Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: s0Q2PVc2GjdSQlpgmt/NUV1ClgkJoRRnh7ZVQip3YWw=
Subject key identifier: 43:B3:47:44:17:98:4A:58:19:85:D4:80:06:78:38:06:F3:40:4B:FB
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 01951134AAD902270E7E499BB2D6C0C083A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 142A
Signing time: Mon 17 Feb 2025 00:00:18 +0000
Manifest this update: Mon 17 Feb 2025 00:00:18 +0000
Manifest next update: Tue 18 Feb 2025 00:00:18 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: HGR5GXGzx8V/P/azynsMuYbU3xpodt/AMTLkZHrXaY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:aa:d9:02:27:0e:7e:49:9b:b2:d6:c0:c0:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Feb 17 00:00:18 2025 GMT
Not After : Feb 18 00:00:18 2025 GMT
Subject: CN=43b3474417984a581985d48006783806f3404bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:86:ef:de:8a:e2:08:f9:db:a8:fa:da:10:
47:a8:61:9e:68:b8:38:70:93:72:79:71:2e:9b:9f:
21:b0:df:f4:a2:45:06:0a:71:c4:31:de:9b:2f:04:
70:2a:87:c2:b7:dd:d4:26:ba:86:b8:77:d2:7b:bd:
08:d7:25:9f:54:88:68:fa:a6:49:99:21:02:1b:db:
4d:5d:0b:cb:46:2a:42:cf:e3:60:eb:82:73:86:38:
54:89:6b:90:eb:19:41:f5:b8:75:6f:f1:88:7f:74:
c8:ed:35:75:42:22:88:48:77:41:9e:b8:b8:3e:22:
e9:c5:cc:cc:1b:b5:33:27:13:02:3d:ad:a8:ac:16:
7b:e6:82:f1:3b:25:66:f6:0b:5e:eb:ae:d6:29:18:
de:a7:86:ef:3f:8a:9f:a5:c0:f2:fd:87:16:ac:aa:
c2:48:3a:b3:86:ba:0e:22:21:96:e5:53:e1:14:28:
0b:6f:3d:b9:b9:55:0f:39:11:37:d7:1a:cb:c5:e2:
b9:fe:40:b7:28:74:58:ca:59:08:c6:1f:3b:33:6d:
77:74:b7:39:0d:e2:ca:23:a8:ac:9b:dc:b5:7a:ee:
a7:9a:1b:21:57:1b:77:a3:00:e6:d4:8f:b1:5f:39:
a7:1c:ee:ee:66:21:47:ca:b9:7b:d3:58:58:6d:2c:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:47:44:17:98:4A:58:19:85:D4:80:06:78:38:06:F3:40:4B:FB
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8e:7b:7e:6c:6b:5d:a2:46:d2:e6:ff:dd:44:b8:7a:89:26:
bd:bd:fe:fb:17:08:23:79:e8:a6:50:35:d2:cf:0a:92:6b:6b:
11:59:b1:0f:33:a3:27:32:4d:f8:44:05:8e:12:e9:37:49:25:
21:d0:cc:7c:8d:8a:cf:df:bc:c3:3c:7e:b1:34:cb:08:ed:b7:
36:24:a8:28:65:6a:65:f8:0c:d1:ae:16:a9:4d:ca:ad:77:ff:
64:25:a2:3b:9e:6c:a7:86:b0:98:80:b4:19:95:c8:1b:2c:78:
55:b2:a8:cb:c4:95:1f:54:58:fe:96:a4:9c:4d:cf:c1:00:0a:
fd:6c:48:84:d6:64:0d:f8:1a:b3:a5:f2:36:fa:90:a9:2a:9d:
76:df:c7:35:1a:67:4b:c5:65:9a:a1:1b:6d:9f:e2:1f:7b:01:
d7:7d:83:40:e9:35:19:30:b9:9e:b3:5e:de:b9:d9:6b:49:03:
62:98:91:f5:e5:f8:ea:21:3c:ea:60:88:2c:0e:fd:b4:3e:22:
58:81:5a:99:d4:86:34:18:6a:5d:61:a7:f6:6b:bb:0b:19:43:
86:b5:3a:74:42:6c:4f:55:71:d0:86:ae:26:2f:1a:76:e0:b2:
67:ca:4e:cd:42:ae:01:3c:a1:27:ca:df:7f:b5:97:11:ac:6b:
fc:f0:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:31 2025 by rpki-client