Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: Dyiu/1oPrvqe3n2ClTxOEQO5mDRbL/FgVwXqnn5WSZE=
Subject key identifier: DF:8D:2B:08:06:55:F9:11:93:DE:99:1F:69:82:00:9C:E4:3C:83:32
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 01951135140697927C56B1042B9917E31C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:45 +0000
Manifest this update: Mon 17 Feb 2025 00:00:45 +0000
Manifest next update: Tue 18 Feb 2025 00:00:45 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: p51gv9lCp3nixkDQjTqGcqa2CNOdGdrs1ht1mlBT/C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:14:06:97:92:7c:56:b1:04:2b:99:17:e3:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Feb 17 00:00:45 2025 GMT
Not After : Feb 18 00:00:45 2025 GMT
Subject: CN=df8d2b080655f91193de991f6982009ce43c8332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:8e:ae:4f:67:89:fc:0e:ed:11:40:19:2c:
ef:7b:e8:f3:f0:98:b3:71:64:6e:3d:0e:b0:97:9c:
23:fa:1c:79:c5:74:9a:e5:77:b4:83:0a:65:0d:89:
5b:e2:0f:e4:63:a0:2c:10:2d:30:48:a1:0a:2a:3a:
44:d9:21:1a:a7:a1:4a:db:0d:ff:57:aa:cb:7b:48:
36:1f:ba:4e:17:91:2d:5b:ce:ae:33:71:67:58:21:
86:04:81:f3:f7:ca:fd:18:96:1b:a3:c6:ad:29:3a:
65:f5:37:35:4a:fc:90:3f:f1:0a:4e:27:6d:8e:a8:
9a:54:da:dd:38:b1:1d:7a:4d:d2:10:02:26:1a:d5:
74:66:98:da:bc:64:93:0d:57:19:e0:7c:65:db:3b:
b2:e0:50:e3:a0:95:93:20:ca:b7:8f:5a:48:69:e5:
a8:0f:47:30:96:ba:36:46:5e:73:34:60:5d:57:70:
9f:39:56:75:d5:2e:24:7a:1f:fc:8e:6d:1b:eb:55:
93:bf:49:37:26:97:94:9e:44:ae:ed:a5:dc:01:fa:
ac:bc:18:76:e2:90:c9:e2:0e:a8:65:3b:14:4e:d8:
03:41:0e:5b:04:07:60:45:ad:35:bf:aa:fc:8c:54:
3a:b5:dd:f9:8c:fb:c4:7b:27:5b:ab:35:dc:79:a5:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8D:2B:08:06:55:F9:11:93:DE:99:1F:69:82:00:9C:E4:3C:83:32
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f9:18:54:70:40:a9:a3:bf:ca:73:a9:e4:25:11:37:3f:20:
1f:4a:5a:c7:96:4d:aa:4c:55:7e:3f:c7:ca:70:1e:31:d5:3f:
16:c7:77:80:61:ea:8e:26:15:1b:ed:26:39:7c:1b:31:1a:fd:
fa:fd:2a:e0:18:bb:6a:91:00:42:03:0c:03:48:33:87:2a:64:
bb:62:a3:ad:85:bf:dc:fa:9e:f2:4e:72:31:08:74:fd:c6:c1:
11:05:3b:29:0a:68:74:c8:07:65:67:64:9a:f5:37:fd:0d:23:
5a:44:a4:58:94:2e:1e:ca:9c:c1:50:8e:d6:e3:e1:91:4e:b4:
90:84:4c:6b:5f:50:fd:97:df:49:3f:87:04:97:f2:2f:97:ea:
3f:ca:6e:e0:a8:94:4b:5e:42:24:82:0c:4c:04:b6:19:c7:80:
9f:63:85:8e:09:61:16:83:ad:82:67:0e:d5:b8:2b:42:f2:88:
cb:8d:92:b0:c9:5f:14:db:62:7b:30:14:de:80:7c:61:37:d9:
5a:a6:7c:a9:a9:de:33:29:5a:ee:a3:34:94:fd:77:91:e7:f6:
0d:39:74:a0:ac:79:c2:49:d7:58:ac:2b:20:1b:58:46:15:49:
35:0e:93:57:ce:03:5e:95:40:8c:34:c3:e6:8e:d3:b0:bd:00:
66:d3:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:14 2025 by rpki-client