Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: Xp5DVN7YOpqvKX19o73HMPOT8bzXYgy2t6+d4Mc4hxs=
Subject key identifier: 0F:60:D5:33:B0:86:B5:8B:65:59:4E:27:18:38:61:50:4B:65:78:59
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019512105297191FE3FEE0A39F758FB580B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 04:00:14 +0000
Manifest this update: Mon 17 Feb 2025 04:00:14 +0000
Manifest next update: Tue 18 Feb 2025 04:00:14 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: Yn8OodUJhUqIGP5nvWbv2Lm9/miLURoDUNGEX81kfxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:52:97:19:1f:e3:fe:e0:a3:9f:75:8f:b5:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Feb 17 04:00:14 2025 GMT
Not After : Feb 18 04:00:14 2025 GMT
Subject: CN=0f60d533b086b58b65594e27183861504b657859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7a:36:de:25:53:48:fe:34:6e:0f:27:62:20:
53:cc:95:80:f3:42:5e:47:0a:3f:46:41:73:5a:32:
42:d1:0e:80:38:dc:50:eb:f4:21:61:ae:f9:0f:05:
dd:81:1d:f2:c8:fd:3c:b7:43:22:44:d3:01:ce:bb:
8b:c0:5d:a4:a7:9b:9b:f3:c2:fc:5f:26:6a:cd:32:
9c:f8:b6:d9:63:b8:29:d1:7a:ab:09:d4:a9:b5:ac:
4a:df:81:4b:98:fd:ef:a0:46:82:6d:be:90:be:25:
fc:ca:49:8e:fe:34:c9:6e:ff:99:ac:cf:6d:a9:2d:
49:8d:5b:03:17:a9:0f:1c:50:2d:f8:42:1c:9f:4d:
df:81:bf:6f:03:46:05:76:ac:8b:8d:e4:f4:03:82:
32:3a:3c:78:5b:38:73:3d:94:ff:38:ca:eb:74:71:
ad:0b:74:b0:b2:cd:f0:6b:25:18:a9:9a:47:cc:11:
b8:f1:b6:3e:d8:52:bb:ca:05:92:dd:81:65:b6:5d:
ed:4a:7f:c9:bb:44:81:f5:74:bc:e0:d8:6c:e2:f5:
77:8c:bb:c4:dc:25:84:68:df:ee:06:01:e5:de:80:
88:d4:5e:7f:67:f5:76:8e:81:9d:a9:b0:a9:b7:8e:
98:57:b2:55:04:5f:02:9f:6b:39:d0:ea:ab:a8:f5:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:D5:33:B0:86:B5:8B:65:59:4E:27:18:38:61:50:4B:65:78:59
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:73:40:3c:f8:ba:eb:26:56:2d:1e:c9:82:46:31:e6:ae:
67:cc:3c:e5:04:db:e1:cb:d4:c1:9b:1f:97:c7:a5:1f:51:d2:
0e:9b:28:00:c1:f2:f6:c0:45:43:05:7c:2d:a2:b3:3d:f2:c9:
93:5a:d4:be:7d:6e:ac:ac:75:2e:c0:06:e9:ad:fb:38:a7:ef:
40:52:8c:bd:40:cc:23:31:de:6a:7a:34:cb:86:07:9d:31:6e:
fe:63:48:f2:43:a0:55:3f:c3:52:3c:fd:af:7a:32:99:fb:33:
4b:26:f6:45:a5:7f:97:ed:79:db:9e:b8:9f:30:5d:10:2e:f3:
4f:f9:4c:61:d0:13:34:9a:70:06:fc:a7:f6:79:13:69:e0:d1:
db:b2:d7:b3:fc:3d:a7:1b:fe:00:de:c1:1b:97:0e:99:ad:4c:
50:3e:50:45:3e:89:05:46:58:8d:aa:db:93:e6:39:d9:f9:dd:
1f:83:f7:6a:6f:06:08:bf:eb:5b:fb:be:7f:05:c1:01:b2:ea:
1f:4b:fe:d3:8f:93:7e:04:29:55:7f:d2:ee:05:72:bb:08:0d:
35:65:68:de:9b:f4:ee:fd:13:88:a2:fa:34:c0:ee:8b:b0:92:
05:05:ea:e2:09:97:3b:e4:4b:13:f0:7e:a9:1d:62:ef:ce:a8:
ba:4c:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:12 2025 by rpki-client