Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: 604vv/hebM7+kI/d1CuVdET1TTFP8g1/bJVUFndqTkU=
Subject key identifier: FB:B0:6E:CA:CF:46:B9:86:83:39:6F:9B:93:CF:E0:5E:86:B5:33:BE
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 0195116BC7A866A69D6AA941A1C7E65C1EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: QP/hGI04uW/ps2it+NGZ2ceVo+sz5cBvwr6c+lJIf7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c7:a8:66:a6:9d:6a:a9:41:a1:c7:e6:5c:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=fbb06ecacf46b98683396f9b93cfe05e86b533be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:52:38:6d:ab:71:fa:fd:2b:7d:3e:ef:2b:90:
2e:8f:43:f0:7f:b7:45:ca:4e:e7:d6:0f:8b:1a:fe:
c3:c1:53:79:47:74:7c:c6:1c:ab:b9:a8:d0:c7:46:
96:c5:be:63:af:be:a3:cf:a5:b8:48:94:32:8a:1e:
c2:e6:46:ae:75:0a:b2:62:e5:55:3e:a3:c6:be:74:
f8:b9:aa:22:97:b8:d5:68:b4:cd:dc:1d:8b:e5:7b:
76:3d:f3:38:f4:6a:f1:02:a3:a6:0f:be:a0:3e:25:
76:56:04:09:c7:a7:c5:a7:8b:f6:44:92:5a:48:b4:
77:10:af:6b:f0:c2:9e:a0:cb:36:34:4d:da:90:ea:
c5:5a:f7:85:22:e1:41:70:5d:28:8d:70:7d:99:29:
f6:89:78:ed:33:be:6a:0a:cd:ae:87:6c:6d:4f:93:
d2:07:97:4c:0e:b8:3f:35:f4:25:a5:e0:63:a8:37:
0e:d0:62:aa:58:4f:38:78:b9:b8:cd:ad:52:f4:4c:
8a:5e:23:c1:d4:6e:14:de:bf:b4:e9:5f:d3:7a:47:
0d:8c:2b:39:a3:98:0f:6e:b8:ca:1c:16:5d:72:bb:
56:75:68:64:cc:1b:fc:56:c9:c0:7e:fb:04:05:0f:
06:81:79:36:bd:75:51:97:9d:61:2b:f3:c4:9a:a3:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:6E:CA:CF:46:B9:86:83:39:6F:9B:93:CF:E0:5E:86:B5:33:BE
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:8a:be:2c:d9:ad:09:28:b8:2e:da:55:4c:a5:dd:c2:59:
f1:10:10:9b:39:f5:5d:3b:b2:7c:97:37:21:9f:80:be:39:af:
5a:68:89:7d:2f:2e:56:68:f6:96:2f:74:18:43:71:fa:93:7e:
7c:47:7b:9b:5f:d0:2f:5f:86:cf:09:59:0d:0b:d7:0f:02:12:
a4:87:c2:4b:48:40:fa:5a:a2:ea:34:d2:52:32:de:4a:50:e7:
35:f9:da:11:36:f5:b6:84:32:cf:46:4a:dc:f2:af:de:fb:6d:
eb:32:db:96:fc:76:12:5e:2f:18:28:28:9e:43:6c:00:ef:e3:
f5:03:1d:06:6d:53:d9:51:37:48:0f:da:12:19:63:84:21:5a:
47:bc:3a:55:16:0f:df:57:04:67:13:ee:ea:78:7a:8f:e6:50:
6a:d4:91:71:7b:48:7b:51:88:f0:cb:76:6d:86:91:cb:d0:63:
e2:96:60:cc:d1:f5:32:82:0f:73:43:56:70:36:9b:5c:3d:3b:
a8:2c:bf:d5:28:f6:98:23:bb:f1:71:b0:dd:cf:7e:bc:26:fe:
76:1d:d9:b8:bf:f7:ef:f6:3f:3f:80:12:e9:89:86:48:8e:05:
42:d7:9c:9e:4a:d4:0f:d9:aa:35:0e:83:a5:c2:42:19:e2:4a:
6d:68:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:18 2025 by rpki-client