Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: MfYrF6lxsrXkTvPmsdogcXFEHyez1zWkU+aByhCm/VE=
Subject key identifier: 33:34:CB:EC:F3:D8:75:46:5F:4C:94:B0:D8:71:D1:A6:F1:B7:00:E0
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019512105ED50E26E356112EE1E211C9BFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 04:00:17 +0000
Manifest this update: Mon 17 Feb 2025 04:00:17 +0000
Manifest next update: Tue 18 Feb 2025 04:00:17 +0000
Files and hashes: 1: 4sQRqg1wVxHplQEORYtm00xrQVY.roa (hash: J3w9Mg25j1wb94v36vArE3YS5FJrYK6v8WsTSNDodH0=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: SuzOvNAXnR1njxtFUllMEj8J41lTE51QmS3LqkVcAEQ=)
4: v0Pp_40_Je3JS37_jHVbjgvZoEQ.roa (hash: aXXZgq4pgbYYIdcsGFx9uEujPB0OaP/SkcsCiqXmM3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5e:d5:0e:26:e3:56:11:2e:e1:e2:11:c9:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Feb 17 04:00:17 2025 GMT
Not After : Feb 18 04:00:17 2025 GMT
Subject: CN=3334cbecf3d875465f4c94b0d871d1a6f1b700e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:13:9b:44:59:31:99:c0:5c:38:4e:5e:f7:
09:75:49:c0:f4:2a:ea:be:79:4d:8e:c4:d8:bf:cb:
c3:f1:c9:8a:18:31:58:79:f7:8f:76:bc:a3:17:9c:
3d:b6:52:bf:fd:70:46:1f:d5:31:b0:c6:04:8e:6e:
9a:1c:3a:50:4a:3e:a1:0a:72:21:2e:98:37:34:af:
dc:4c:e7:d7:6e:c9:7c:8e:b5:43:12:13:11:c5:55:
2b:2b:8f:87:d9:74:ec:2e:31:c6:51:cb:1e:80:a9:
18:0d:68:4c:8e:15:f5:c2:8a:8d:d4:b6:bf:d0:78:
d3:c1:85:03:66:8b:73:67:af:e9:6b:54:c8:da:4f:
05:e1:ec:1e:ea:58:79:fe:69:7d:3f:38:2e:a5:5a:
7e:e1:57:0a:a8:23:a0:78:2e:85:b4:cd:06:b9:00:
43:02:d7:bd:db:49:b8:25:9b:84:86:d2:3e:94:9f:
4f:11:2b:2b:b3:9e:a2:bf:17:d4:3d:48:b6:3b:59:
fc:c9:5d:f7:e5:94:01:fd:eb:37:a3:36:e6:53:6b:
4c:af:29:4a:2b:83:94:da:d0:38:b1:fd:36:1b:af:
d1:17:9a:b8:de:5f:c6:37:4c:9d:d1:a1:34:56:bf:
d8:b7:a4:99:11:54:35:4d:a4:b6:50:92:1f:13:7f:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:CB:EC:F3:D8:75:46:5F:4C:94:B0:D8:71:D1:A6:F1:B7:00:E0
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:3b:e3:74:58:6c:5f:6f:a8:37:bf:07:86:e7:5a:79:61:
88:96:57:cb:57:f4:b9:2c:c9:de:ff:9e:4d:86:33:aa:eb:9e:
3b:50:5a:bc:21:76:2a:bf:f6:0c:8f:d8:24:9c:54:8d:2b:3b:
6c:ca:58:41:74:7a:99:b7:91:23:7d:01:c0:8b:88:c5:88:e2:
17:18:68:6b:08:bb:8b:bb:00:94:bc:fe:f3:de:4d:5c:21:67:
e0:43:7d:b9:b4:97:a8:f3:16:66:57:de:86:d4:47:b7:ae:96:
95:65:ef:b0:94:34:30:ed:8f:8d:1d:1f:a2:cd:e4:81:ae:30:
5e:b6:d3:07:71:66:ad:ed:3e:2b:43:a7:31:cf:ae:72:2b:f7:
a6:ba:68:76:28:40:2b:69:22:84:4d:37:d2:fc:d2:9c:9b:fa:
f5:d6:c2:2c:64:a7:91:0e:d3:48:82:19:b7:07:6e:ed:72:b9:
a8:6d:03:74:8f:6f:8a:2e:2c:a9:0c:8b:35:e5:07:31:65:51:
73:f9:7f:e9:7b:fe:48:1c:c6:a2:9f:67:79:65:ab:c7:aa:06:
60:48:28:48:51:b9:cf:92:e7:7e:f9:13:06:1e:21:2a:94:c9:
df:0f:84:98:20:a2:a3:44:81:08:14:82:7d:ca:5e:93:2a:cf:
d2:3c:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:43 2025 by rpki-client