Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: NlubLxkWHxse1lGmJte04ilwgBtlnbr5FUEZusjmZxg=
Subject key identifier: 2E:08:36:C7:F5:E9:C1:90:1F:C9:F3:FC:1B:3D:BA:20:B6:52:78:3E
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0194C3884BB4CBD0103BC145D6C42F1229BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 23
Signing time: Sat 01 Feb 2025 22:01:16 +0000
Manifest this update: Sat 01 Feb 2025 22:01:16 +0000
Manifest next update: Sun 02 Feb 2025 22:01:16 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: n9SF+izDfr0idOCKLY7Joz/0xZexHI1eq3zJ2HBYDbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:4b:b4:cb:d0:10:3b:c1:45:d6:c4:2f:12:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Feb 1 22:01:16 2025 GMT
Not After : Feb 2 22:01:16 2025 GMT
Subject: CN=2e0836c7f5e9c1901fc9f3fc1b3dba20b652783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:9e:fd:f5:6c:27:63:e4:93:bb:72:b5:0c:
bf:48:b1:b2:33:91:84:d1:83:fa:34:d5:c8:e9:00:
ef:b9:e2:81:70:19:9e:3d:1a:73:46:42:6b:b9:b4:
93:6e:82:49:cc:fb:0a:38:16:93:14:55:dd:69:54:
7f:75:55:80:7d:f9:22:9f:21:94:c2:a5:be:ab:19:
41:ec:77:7a:05:a9:55:cc:12:c0:d8:77:2d:af:97:
2a:c6:e8:00:6a:12:3c:ba:cf:ef:4f:1d:a5:f1:b6:
b0:20:25:85:ec:5f:44:a2:05:e1:f5:56:44:19:4a:
9a:ce:e7:86:8c:e9:93:91:d4:18:c5:5a:85:05:f5:
8d:21:65:e2:fe:49:c8:ff:5d:d3:02:38:f3:56:78:
ad:4c:a5:db:99:b1:8c:83:ef:74:e2:34:b2:42:f4:
8a:a8:53:04:1e:d6:18:21:19:d4:62:f8:a2:97:0b:
9c:ab:74:ba:61:05:d8:53:c0:bb:e3:72:31:2f:41:
3a:52:43:2e:e0:b0:e3:64:65:71:3c:15:fb:61:8b:
7c:91:83:76:15:c9:3f:3d:d7:4b:71:79:c7:d0:b5:
1f:9a:83:60:d9:66:42:5f:03:fb:24:38:ce:c9:b0:
4c:f6:19:fb:18:84:01:ba:65:06:2c:ee:bc:5f:fa:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:36:C7:F5:E9:C1:90:1F:C9:F3:FC:1B:3D:BA:20:B6:52:78:3E
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:15:7b:63:cc:78:12:a6:d9:2f:67:85:0a:92:cb:1c:cf:c8:
fd:e8:f4:9a:70:45:ba:a9:f8:e6:03:fe:9a:1f:5e:82:02:13:
68:6c:e8:6f:e6:63:42:14:a1:77:6f:d1:af:09:8f:91:19:21:
b0:0b:37:7f:26:0d:42:b0:d0:7c:bd:03:8a:4d:65:a4:18:2e:
38:ba:7f:8a:f1:05:8a:1f:9a:01:e0:16:48:fe:31:b5:10:04:
ca:d1:47:50:e4:d5:a6:f7:15:3e:ce:32:bd:02:c2:fb:d0:66:
3f:cc:c4:af:59:6b:11:07:dc:2d:31:cd:7f:df:f8:6d:b6:f1:
7b:07:2d:9c:9e:3c:4a:81:c8:78:3c:9d:70:cc:4d:a4:26:4b:
e1:73:4f:23:80:b7:12:32:d1:bb:da:14:91:c4:0a:4b:ea:4f:
de:f1:a0:15:8a:88:8f:4e:ae:a6:72:d5:6d:96:7f:a8:4d:b1:
9b:b6:1e:df:91:85:9a:79:16:e8:53:58:3f:d6:72:74:14:eb:
64:e5:0b:b0:0f:c3:19:5b:5a:a1:63:4e:c9:3d:df:d4:f8:bf:
20:7f:66:60:f4:e8:6e:aa:1e:95:22:d9:f9:79:9f:55:d4:d9:
31:91:8f:a6:e4:94:65:8f:4d:fc:fd:82:6a:23:9b:72:d9:54:
77:b4:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:50 2025 by rpki-client