Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
File: zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft (raw, json)
Hash identifier: 0NLziWigRyQ8u3nV7S1OccUpzE8KpxTyjoDOx/6+iGY=
Subject key identifier: 23:66:FF:2B:69:51:8C:5F:81:38:3A:16:4C:D5:63:DA:0F:DD:98:D1
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0194C508189C3BCA4249D1EE97468AABB476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
Manifest number: 13C9
Signing time: Sun 02 Feb 2025 05:00:29 +0000
Manifest this update: Sun 02 Feb 2025 05:00:29 +0000
Manifest next update: Mon 03 Feb 2025 05:00:29 +0000
Files and hashes: 1: dYwzXp9MhtrcE1L6mJ20q8I2r7I.roa (hash: mFlDBc+2wg3m5SQFBk+VZ11DZ70Xq1Uo0+a6LPmKmG8=)
2: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (hash: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=)
3: zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl (hash: wlI/RkV7sqpkrxQFcqziOKqHIlikXzvo+zmVzLYftIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:18:9c:3b:ca:42:49:d1:ee:97:46:8a:ab:b4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Feb 2 05:00:29 2025 GMT
Not After : Feb 3 05:00:29 2025 GMT
Subject: CN=2366ff2b69518c5f81383a164cd563da0fdd98d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:e3:27:ba:e3:91:08:7e:9c:4e:8c:54:ca:
1b:84:ec:50:72:48:fc:c8:9f:3c:68:74:79:af:3b:
60:26:6d:3a:85:49:b0:06:72:24:c6:03:b6:30:bc:
68:08:ab:60:54:7c:a1:35:0d:48:a5:bc:e2:e7:d3:
82:50:e6:6a:9b:c5:f2:b0:be:51:e3:2c:b2:83:91:
5d:94:0c:57:42:06:aa:6b:6f:bb:40:0d:98:6d:54:
99:5b:68:47:19:7c:a0:99:a2:2e:1f:9e:78:0a:78:
3e:b8:14:3b:24:bf:26:1c:c1:cd:d9:7d:85:22:b0:
64:aa:08:39:7f:20:da:57:a0:d4:59:c8:9f:11:3b:
2a:9a:7b:bb:8d:ca:07:6e:1e:00:27:6d:0d:ca:da:
a8:4e:64:77:81:48:43:6d:a7:72:04:ac:68:1f:7e:
b1:15:06:d4:39:c9:44:19:e3:12:9c:2a:08:b7:9b:
a4:7b:d7:ce:f4:a2:15:f3:65:15:15:7a:89:3c:01:
fa:87:34:fc:b8:ba:d8:4d:28:f3:ef:67:ad:24:ee:
d4:a9:a3:52:1b:bd:99:76:57:3c:a7:0e:a6:e4:99:
37:8f:bc:25:ee:cc:6d:8a:f6:9a:ac:2e:78:bd:dd:
77:3e:57:29:e9:93:fd:d7:7e:d0:f3:d9:09:97:aa:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:FF:2B:69:51:8C:5F:81:38:3A:16:4C:D5:63:DA:0F:DD:98:D1
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4a:d1:08:bb:fd:49:77:a8:80:4a:52:3a:57:b1:40:3b:40:
53:93:c1:7c:1e:3e:78:62:3f:8f:6e:74:6e:99:e8:5c:a3:57:
e7:64:21:8d:2e:94:3f:df:b6:ed:b0:a9:0f:a2:7f:11:1f:1b:
8e:34:dd:95:83:75:f0:98:26:be:75:4b:d9:b7:96:d3:b9:ff:
8b:c3:3c:b8:42:2d:df:0f:77:1b:e3:7d:d3:a3:d7:c9:59:bc:
54:cf:2d:91:e1:4c:aa:bc:af:b4:7f:8b:d7:cb:95:d5:4b:9e:
f4:e8:da:58:1f:46:9e:66:aa:2b:67:60:12:48:2c:8d:70:05:
05:dd:5e:6d:fd:e5:2d:04:c6:25:ee:b0:76:e8:a9:fa:e3:f4:
b4:45:fe:56:a6:2a:97:d4:4b:3b:9e:a6:e0:75:b3:46:ed:86:
36:b3:5c:a0:88:d0:d3:12:b7:10:0c:df:27:3b:00:7b:6c:91:
89:7a:d5:8a:f1:48:96:d2:44:aa:50:8c:89:c0:be:42:e4:cf:
a3:c7:d6:c1:ba:c1:83:55:de:07:61:95:69:99:19:73:1a:90:
b5:50:f5:b4:65:24:84:a5:df:c6:b1:71:6e:26:fb:9d:8a:cc:
d2:4e:a6:30:6d:7e:e3:73:16:ac:f5:3c:fa:39:87:eb:d3:17:
5c:cb:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:29 2025 by rpki-client