Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: TOgMXXPvfrpHElh2O4vhBkX1faRmB2GAPOoTLUcSiUc=
Subject key identifier: E3:82:3E:81:57:92:BE:4F:D6:88:B5:B6:23:7A:A5:3A:5A:FD:66:23
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0194C42CBC81816860DE4021362FC4E63F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 7F
Signing time: Sun 02 Feb 2025 01:00:53 +0000
Manifest this update: Sun 02 Feb 2025 01:00:53 +0000
Manifest next update: Mon 03 Feb 2025 01:00:53 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: CRcFBICpo4EmfatdeHYLGDUgRNiWwpuM2Q7sbQqdwqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:bc:81:81:68:60:de:40:21:36:2f:c4:e6:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Feb 2 01:00:53 2025 GMT
Not After : Feb 3 01:00:53 2025 GMT
Subject: CN=e3823e815792be4fd688b5b6237aa53a5afd6623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:ea:1d:97:94:a7:53:a8:e9:c0:7a:8a:72:
25:d6:ae:e3:c3:7b:b9:83:63:2c:71:c1:ba:51:4a:
9f:25:5d:cf:44:90:f9:e7:d6:dd:3b:12:d4:e4:d3:
43:c4:d9:03:b5:e5:55:8e:e3:d2:53:7f:23:24:1c:
4f:64:41:40:eb:f0:55:2f:f7:e5:47:24:ee:fb:c9:
ee:af:37:b9:2c:86:d3:4c:7a:6a:ea:59:3e:42:e7:
c1:6e:13:8c:5a:6f:64:1f:46:17:5b:5a:76:db:9a:
59:61:35:c8:cd:f0:2d:12:f3:eb:89:77:30:1d:8e:
3c:e8:67:70:23:e2:9f:fb:ee:6b:ee:b0:81:2e:e4:
89:9e:00:72:57:ad:68:ac:2f:0c:8d:78:3f:21:18:
f2:99:fc:f0:4a:f5:2b:7c:29:82:1a:d1:16:32:8b:
be:30:db:48:a6:7f:0e:16:c7:4d:a3:b3:70:22:fb:
4d:ab:23:c9:c2:09:76:ca:fb:73:d4:b9:0a:db:40:
a0:74:7d:38:52:60:0d:5f:9e:42:bf:eb:83:a6:cd:
14:fb:c5:5f:8b:9c:c9:95:53:f5:50:cb:9f:d0:74:
00:86:9b:b0:39:99:8d:57:c6:1f:d4:5e:7e:25:89:
c0:e4:51:40:26:65:e5:97:e5:9f:c6:08:67:a6:84:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:3E:81:57:92:BE:4F:D6:88:B5:B6:23:7A:A5:3A:5A:FD:66:23
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7c:b0:38:61:28:aa:11:b3:58:b6:06:03:51:5d:e7:f7:b5:
1d:f7:cc:8b:87:74:5f:0f:e5:9f:ad:5e:42:c7:0d:d7:27:10:
db:f1:fb:b5:88:fb:2a:12:33:a2:51:43:31:82:06:0f:c3:10:
78:88:ba:59:98:fd:1b:86:45:69:16:e4:ce:45:20:6d:85:8a:
61:1d:a6:02:30:ba:c3:9e:e2:7a:fd:51:f7:02:24:0f:3f:21:
99:02:48:c3:90:aa:73:7d:77:b7:63:0a:1b:2a:15:95:c7:2c:
d9:02:0f:84:05:25:44:bb:1a:f1:27:70:d0:f0:4d:06:27:53:
f4:1f:e1:99:26:01:59:8f:64:d0:d2:74:80:e3:e2:fb:3a:7d:
9d:55:ce:5e:36:fb:ef:48:f0:0c:ad:fb:66:f0:3c:d3:3b:f9:
1c:58:b9:e5:60:a2:86:66:a3:b3:2b:cc:eb:41:8e:21:a0:b4:
96:2e:7e:73:ab:38:d5:68:8c:da:cc:ec:d6:cd:e2:80:63:9e:
ff:ed:3b:50:8a:f4:96:d8:69:42:03:ce:b9:1e:95:64:58:4a:
d4:3a:93:d7:30:23:31:c6:96:63:8f:a6:ef:a5:5e:4b:e0:aa:
aa:c1:87:7b:a2:da:fe:3f:61:d9:ea:95:3a:c1:96:b1:30:ec:
09:e7:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:38 2025 by rpki-client