor+3tygFdRmllYCOYnPLIjDvmI=
Subject key identifier: 82:72:C9:01:11:0A:28:A6:53:98:E8:FB:59:E1:76:5D:88:96:B5:63
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019511D9BB54B81736923BED76CB51448672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 06BB
Signing time: Mon 17 Feb 2025 03:00:36 +0000
Manifest this update: Mon 17 Feb 2025 03:00:36 +0000
Manifest next update: Tue 18 Feb 2025 03:00:36 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: D1HcJ2UTd5sb1TEv0DGFScVRTT/ieEPjUUgqzqOyg48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:bb:54:b8:17:36:92:3b:ed:76:cb:51:44:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Feb 17 03:00:36 2025 GMT
Not After : Feb 18 03:00:36 2025 GMT
Subject: CN=8272c901110a28a65398e8fb59e1765d8896b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:14:74:ad:6a:a6:9b:a7:11:ce:61:f3:5c:
e4:dd:72:a1:32:9f:b0:86:8e:cd:7d:98:1b:9c:d9:
6e:66:02:af:57:02:01:cc:cf:4e:dc:06:f1:19:a8:
0d:f5:d3:5d:a1:13:77:d9:70:f4:25:70:53:b9:c5:
20:1a:9e:75:83:c4:56:65:5e:ed:83:90:24:e1:85:
a6:78:db:ce:c6:a1:bb:3d:86:26:11:e2:7a:23:1d:
36:3f:12:03:8b:71:86:49:2e:6a:ff:6a:22:c0:84:
42:80:88:ab:d0:92:2c:85:3e:94:b9:18:79:56:62:
36:cf:64:2c:dc:4e:2f:d5:c9:81:5d:6c:4c:76:5f:
3c:4b:cc:49:42:76:52:f1:35:82:99:fc:c5:c7:98:
20:2b:35:fd:5d:f1:4e:11:06:0d:7c:5b:f5:6b:c3:
96:db:49:9e:f3:3e:79:d8:15:50:da:1d:87:cb:c3:
6b:c0:19:e6:50:b2:62:e2:0e:d2:d3:d4:a8:8d:44:
91:90:5e:e3:c5:d7:3f:80:a7:e9:07:6e:32:2a:e0:
9e:23:0a:4a:b3:50:e8:af:2a:db:ad:5d:a5:fa:7c:
d0:f9:4a:1a:4f:39:8c:1f:0a:30:fa:38:66:97:73:
ab:2d:a2:fd:c0:ae:3f:af:6e:54:54:58:d1:b9:ab:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:C9:01:11:0A:28:A6:53:98:E8:FB:59:E1:76:5D:88:96:B5:63
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:ab:7c:4f:d2:54:33:99:fc:a4:83:cc:8c:5f:c0:11:57:
da:23:09:31:94:b0:2a:bf:b9:5b:42:be:ef:73:5d:c8:05:c3:
7f:79:20:af:09:f4:c5:22:79:0a:0a:fc:cc:92:ea:f7:05:3b:
f1:87:56:a0:a1:5d:16:51:ac:ab:61:63:95:5b:f1:71:1b:af:
b3:c2:2e:a2:0f:ef:21:53:87:0d:b9:6d:f2:38:d6:3b:ce:55:
83:04:f8:3c:43:61:4e:4f:97:e4:1d:1a:b1:56:6e:08:08:06:
49:56:2c:02:c9:07:d8:8d:16:e1:95:e1:c5:25:1a:bd:54:69:
67:3a:2d:89:d4:c0:ef:7f:52:8d:57:a4:9d:96:97:b9:6d:24:
a9:1b:19:fe:06:7b:2e:ee:f3:a8:bd:b1:e3:08:8d:dc:03:b5:
c1:da:c5:3d:90:eb:d0:62:1b:d1:e0:05:53:58:fc:d9:f1:64:
d8:77:68:b2:06:dd:93:d3:c9:63:e4:54:36:71:95:5c:4f:dc:
e1:71:ce:1d:18:ec:1b:09:c0:72:21:2b:19:7c:f2:39:db:68:
b9:ea:0b:1e:2e:b4:3f:ae:28:a8:c3:0f:da:5b:76:22:41:b5:
ab:39:84:b3:49:b5:b4:9c:08:be:c5:f0:63:27:32:a4:e6:0e:
b7:93:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:11 2025 by rpki-client