Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: CDpgKNKYB78Ijp7xhSlH8Z1vF/X4e+8fjwMiBqwC+Zo=
Subject key identifier: A0:88:08:F0:9D:93:B2:12:C0:14:80:8C:57:01:AB:62:BA:CB:8F:5A
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 0194C3F6078CFD53199A946CB63A68F0AD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 0DAB
Signing time: Sun 02 Feb 2025 00:01:08 +0000
Manifest this update: Sun 02 Feb 2025 00:01:08 +0000
Manifest next update: Mon 03 Feb 2025 00:01:08 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: 3JDUFgfbbryrzDTdUAD/DFJshALSlDDWhjsh4V3apNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:07:8c:fd:53:19:9a:94:6c:b6:3a:68:f0:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Feb 2 00:01:08 2025 GMT
Not After : Feb 3 00:01:08 2025 GMT
Subject: CN=a08808f09d93b212c014808c5701ab62bacb8f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:94:10:c4:b0:32:7c:87:27:01:70:1f:27:
67:a4:7a:e6:19:0a:c8:67:fb:8d:6c:44:ab:2d:9a:
21:27:00:85:b6:e5:37:59:1e:1a:00:8f:4a:83:ed:
5d:a6:c1:a4:19:37:47:13:d5:cc:96:39:4a:a0:f5:
a7:35:59:0d:3e:49:f9:90:b6:e1:74:03:54:35:11:
2e:d7:03:36:e2:4d:fc:19:5e:6d:ff:db:60:48:c4:
7d:6b:6f:55:d1:c9:dc:ae:b2:e5:3a:d7:c2:b6:d6:
c9:58:79:f0:fd:a9:53:b6:8f:9d:11:f6:35:e5:42:
bb:f8:02:aa:a8:6f:32:03:2f:14:93:0c:fa:8a:71:
63:b0:97:49:e3:44:ca:56:60:58:a1:66:d9:fb:6d:
0e:5c:53:cc:a3:3d:0d:b8:41:69:a7:53:a4:67:02:
2f:12:dc:70:53:a5:50:be:1a:f5:93:aa:e4:e9:62:
7c:3d:da:3d:3c:15:9d:fb:d6:73:e2:80:19:b5:46:
50:62:11:cd:8c:d1:0f:3e:15:6b:79:f0:72:14:c6:
9f:5b:3d:04:d3:94:a9:b3:a8:c4:d1:33:5d:ba:ac:
97:a8:58:09:24:de:5c:50:8b:b0:b0:e2:8c:9d:d8:
8f:18:75:41:82:7e:2b:0c:63:90:bc:93:83:f8:28:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:08:F0:9D:93:B2:12:C0:14:80:8C:57:01:AB:62:BA:CB:8F:5A
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:03:32:fa:36:6d:83:7c:d4:d5:c6:ea:17:ef:44:b4:f8:
ea:88:01:2c:4c:23:82:d6:d4:75:db:43:3e:11:d0:16:d2:ec:
98:1f:f1:86:01:0a:3a:54:64:8c:4a:e6:71:f4:eb:89:84:33:
07:bd:57:fe:a8:30:b4:6c:94:48:cb:86:d2:d2:f4:43:c7:97:
1b:23:07:65:e8:f2:e3:98:48:a4:95:1a:77:4c:da:d7:c2:cd:
5f:93:f6:fb:29:26:31:0c:60:c2:c9:64:0c:80:9b:ff:60:18:
4b:42:5a:13:b4:af:02:47:ca:2d:5d:8d:72:9a:af:38:55:b6:
ed:ff:6d:f0:5e:75:1f:60:98:22:bb:50:e3:b5:ac:cf:3a:9c:
88:a9:a4:05:80:89:e3:11:8b:62:51:71:b1:1b:5b:94:49:77:
4e:c8:a2:64:6b:98:d9:51:3b:db:05:7b:17:46:42:fc:62:7a:
e1:64:65:72:78:f0:15:c8:95:e8:ec:ab:a1:71:39:ff:f7:a3:
ba:32:fe:4c:2a:11:d3:30:0e:b1:72:64:a3:a3:c8:98:80:d5:
aa:50:e8:e5:6b:ae:7b:d0:2b:0e:b0:bf:9e:f0:45:16:20:a9:
21:6c:91:e7:a6:e8:7f:5e:4e:ee:cb:5d:27:e5:b5:1c:24:9f:
d0:8d:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:58:33 2025 by rpki-client