Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: KycQM76qZClWOq9qS7nXJYJMffOQdUXoxMpsZL55HJE=
Subject key identifier: DA:68:F7:59:6E:8F:A6:10:15:3A:FF:45:61:82:86:AD:0E:BB:E4:88
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 0194C49A595D581E20D5EA653902B869CE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 03:00:37 +0000
Manifest this update: Sun 02 Feb 2025 03:00:37 +0000
Manifest next update: Mon 03 Feb 2025 03:00:37 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: UeZI/Jb1RCxEWUjzNP39UGyjzxxqeWNSeTHfAhcD3iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:59:5d:58:1e:20:d5:ea:65:39:02:b8:69:ce:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Feb 2 03:00:37 2025 GMT
Not After : Feb 3 03:00:37 2025 GMT
Subject: CN=da68f7596e8fa610153aff45618286ad0ebbe488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:84:35:08:c6:06:12:81:2e:eb:81:45:77:
be:70:36:f3:a1:87:52:86:81:9d:30:d6:ee:f7:94:
42:2f:ac:b6:4a:16:54:d0:7e:d4:38:c6:d6:65:f9:
30:25:de:42:99:37:6d:9c:47:70:6a:06:05:6f:ac:
ba:3d:68:cf:15:2c:a1:4c:a0:f9:66:05:2c:05:a7:
2d:c6:92:6d:d2:b9:09:86:b5:18:50:e8:1c:8a:58:
69:ef:78:15:86:86:92:11:57:18:e3:66:ad:9a:eb:
4a:c9:87:18:77:1e:22:d7:64:ba:a1:56:88:28:94:
72:a4:a9:c0:e0:f8:d7:d4:02:28:30:29:d5:d8:b8:
99:07:91:0e:26:e7:8d:5a:f2:a8:21:cb:01:c5:1a:
52:e6:7e:42:be:6e:c3:da:e7:6b:c7:18:21:a8:13:
5f:89:d0:71:75:7b:0e:fe:62:2e:d7:e3:13:a0:62:
ad:54:7d:5b:0b:c9:10:aa:6a:d6:2f:8b:38:fa:b1:
2d:b7:ef:b5:be:66:39:28:c2:78:df:42:91:e6:fb:
f2:2d:2c:63:e0:3c:1a:7c:93:d5:fc:15:a7:13:72:
31:04:26:48:95:b5:93:02:76:8a:ed:c3:00:ec:dd:
9d:39:f9:43:e1:28:bd:e1:d0:9b:c3:da:8f:24:24:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:68:F7:59:6E:8F:A6:10:15:3A:FF:45:61:82:86:AD:0E:BB:E4:88
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:42:63:6c:21:c0:0d:a1:df:60:43:9a:a4:8e:d1:c8:ef:
be:4c:4a:d6:84:7c:9d:8b:07:32:0f:17:05:2c:ad:11:dd:d5:
35:d6:e4:71:40:8e:91:50:65:6a:0b:ef:b6:c0:b0:4a:b4:90:
d1:86:fa:b0:ce:03:2e:07:dd:06:6e:ec:fe:a7:7b:cc:9a:48:
b4:14:fb:36:2c:76:55:fc:41:61:97:35:c9:b4:3b:c5:d3:73:
0e:00:85:2f:e8:ff:7d:64:38:14:d9:3b:21:57:1c:89:72:0f:
88:4b:83:6f:dc:d3:3d:5e:e1:59:bc:ac:28:fe:1e:ab:78:2c:
f3:48:47:08:41:3e:aa:c4:dc:29:2a:00:08:8d:4b:e9:09:9b:
86:db:21:3a:91:13:5b:0e:11:c7:07:6d:eb:b3:4b:af:18:6e:
99:7f:ce:48:69:66:23:25:3d:7d:9f:5a:03:be:9a:2c:ea:cf:
1b:e2:84:01:07:45:bd:ef:53:ce:3d:8e:b5:e8:35:1b:d4:6f:
b8:d4:a1:47:f4:1a:3e:9f:f1:96:c7:b5:d8:aa:89:d1:cd:6b:
e4:9f:bb:70:29:27:75:57:6a:c2:0a:67:39:b6:2d:9e:24:2f:
b9:56:e0:fb:ea:63:27:57:e1:75:bb:db:5c:e0:d5:11:5c:c7:
70:bd:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:11 2025 by rpki-client