Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: VNI+yrqxFSxrganWAxRHotQ9JpTanBkzBf1DmS9SvZQ=
Subject key identifier: B3:4F:49:C3:BA:50:FD:5A:58:8B:18:52:C3:A7:30:25:DB:78:E3:3C
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019511354A838F1F1DED25A09B0428FF95DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 149D
Signing time: Mon 17 Feb 2025 00:00:59 +0000
Manifest this update: Mon 17 Feb 2025 00:00:59 +0000
Manifest next update: Tue 18 Feb 2025 00:00:59 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: YrSG8iS4KKWAsBmNwODHiTRKqSg.roa (hash: 1IWZloQMhvNIDdmdcUEOzGMSXHvRkyP4lSKlPzCP3W8=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: xUpOrqLk8WLUy98FLPwN89cpTy7QCoBMLXnl2z/isl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4a:83:8f:1f:1d:ed:25:a0:9b:04:28:ff:95:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Feb 17 00:00:59 2025 GMT
Not After : Feb 18 00:00:59 2025 GMT
Subject: CN=b34f49c3ba50fd5a588b1852c3a73025db78e33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:b0:c8:e6:1d:40:28:62:09:ad:3d:7c:0a:
f8:40:9a:38:91:99:17:d8:c6:ee:bd:82:ff:91:9f:
72:21:b3:14:05:62:46:ef:f4:9d:a3:ad:95:37:97:
e1:58:09:9d:9b:23:e6:e2:c8:81:2b:20:d8:82:45:
30:1d:99:76:0d:cc:95:85:b5:29:bd:4d:ec:1b:a4:
0a:d5:21:a6:1a:1f:b4:96:4e:9e:d8:c0:23:6b:74:
92:f3:a2:e5:13:d6:28:36:15:b5:4f:8f:4b:9e:b3:
80:35:7f:28:cf:e1:df:4f:b6:d3:61:09:b8:7b:a1:
d2:00:f2:94:61:f1:3a:b2:02:f0:fd:28:9d:6a:fb:
35:ee:27:9c:5d:00:61:97:14:0f:53:88:31:73:7f:
10:10:f0:3d:52:5f:99:26:2a:bd:7e:5b:9d:22:4b:
bc:7a:f3:83:97:b8:7b:a2:9f:6e:f1:0c:2b:a8:c7:
e6:ec:01:40:ec:9e:21:a5:d8:ac:6c:30:ec:b6:67:
b4:9f:f0:9b:ee:d7:2c:b3:bb:cf:9e:e8:ad:b2:a8:
6a:6e:b0:87:2f:d0:d4:1a:39:be:72:b9:04:23:41:
00:26:61:3c:0f:c5:1d:1b:af:2b:dc:c2:69:35:2e:
cb:88:48:aa:bf:65:1c:99:4e:51:c8:b1:ba:16:8f:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:49:C3:BA:50:FD:5A:58:8B:18:52:C3:A7:30:25:DB:78:E3:3C
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2d:be:26:bd:59:92:28:1d:93:14:51:15:5d:a4:7d:2b:69:
90:94:12:a9:31:ee:10:83:01:89:67:a0:12:0f:f1:12:1d:e1:
a7:ab:8b:af:e2:19:35:e6:1f:66:f1:23:81:d4:d2:22:3a:1d:
72:ec:f9:1b:f9:d0:4e:af:9e:ff:8e:cf:94:8b:d5:5a:37:7c:
fe:4f:c7:89:de:bf:73:5d:4c:52:89:f0:ac:c4:cb:c7:c7:b5:
b6:08:05:d7:85:f5:51:c3:b1:bf:55:fc:2e:f4:8c:93:c8:4d:
cf:8c:d7:d0:ef:44:1d:b9:64:45:a4:35:02:16:ef:af:1d:12:
4f:7f:08:91:d7:e7:41:00:da:1f:f5:fe:c6:36:01:ac:91:ed:
a0:a5:42:58:ef:91:aa:90:4c:33:5e:d0:58:af:bf:cf:d6:ae:
d2:86:27:68:d0:4c:b4:52:a0:0c:0e:31:01:a7:93:7f:f4:a2:
23:97:51:e2:2e:37:c0:ec:e0:55:fb:8a:e9:72:46:da:37:23:
35:8d:83:db:24:36:f1:fc:b9:b6:f3:25:d4:d4:28:cf:e1:01:
ed:4d:14:22:c1:7b:0e:68:15:73:20:45:a9:7a:63:81:b3:99:
1a:d2:f9:d6:56:3b:4b:3a:04:66:aa:ad:3d:dd:98:8e:b7:9a:
91:3b:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:22 2025 by rpki-client