Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: F1BUxzDVNNs0FbgI70h4zB4bl8aoqo5durj1oak3uhg=
Subject key identifier: 96:FB:D1:F8:56:F0:BB:07:C7:71:AB:E0:89:E1:64:C5:60:35:A4:8C
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 0194C38807359B0CB3A855BF494453812C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0C22
Signing time: Sat 01 Feb 2025 22:00:59 +0000
Manifest this update: Sat 01 Feb 2025 22:00:59 +0000
Manifest next update: Sun 02 Feb 2025 22:00:59 +0000
Files and hashes: 1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: GPA6NKmLAD+PRaK7c1g8l0pOfPFMUwDmRzxSZuZrd08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:07:35:9b:0c:b3:a8:55:bf:49:44:53:81:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Feb 1 22:00:59 2025 GMT
Not After : Feb 2 22:00:59 2025 GMT
Subject: CN=96fbd1f856f0bb07c771abe089e164c56035a48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:c6:4d:b4:c6:f6:d1:2a:cc:8e:f9:d8:fc:
4e:fa:6d:f1:01:9d:0e:ae:ad:3d:8d:b1:bd:58:8a:
0d:63:f3:44:56:cb:9d:6a:7b:a3:3e:55:4c:83:ad:
7a:36:31:6f:ad:fc:c0:67:4f:76:2c:0d:88:09:12:
11:c1:01:33:cd:b3:47:76:92:97:40:8c:02:3c:42:
fc:93:59:9a:bd:3e:ed:73:eb:da:a5:ff:47:24:ed:
41:58:f6:09:c4:47:6e:7c:a1:cb:75:76:ec:46:70:
ba:29:0d:25:fe:38:e9:a6:00:0b:76:4b:f7:c2:52:
6b:f5:bb:57:3c:13:55:21:9c:be:36:b0:60:36:82:
42:b6:c9:da:bb:ff:2d:43:12:66:2c:b5:91:a1:f7:
8f:d0:21:9d:d5:81:2a:82:92:eb:e9:f6:49:1b:8b:
42:df:60:90:ba:29:fb:82:29:a2:4e:a0:44:bf:7d:
f2:7a:45:fc:85:14:2b:e8:f5:fd:38:0c:b4:2f:1e:
09:cd:bf:d2:35:5c:59:80:62:b4:e0:a3:06:5a:be:
3c:70:df:cb:43:e3:f4:a4:3e:39:9f:ca:d6:0a:e7:
f7:73:b4:e1:4f:5c:2f:94:9c:b7:7e:56:c2:74:bb:
e9:90:ab:dd:a7:9e:3b:83:22:b5:61:f7:9f:2c:cf:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:D1:F8:56:F0:BB:07:C7:71:AB:E0:89:E1:64:C5:60:35:A4:8C
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:31:2f:0d:02:7d:31:68:77:06:7c:56:a8:1a:d7:cf:f4:
b6:bb:5f:67:b9:dc:fa:40:40:3c:87:4c:6e:d8:a4:b2:fb:8e:
64:72:8d:b9:53:c6:19:76:6f:f4:37:76:3e:04:76:fe:f2:ef:
b3:c8:03:ad:3e:02:47:f2:ca:f0:f2:37:0a:9d:65:fc:40:39:
f9:e7:49:5f:59:c9:6e:93:f4:ad:0c:04:7a:98:ea:99:3d:88:
16:16:4f:b7:40:88:4e:75:86:f5:8f:7e:a5:c1:99:bd:83:fa:
17:25:55:da:ee:d0:4a:cd:c6:ca:76:49:3d:bc:aa:61:1a:2a:
5c:3d:95:e3:d1:49:ed:51:b7:53:41:dc:50:46:63:6f:8c:4f:
79:53:b9:4f:dc:15:fe:43:81:a8:69:5b:c2:69:58:0e:00:c1:
fa:c4:89:d0:89:4e:03:83:ce:d5:c8:a4:f0:a0:02:32:f6:7f:
26:7e:6a:ef:9d:51:ce:fb:38:8a:1d:23:5a:d3:1e:d5:0a:1a:
65:d0:f9:cc:7e:11:63:a5:eb:85:da:61:47:3b:3d:18:f1:a9:
f1:9b:ef:81:cb:80:ba:e0:54:ca:89:12:cb:48:55:4a:6d:84:
06:b9:1d:de:c8:51:9a:8b:9f:48:ef:03:53:07:b8:2d:47:f5:
3a:23:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:01 2025 by rpki-client