Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: 7Y+vdBt1VXqAqba7a/SGu87E5aAduW1/drtEK3J4OIo=
Subject key identifier: 0F:CE:FE:A7:AA:7A:C9:43:3F:8A:B6:1E:90:65:6F:17:E8:BF:52:05
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0194C3F5905281AC0F189E0505A32904B6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0CDD
Signing time: Sun 02 Feb 2025 00:00:37 +0000
Manifest this update: Sun 02 Feb 2025 00:00:37 +0000
Manifest next update: Mon 03 Feb 2025 00:00:37 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: 5mjH4rO6lV64dzlDhbmd4fZtRtXGKOxBEq3dwLj8gnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:90:52:81:ac:0f:18:9e:05:05:a3:29:04:b6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Feb 2 00:00:37 2025 GMT
Not After : Feb 3 00:00:37 2025 GMT
Subject: CN=0fcefea7aa7ac9433f8ab61e90656f17e8bf5205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:dc:04:f8:bb:6a:88:a2:89:06:d4:50:30:
c8:57:19:d1:8e:0c:09:d4:dc:65:2b:9c:59:6a:bc:
ad:bf:5c:af:81:de:2b:94:ba:a8:96:25:ac:6e:83:
cb:36:2b:c4:f7:9b:41:19:b3:2a:07:54:fa:ab:19:
a3:39:f9:a1:02:0d:e0:92:a7:9e:8e:d9:4b:63:88:
2f:96:55:90:98:57:ee:3b:18:d1:b4:24:13:2c:7d:
a4:7a:65:78:cd:33:14:35:c8:3e:8e:5a:e1:fe:9f:
d2:d0:70:6c:41:73:4d:16:f5:37:a0:e8:d2:db:e3:
48:eb:ee:a8:6d:77:e8:b5:ca:13:62:4d:1a:9a:7a:
11:5f:a6:20:a4:d2:b8:65:06:6f:6e:db:a8:a9:3c:
24:33:e2:ac:06:a5:b1:90:ae:4b:72:ca:fe:5a:4e:
bc:2e:1e:3a:a6:c4:e4:7a:b6:76:ec:bf:47:f7:30:
22:dd:da:1d:fe:28:af:16:6f:53:d2:a6:48:b8:96:
ce:52:39:10:b9:a5:ff:e8:91:7b:57:b3:b3:c8:69:
81:11:4a:41:36:05:f7:bf:30:b8:4b:88:12:ea:80:
de:6c:61:4e:dc:51:f2:2d:c6:aa:c3:77:f9:bc:0e:
43:63:a4:cf:66:c5:44:88:1e:77:5a:05:8c:b7:8a:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:FE:A7:AA:7A:C9:43:3F:8A:B6:1E:90:65:6F:17:E8:BF:52:05
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:7b:b8:54:02:a3:f1:b1:88:d8:ee:64:f3:00:0c:fb:07:
cf:06:d3:07:a2:f6:62:8d:51:c0:26:de:f0:c3:60:4d:3a:f7:
70:b1:a7:27:bd:9d:bb:11:24:74:27:d0:6a:c9:6e:87:8f:7e:
49:ef:b5:28:a0:e3:43:6f:f7:65:48:3f:42:23:1a:24:a3:30:
63:5e:10:a5:3f:26:84:4e:ba:7f:5a:01:e8:cb:b4:a5:cb:7c:
7f:d7:e9:5c:f3:4b:6b:58:c5:c9:31:e4:28:d1:b4:b6:73:9a:
a5:73:93:6f:3e:4a:0d:af:ae:83:18:0b:f5:3e:ab:fa:5d:f5:
85:0e:76:6e:f8:86:6f:08:a0:ea:fe:a7:6b:a2:85:fc:5e:64:
97:6e:bc:98:a2:4d:bf:de:a9:64:01:fa:bc:58:6f:ef:3b:ac:
98:39:d5:77:4a:bc:2b:07:14:0f:be:fa:2d:6a:c6:8a:36:47:
75:ef:cd:0e:a2:4f:09:16:41:7c:3d:ca:e2:98:74:11:7c:fb:
ac:57:9c:58:5e:cb:28:27:98:4b:af:5a:d7:62:e3:47:81:87:
d9:27:a4:69:3b:7a:e6:dd:2e:a8:d0:ec:ae:e1:2f:06:c0:26:
82:12:80:11:b7:36:d6:88:64:96:cd:d9:37:93:2d:c6:c9:30:
ab:98:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:34 2025 by rpki-client