Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: wwp59ioGpxAiFYRdPlYUz047ywHgDjYgc0XPNgU4kcI=
Subject key identifier: 6B:F8:42:4A:98:88:78:BF:37:D9:6C:5D:78:B5:B1:06:D0:79:27:E4
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 019512478A81EB06FC759A8C406C9D9FCED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 09CB
Signing time: Mon 17 Feb 2025 05:00:33 +0000
Manifest this update: Mon 17 Feb 2025 05:00:33 +0000
Manifest next update: Tue 18 Feb 2025 05:00:33 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: EPpTz5CMMBuQ+VlGfSDt4JSjbQ7JtH/qA0U2z0rOnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8a:81:eb:06:fc:75:9a:8c:40:6c:9d:9f:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Feb 17 05:00:33 2025 GMT
Not After : Feb 18 05:00:33 2025 GMT
Subject: CN=6bf8424a988878bf37d96c5d78b5b106d07927e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:2f:b3:ba:10:36:5e:d9:53:bf:5c:97:77:
9d:9d:06:d1:ba:95:1e:21:dd:93:7d:09:e3:22:9a:
55:a6:31:0d:49:b3:dc:54:8a:1f:b9:82:3a:4e:fb:
59:d7:28:e1:d0:b5:40:4f:01:cb:be:1b:6b:30:25:
f9:d1:1b:46:7e:5a:3b:66:0b:8c:b3:3d:ec:e7:57:
51:3c:45:c7:4c:c8:d6:b4:9a:02:71:e5:d7:ab:e0:
d8:68:4a:d5:2c:1a:9e:08:c9:a7:6b:96:c2:f2:18:
0b:a9:99:2b:74:8c:28:53:35:9b:da:30:2b:3f:7b:
5a:2f:11:55:a2:6b:7c:5f:41:67:fe:9d:4c:d4:5d:
9e:6c:0d:bc:a5:d3:3a:d4:63:5e:58:06:99:b2:e7:
85:fb:cd:f9:66:0c:7c:e8:ba:c8:f7:2e:e1:a9:5b:
82:1c:54:b3:97:f3:92:de:e1:99:91:a0:e8:ae:1f:
61:d9:d0:25:d8:cf:a6:db:89:bc:19:1e:29:e0:d1:
e5:8a:79:79:58:cc:1c:e7:86:59:c8:e1:63:fb:17:
50:8e:57:fc:89:a3:a7:41:02:15:ae:b2:31:57:af:
06:65:05:ff:e3:fa:44:14:85:45:41:e3:84:0a:f1:
e9:c7:b5:4a:b1:08:95:42:36:3c:51:16:ca:74:3f:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:42:4A:98:88:78:BF:37:D9:6C:5D:78:B5:B1:06:D0:79:27:E4
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:e8:0a:a7:17:6c:ec:38:5f:2e:28:f5:11:a7:39:07:0f:
85:ab:b4:58:22:d7:6d:80:72:79:ac:5d:0f:64:3a:8c:a4:2f:
f6:aa:9f:93:20:a5:ab:9f:c0:3f:23:d0:9e:c5:25:b9:9a:8e:
74:9c:6c:18:13:44:7f:05:b8:92:b9:4a:3f:f4:f0:4c:7e:54:
2c:c1:ef:d6:a5:92:32:a4:5d:60:0e:49:75:05:fb:0d:36:94:
e2:d0:f6:80:d3:b0:81:12:ff:16:cd:9d:77:0f:3b:d1:a1:4f:
59:3a:5a:29:b9:c2:4c:26:92:3d:5a:79:a9:7e:5b:fa:0e:0c:
db:07:14:76:9a:82:63:ed:93:e6:fa:bc:cb:f0:68:1e:2a:f3:
91:97:48:82:c1:69:9f:cc:61:b2:46:32:35:b1:29:e8:4e:58:
91:9a:4c:ed:8f:9b:ab:11:fd:fb:d4:f0:96:d3:1f:d7:e1:5a:
24:80:5f:70:5c:75:5e:bd:d1:07:3b:9c:2d:8e:0d:cb:2d:bc:
97:61:2d:cc:4f:90:c9:77:a7:72:f6:da:34:f2:88:2d:14:ef:
e4:c4:57:cc:c4:43:84:49:85:6c:a5:5e:2e:2f:5c:6e:92:2e:
a6:74:b5:dc:1d:90:87:70:ac:c0:92:5b:a9:d8:83:7f:18:fa:
97:d3:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:13 2025 by rpki-client