Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: F1r0wbzWccfrrDiHGUzqHViT1RaJX71iJDcSpWrlsmA=
Subject key identifier: 92:51:F4:76:5F:BE:31:39:53:80:54:77:DA:46:5C:17:27:07:90:5B
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019512104EA15727337CBAAE4108B62FD7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0D53
Signing time: Mon 17 Feb 2025 04:00:13 +0000
Manifest this update: Mon 17 Feb 2025 04:00:13 +0000
Manifest next update: Tue 18 Feb 2025 04:00:13 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: pL7EFJdRckCVn3zV9t2J7FDkjQlYUa2uE8LkN/1CYfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:4e:a1:57:27:33:7c:ba:ae:41:08:b6:2f:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Feb 17 04:00:13 2025 GMT
Not After : Feb 18 04:00:13 2025 GMT
Subject: CN=9251f4765fbe313953805477da465c172707905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:0a:56:b9:af:51:a8:17:21:05:2a:ee:40:
44:ca:1d:dc:07:a7:d4:60:ad:51:cb:5e:d1:eb:70:
de:86:0e:bd:72:d0:a0:8a:ff:6b:a2:cb:06:d1:d1:
f9:e1:81:19:ea:a2:6d:91:f9:c5:01:89:27:27:3e:
46:28:1b:ea:88:b8:04:dc:3a:1b:70:cf:78:07:22:
30:cb:44:a1:05:d3:14:17:84:63:6f:13:30:f4:33:
9b:46:76:e9:4c:52:77:e2:bc:8e:59:b8:14:c2:62:
d8:0a:40:e5:79:a9:f7:d1:0f:a5:39:a5:4f:b9:cd:
0a:20:e1:cd:f5:c0:92:a4:66:e0:46:1c:0a:7e:cb:
93:0c:7e:1f:4f:21:3b:4b:d7:58:fd:68:06:fc:8c:
69:7c:2a:80:49:5d:3e:51:ab:6e:c1:76:3e:a7:2c:
13:d4:63:5d:cd:f7:8b:66:f4:a7:9e:81:11:68:17:
26:fd:d6:5b:69:88:44:67:39:12:7c:4c:e9:4f:26:
49:ff:a4:9b:e2:41:01:d1:35:51:a0:a7:ec:f9:78:
3e:cb:76:b4:22:e9:95:b8:82:7d:8e:77:7a:6d:08:
a0:2f:2d:d3:21:b6:48:88:77:f0:dd:42:80:6a:af:
c6:bc:75:6c:6f:b8:d8:f5:26:65:c1:1a:49:50:70:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:F4:76:5F:BE:31:39:53:80:54:77:DA:46:5C:17:27:07:90:5B
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:d8:5b:12:ad:87:2b:f0:04:fd:5d:f4:17:48:59:2c:6a:
f8:dd:0f:b1:0e:75:db:f1:25:b4:de:96:04:01:c7:6b:55:f2:
77:e6:4b:4d:f0:ee:31:d0:96:f9:e0:03:c1:90:45:e3:96:88:
31:a2:e5:e3:00:f1:da:d5:31:f4:b8:9e:4f:fd:35:6b:33:f1:
45:27:f9:0e:e1:b9:db:27:51:07:dd:32:3d:88:49:e2:b4:58:
53:9b:56:6d:17:32:5c:2c:8e:7c:7e:bf:01:62:32:8b:27:e9:
b9:ae:fb:13:8a:95:7f:a0:af:8c:6f:11:58:54:3d:6d:79:f4:
75:6c:cc:7e:12:ce:c5:da:57:d8:42:10:98:32:47:2f:89:1f:
b8:f2:54:12:d8:b2:80:9a:58:d9:6e:23:ef:7a:23:17:ac:42:
4e:35:3d:c7:0e:25:a6:92:7a:fe:13:6c:72:b2:e8:a9:af:3d:
d3:7e:49:80:ac:12:3d:ca:ec:64:0a:73:b3:be:ab:ba:58:5e:
e3:f1:45:e3:17:9e:71:7f:01:4e:4d:f5:d0:33:fe:dc:07:aa:
e9:f2:14:cb:43:08:e1:ba:8c:95:72:bc:94:22:27:f5:3f:a1:
25:70:71:ec:2c:69:49:75:b0:2c:13:32:91:60:9f:d5:f0:93:
ab:1a:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:16 2025 by rpki-client