Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: nAuKjbg8BIxxwg2/KUQlhW0ZzUTukqnz6mKAO1brcRI=
Subject key identifier: 20:F1:A3:19:A8:74:A9:E6:E9:94:24:D2:D8:AC:14:D0:00:17:0E:9F
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 019512473765A3390313AD68149F7ADB64BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 146A
Signing time: Mon 17 Feb 2025 05:00:11 +0000
Manifest this update: Mon 17 Feb 2025 05:00:11 +0000
Manifest next update: Tue 18 Feb 2025 05:00:11 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: vWQKmKxIjKSY1spjW1docOlPyGrBjrHrAoPrNPe8d18=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:37:65:a3:39:03:13:ad:68:14:9f:7a:db:64:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Feb 17 05:00:11 2025 GMT
Not After : Feb 18 05:00:11 2025 GMT
Subject: CN=20f1a319a874a9e6e99424d2d8ac14d000170e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:8b:d4:58:b9:5c:84:a5:75:bd:f2:66:a8:
8f:a4:79:f1:65:d5:66:48:4e:93:f6:ba:16:3f:7d:
d4:ed:f2:34:ee:65:45:02:86:77:db:38:d2:03:6b:
ac:63:5e:ac:56:72:c9:a9:da:8d:ce:ef:24:7b:46:
8b:14:b1:1c:f9:6f:5a:f5:6f:c3:f3:39:0f:c2:0d:
ee:58:c5:64:66:e9:4e:3b:a8:f9:6c:8a:ce:f0:6c:
9c:86:9a:23:c4:92:f5:e8:d6:27:ec:8d:93:6d:09:
bf:ad:5d:b8:da:c0:af:81:09:45:8d:5f:72:f2:af:
f9:9d:33:5c:a4:48:77:dd:9b:46:1c:0a:d7:32:68:
93:49:41:6b:2d:4a:1a:3a:1d:7b:84:91:bd:56:d9:
73:ac:9b:04:44:2b:02:58:8d:4e:88:f4:d9:9f:b7:
fb:31:23:d1:06:d7:29:84:39:f2:dd:aa:6f:dd:76:
54:d4:80:c9:92:68:e5:4d:de:10:15:55:a8:77:a6:
ba:6b:b0:49:1e:99:a9:0e:77:1a:04:17:c4:dd:72:
1a:a2:97:6b:2b:60:ce:98:87:93:05:4b:85:86:96:
2d:90:71:17:ad:1c:5d:5e:f6:41:fe:19:9a:b8:85:
3d:28:9a:81:58:ca:0b:40:05:82:11:56:14:10:f3:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:A3:19:A8:74:A9:E6:E9:94:24:D2:D8:AC:14:D0:00:17:0E:9F
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:39:60:6f:55:a5:ae:7c:df:89:f2:03:8a:52:15:31:c1:3b:
8c:38:62:dd:cd:bb:01:31:31:e5:b8:4b:a1:91:d2:c3:f4:f4:
f6:b4:fe:5b:54:e2:0b:94:2d:e1:eb:21:83:f5:22:ac:2a:3d:
1f:d3:ca:19:4f:fb:81:b2:a4:49:4a:3c:fa:93:3b:1d:e2:23:
de:f9:14:53:8d:34:9b:9e:b5:a9:bb:ab:f7:e2:f5:9b:b3:d1:
19:b9:61:63:e5:24:dd:7a:3f:72:d1:15:96:92:8a:4e:6c:f9:
9d:a9:b6:2a:fc:a7:94:2f:c6:0f:d8:0c:bc:19:d0:77:46:4d:
87:77:ed:ab:da:53:cf:d0:b8:26:03:ca:32:a0:6a:04:ac:d3:
fa:ea:0d:1b:13:cf:21:e9:81:16:e8:16:e2:02:98:6a:2b:55:
ec:47:c2:d7:86:2b:12:ec:eb:6a:b2:55:8d:f3:bf:df:ea:c6:
8b:7d:80:8c:6a:19:b2:7f:84:93:b4:7b:c1:f9:12:54:e9:69:
36:19:71:c2:56:1d:32:ed:8e:01:5a:75:42:0c:7c:a2:93:e8:
06:b5:ed:fd:24:6d:b2:9c:25:d7:99:57:10:23:a3:fe:ed:77:
4d:32:55:a2:b0:ea:66:94:f7:3c:1d:66:0f:52:7e:b5:41:ac:
7d:95:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:58 2025 by rpki-client