Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: 81E05Qtk+AiwoKnuMHKWiry/JRATXbtTgTkcqyIHqt8=
Subject key identifier: 69:F6:DC:6B:9B:11:44:04:6B:55:37:EF:BA:D9:34:9B:B0:BC:80:E7
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 01951134DBA195B712571C823F37E658FCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0B77
Signing time: Mon 17 Feb 2025 00:00:31 +0000
Manifest this update: Mon 17 Feb 2025 00:00:31 +0000
Manifest next update: Tue 18 Feb 2025 00:00:31 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: X8wl2ETvBHkwpijwMr8JbqoawVWTzZcEgxOMQv7n36Y=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:db:a1:95:b7:12:57:1c:82:3f:37:e6:58:fc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Feb 17 00:00:31 2025 GMT
Not After : Feb 18 00:00:31 2025 GMT
Subject: CN=69f6dc6b9b1144046b5537efbad9349bb0bc80e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:73:cf:28:f6:53:27:8d:f6:56:d8:11:b6:
f7:96:eb:1b:37:2d:32:b0:5a:6b:c6:cc:db:b6:fb:
e5:03:cc:0b:27:60:2a:af:8d:72:d3:52:2c:83:d3:
2d:f5:3e:a9:74:62:60:3c:2a:54:34:13:7b:28:19:
52:82:ca:65:36:63:67:a6:fa:30:5a:bc:81:74:6f:
9e:62:4d:27:fd:4d:86:89:4f:8b:1e:27:88:8d:c3:
c4:b2:46:d3:3f:be:7f:5c:b1:28:9d:56:fc:f9:d1:
7a:1a:9e:0e:27:7c:d4:7d:cc:44:c1:86:71:67:3e:
d0:d0:ae:bf:31:7e:40:b0:4c:dd:ee:e5:91:fe:0b:
34:40:c9:13:9e:57:f6:fe:67:f5:da:73:ad:db:41:
47:92:78:ae:0c:ec:57:c9:3a:89:60:9e:93:6d:f4:
11:7f:d3:6c:eb:72:3c:05:99:a3:6f:3b:ba:6a:fe:
24:c8:79:d5:7d:7a:b7:d7:30:f7:31:93:81:22:39:
9c:85:93:81:ea:64:8e:b8:17:fd:a7:47:cc:ae:4c:
ea:47:df:34:a9:86:57:2b:d8:da:d2:14:cc:81:4b:
6d:3a:d0:83:3e:cc:ba:7c:0f:ad:75:35:69:aa:fe:
4e:4e:f6:4f:ef:7d:2e:1f:5f:45:96:ce:7c:75:17:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:DC:6B:9B:11:44:04:6B:55:37:EF:BA:D9:34:9B:B0:BC:80:E7
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:70:d4:67:a7:22:44:a9:50:ba:e1:07:5b:af:44:9c:87:12:
53:fe:fa:fa:d0:67:9f:08:b6:2f:b6:89:22:49:40:fc:3d:b1:
58:cd:7b:41:94:9c:2e:bd:de:2f:ae:ea:24:99:a2:d3:bc:83:
fc:59:77:de:3f:02:09:e1:88:5a:de:8c:78:c3:c6:14:ae:5e:
16:04:52:51:f4:05:0f:44:4a:d5:1d:6c:c3:e1:2f:66:c2:b4:
c0:d9:09:6e:22:31:e2:ac:bb:e3:44:dd:ce:36:3e:45:14:66:
2f:8f:7b:36:c8:a0:d6:97:d8:a8:03:fc:2a:c8:06:3b:c7:23:
e6:09:5a:e7:c4:7a:8b:3d:16:2b:ed:4c:70:87:e7:ab:b1:e5:
da:ee:d9:e0:ea:e9:be:1f:d1:ac:1d:64:f9:25:a8:be:8d:32:
f0:6e:99:ae:f3:0a:06:9a:c0:00:4e:b2:cc:10:98:1b:d5:92:
c7:ed:95:56:65:ed:34:ca:66:bd:3b:fb:13:8b:19:f5:4f:fc:
f9:6a:95:44:20:29:92:30:d6:4c:dc:05:61:bc:da:67:3d:19:
e5:2a:0a:55:81:3b:ff:de:dd:66:5e:1c:ea:01:13:41:5c:58:
f3:47:3a:1e:6f:56:25:0e:34:d0:9d:0d:a3:ea:aa:6c:02:fe:
31:70:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:21 2025 by rpki-client