Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier: bYs7QqxhfDmmaTkDc5WWbGHjf2MQ4/m3yN4oiZBg9uA=
Subject key identifier: 65:A2:A3:DE:EB:AF:57:B6:C5:E4:11:BE:A2:98:68:17:AD:B6:28:C1
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 019510C7556115BE506FA3E2709BE8F58830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: kuuF9INQg7ceqDzib30R+UjrkoqVaieEHdDs17g7q4k=)
2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:55:61:15:be:50:6f:a3:e2:70:9b:e8:f5:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=65a2a3deebaf57b6c5e411bea2986817adb628c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:5a:fc:91:ae:27:5d:6f:9f:51:27:e4:79:
cb:12:35:0b:23:0f:f3:a9:99:68:85:6b:fb:12:dc:
f0:51:ad:61:b4:7c:4b:14:e6:7c:72:4a:b9:ad:ca:
be:26:96:8f:a8:9f:85:b9:57:a9:db:3d:9f:0f:d7:
a2:d3:11:4f:34:7f:8a:a0:1d:f2:68:cc:3f:af:8c:
37:17:0b:13:74:8d:4e:85:43:3e:22:d3:86:fa:7d:
45:76:4a:d8:fc:65:ed:3e:90:47:00:f9:57:fa:dc:
05:c8:50:59:cb:c9:97:63:70:69:ed:94:0c:67:51:
52:ae:24:c8:6a:1f:4c:d6:4b:10:6d:0c:09:94:d6:
8b:b8:90:03:81:24:a6:ca:5d:e0:be:77:ea:10:f4:
6c:ab:b2:28:f0:65:28:20:f5:40:5e:fd:82:b3:1c:
b8:8f:a6:54:7b:04:21:44:56:d3:af:27:22:cd:d7:
b7:8f:47:b5:b3:e3:55:82:77:2e:43:a6:e1:32:64:
dc:d5:57:82:f4:3a:58:ce:f3:40:32:6a:26:0b:dc:
3e:94:7f:1a:13:ed:47:0a:10:10:07:cc:6b:b5:67:
15:2d:18:51:60:63:d2:54:0f:61:fb:a7:af:30:2a:
9b:a4:22:1a:2d:af:55:9a:57:08:35:c1:9e:26:d4:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:A3:DE:EB:AF:57:B6:C5:E4:11:BE:A2:98:68:17:AD:B6:28:C1
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:53:56:ba:b5:4a:88:1d:d1:74:61:6c:75:2e:c2:99:3a:
69:83:97:bc:c1:8e:40:06:f6:e8:9e:6a:2e:5f:f6:d9:45:30:
83:c3:93:e3:b7:70:9c:49:25:f2:c5:f3:46:e4:96:4f:38:0d:
49:dd:9a:94:7b:4b:5e:1a:ff:d6:f0:65:66:22:66:c3:3e:72:
ab:e8:70:94:52:f0:44:06:46:1b:7a:46:27:b1:8b:ed:c5:87:
d5:23:25:78:bb:79:b6:13:a7:a8:00:e7:c7:56:29:a4:1e:36:
c5:5e:1c:05:7b:45:1d:31:a4:61:42:f0:b1:ff:e9:d0:4e:07:
d9:d4:91:1b:71:3c:fa:4b:7d:97:35:a4:2b:92:42:72:e9:6c:
93:54:47:92:1f:29:b2:ba:de:0c:5b:85:69:23:34:9d:3b:ca:
28:9d:d0:ea:bd:4d:64:dc:c4:5d:0f:e5:18:5e:15:f0:66:59:
1a:e3:fc:4a:49:67:7f:8e:53:3b:1c:f8:e5:a8:1b:00:cd:20:
90:49:43:29:d7:79:26:88:d8:ea:77:69:ed:87:39:4f:e8:1f:
28:af:cf:ce:a8:aa:ff:74:c5:71:2c:2f:3d:29:4c:c9:cb:22:
5d:c5:8a:42:4f:c4:e1:56:b9:14:75:77:ef:a0:12:0c:a9:ca:
02:c5:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:04 2025 by rpki-client