Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: Gz7eS935n/XsTUrpz5KAkv5JEnlc2i1AM8zSr/bKGW0=
Subject key identifier: DD:57:60:C6:35:91:DB:26:54:84:F7:5E:1D:F4:A2:27:89:9F:0C:2A
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 0194C3BE7084B52EA71B49B09B37A8DC176A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 51
Signing time: Sat 01 Feb 2025 23:00:25 +0000
Manifest this update: Sat 01 Feb 2025 23:00:25 +0000
Manifest next update: Sun 02 Feb 2025 23:00:25 +0000
Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: K67YqEUZYIW4NRvrL823dIDPrIZ+C1BIPPVQ/ys02ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:70:84:b5:2e:a7:1b:49:b0:9b:37:a8:dc:17:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Feb 1 23:00:25 2025 GMT
Not After : Feb 2 23:00:25 2025 GMT
Subject: CN=dd5760c63591db265484f75e1df4a227899f0c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c9:cb:2d:29:34:cb:29:75:d5:54:76:49:97:
83:ad:54:22:e8:78:cf:4f:84:d2:6d:0a:ee:02:6f:
c6:bc:cc:16:fb:a3:9b:3f:96:27:42:88:c5:70:4a:
8d:3f:cd:14:fb:3a:35:28:6d:56:74:36:80:14:e6:
52:5a:95:6f:e5:bd:c4:1d:12:f2:f5:08:62:08:46:
64:31:7c:19:6c:59:cd:ed:dc:4a:e8:98:f0:49:91:
89:6e:37:f8:e1:b5:69:78:ea:8e:7f:5b:b1:7e:fe:
ee:b8:a2:cc:20:0b:0b:92:b3:e4:00:c2:85:76:01:
7e:0d:a2:5a:9a:39:67:33:6d:af:1a:3d:c4:90:44:
c9:a2:e3:31:4d:b2:cd:a2:13:9d:bf:b2:5a:a2:84:
56:ee:a1:74:7d:58:2e:14:59:2c:83:6d:4a:94:80:
cb:74:5d:69:b2:15:5d:ba:ad:b3:93:d9:63:58:6c:
fa:aa:92:ea:94:8d:4a:ed:bc:91:82:98:ff:53:61:
92:55:92:43:46:b6:d2:2e:01:b6:3a:24:e6:2f:7b:
fe:6e:7a:48:7e:6d:c0:ee:21:e1:b4:d1:08:c8:36:
1e:02:e2:22:eb:04:4f:80:af:d0:1d:77:f1:0d:db:
97:c5:20:26:8d:49:d2:aa:3a:ea:a6:e4:b9:96:db:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:60:C6:35:91:DB:26:54:84:F7:5E:1D:F4:A2:27:89:9F:0C:2A
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0c:89:2f:66:08:e9:6a:ab:50:24:11:78:64:ec:50:4a:7d:
67:20:6b:07:a6:5b:f7:72:98:cd:a8:eb:e8:c4:74:6b:67:39:
e4:11:db:1c:76:28:67:00:30:0c:45:82:94:23:6a:98:c7:57:
35:77:73:08:60:2b:96:85:5d:ab:01:27:19:48:23:99:af:53:
ff:8c:5e:e3:23:cb:df:2d:03:f2:ef:bc:c1:aa:bc:e2:38:a6:
1f:d9:ce:a6:fd:f9:fb:0d:cb:4e:5e:b4:d2:b1:3c:6f:cf:87:
0f:49:38:5e:9e:ed:92:74:4a:0d:fc:f8:b4:b2:36:b1:7c:bb:
4c:cd:cf:fe:a7:24:0e:7d:15:e5:c6:65:82:a6:5c:16:8a:3a:
2d:75:50:08:9d:f4:ff:1f:07:39:a8:06:f2:52:05:a6:54:97:
15:6c:37:f6:56:93:07:49:62:a6:71:49:89:97:fe:14:5d:ce:
c6:fa:f5:e0:f6:0e:66:98:5e:60:e1:a5:58:eb:a5:c4:79:cb:
62:6b:a4:40:2f:b5:ce:bd:d7:ab:72:bb:dc:8f:0d:9b:ef:f3:
1c:78:2e:d9:db:cc:a8:40:c1:b5:b2:23:88:7e:5d:9e:9e:0a:
fb:d7:a8:3f:12:cf:23:ef:a8:70:ff:13:be:e5:4a:8e:d7:a7:
3f:a2:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:34 2025 by rpki-client