Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: 3BeTw7e6hB0yaBiR4QZT/F+4drqgOaA7dfYkRJCQAvo=
Subject key identifier: 40:10:F2:86:49:D8:75:8B:B2:7D:42:86:BC:15:23:DA:CD:F7:10:C5
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 0195116BA662033280026D63C0D26D2655F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 042B
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: 6HLDAggmSebPZlkt8MUa3H97UVaFt3z94rEvxHNtkoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a6:62:03:32:80:02:6d:63:c0:d2:6d:26:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=4010f28649d8758bb27d4286bc1523dacdf710c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:8a:c9:c7:33:1d:5a:ee:3b:0d:5d:3b:3e:
22:2d:3a:bf:ba:47:15:9d:fc:db:0d:de:40:72:c6:
32:41:18:73:ba:e3:01:4c:aa:3d:c1:58:19:2d:69:
82:e5:b7:96:61:1e:0c:e0:eb:6f:48:27:2f:b5:7f:
5b:8e:2e:ed:d8:a8:21:da:68:32:f9:4e:7c:28:35:
a5:75:1c:b3:60:74:a5:b7:7e:b7:56:eb:b5:4f:f1:
f3:46:66:3b:68:da:83:57:6f:82:5a:e2:3e:49:29:
38:bc:41:19:ab:00:d0:7b:94:b7:9e:7d:34:83:a0:
e6:c0:a5:e5:97:2d:f1:e6:6e:3c:b8:cc:5a:d1:43:
2d:2a:4a:1f:6c:20:9e:76:0e:47:b1:d2:da:f6:a4:
a4:eb:d8:0a:ee:95:0d:a1:26:4e:e4:14:1d:5a:aa:
80:28:f6:b9:69:6f:47:b8:25:9c:08:57:2e:6c:f0:
30:0c:a8:0a:d9:10:58:1f:3a:4d:d9:a3:02:5b:57:
57:4b:7a:58:7e:d1:a2:f1:b1:dd:59:59:fc:fb:f3:
04:1f:9b:bf:92:54:4b:9e:aa:09:72:70:37:48:bd:
b4:88:88:e9:ff:c7:b7:65:74:f4:13:7d:31:f1:ca:
2a:b1:56:cd:b8:e9:30:e3:27:1a:00:32:ee:ef:36:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:F2:86:49:D8:75:8B:B2:7D:42:86:BC:15:23:DA:CD:F7:10:C5
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3b:60:03:77:1f:b8:e9:c9:bf:78:9a:2e:e7:30:78:5b:8b:
5d:23:b8:f7:56:45:9c:34:d5:ac:63:06:f7:8f:b1:1c:83:c4:
c7:53:bf:5c:e1:4b:10:ae:fb:7a:e0:67:76:33:cd:5b:ed:fc:
fb:1c:cd:16:6f:ca:f2:1a:b8:a6:07:0a:6b:f2:71:2d:06:18:
b1:51:ea:a2:3e:13:3d:fe:ed:7b:8c:a9:a3:ce:ac:8e:75:fa:
11:39:74:0f:85:3f:3e:54:bf:42:52:8b:1c:cc:5e:21:43:d9:
73:18:50:35:a6:6d:d9:1a:e2:9e:bd:86:e7:67:0e:40:6a:a2:
da:3e:a5:af:cc:c8:99:76:00:33:c6:f7:ad:f0:db:0f:e0:5f:
8a:4a:b9:22:41:ff:7d:47:55:e8:ff:1a:26:13:11:85:c5:61:
22:af:d5:78:05:e3:5f:ab:f9:54:4a:59:54:07:10:d0:a0:74:
70:a9:f7:51:68:11:24:6e:1b:b1:95:5a:04:6f:a6:f2:af:e3:
5b:b0:0c:89:5c:0d:4f:5b:5b:1a:08:b0:af:2a:69:72:3f:38:
ce:86:9d:af:21:a8:30:50:4b:b4:21:62:e0:ee:98:59:cf:02:
2d:2d:85:dd:b4:88:87:c0:8c:47:a7:02:d5:a4:62:7b:3e:5f:
4b:be:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:19 2025 by rpki-client