Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: jbNwfgsyfvXgmR/5G+QGkiDpt6fi8woTPWWOIfvZXmg=
Subject key identifier: 58:EB:00:53:B3:C1:F3:D0:A0:B7:B0:AD:88:A1:F4:38:D8:D7:BD:2A
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019510C796CB72DFDCD25149D739EC0D0F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 13A7
Signing time: Sun 16 Feb 2025 22:01:10 +0000
Manifest this update: Sun 16 Feb 2025 22:01:10 +0000
Manifest next update: Mon 17 Feb 2025 22:01:10 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: CmtG+NkHXbIQm0sRDM06EtF9fpQJW+J4cNP43+k1/HY=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:96:cb:72:df:dc:d2:51:49:d7:39:ec:0d:0f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Feb 16 22:01:10 2025 GMT
Not After : Feb 17 22:01:10 2025 GMT
Subject: CN=58eb0053b3c1f3d0a0b7b0ad88a1f438d8d7bd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:bf:05:1a:ff:39:1f:ae:08:74:9b:3a:d1:
7c:9d:0d:9b:bd:95:7c:f2:f9:6c:49:ab:e6:de:73:
b0:1f:07:4d:15:24:c4:f3:a7:c6:13:7e:a0:b0:91:
f8:df:4f:c1:39:24:d3:58:0f:bd:d8:b6:84:e1:23:
5b:b3:2b:c3:ec:4b:36:ab:41:bd:75:44:50:c2:64:
e9:1c:86:78:f8:72:27:64:2a:9a:a6:8c:4f:1a:91:
4e:97:95:8c:9d:93:42:86:06:d4:61:43:f6:11:67:
05:0b:b4:19:6c:87:86:1a:5e:36:b9:eb:df:48:81:
26:48:86:e5:ec:27:9a:14:b1:f2:4a:80:a0:f5:f4:
db:44:7b:79:fd:63:86:cc:64:5f:77:35:c6:32:fa:
5f:48:ee:65:c0:7a:19:eb:03:95:f6:90:fb:f0:70:
d8:ea:35:30:17:67:3d:a8:d1:a5:d6:ec:4e:1e:65:
72:e7:9a:47:9a:10:c6:5d:e7:ed:d0:c2:5b:59:c9:
c6:98:ec:4d:a4:e6:a2:79:bd:85:2a:78:b7:d7:50:
43:58:6a:c7:77:db:42:bc:d7:e3:72:de:6b:91:1d:
7c:b7:39:b7:48:e3:53:c5:06:b9:91:f2:b8:84:0d:
10:93:82:fd:e6:d7:8b:41:c7:31:bc:d6:fc:d9:d8:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:00:53:B3:C1:F3:D0:A0:B7:B0:AD:88:A1:F4:38:D8:D7:BD:2A
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:dc:08:47:7a:9c:bb:0b:b3:69:42:74:8e:69:e5:36:f0:
75:d7:bd:98:0e:f9:5c:8a:d9:dc:5f:21:a3:03:08:6e:98:85:
0d:96:9e:bb:aa:b8:61:f9:17:e7:82:90:2b:e1:f7:ec:f2:16:
f2:82:53:0b:51:4b:78:aa:4f:f9:3f:f1:22:6b:b5:ff:5f:4e:
30:96:ad:6d:fb:33:7f:ff:62:d7:92:d9:45:7a:b9:f1:bf:f9:
fe:cf:18:2c:91:1e:95:31:4c:6c:f0:c6:65:07:27:78:24:47:
ea:1b:8b:3f:26:68:9d:4a:51:4f:5a:54:64:c3:10:6c:cb:79:
f6:3c:b1:6b:98:e2:e5:69:cf:ff:d8:bb:7c:81:c0:a3:d7:33:
ee:c0:d1:44:55:79:62:b4:e8:be:07:ef:5d:be:8b:84:f1:67:
7e:55:90:8b:ea:63:d1:ae:29:c9:24:f1:45:69:b4:16:ee:8c:
bb:f5:e2:32:cb:74:8a:60:a1:d0:8e:78:02:d1:05:5c:b7:55:
96:dd:40:f7:e1:c3:c6:03:71:ee:82:ca:21:9b:57:9e:de:94:
89:c3:d2:7f:cc:61:9c:1c:c3:0b:3b:12:fa:58:7d:25:75:5b:
0c:03:d8:84:8d:39:55:bd:24:53:10:82:4a:2f:1e:cb:c7:54:
c4:bd:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:20 2025 by rpki-client