Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: CCypIzBvy25m8gVKmL3wKGBRDyt1FErUP7xi3lybZEM=
Subject key identifier: F5:0C:18:55:DF:96:47:74:4A:FD:87:90:F3:06:AC:E3:CF:AF:53:59
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019510C75F08641B28FBE768BBC150A582DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 058D
Signing time: Sun 16 Feb 2025 22:00:56 +0000
Manifest this update: Sun 16 Feb 2025 22:00:56 +0000
Manifest next update: Mon 17 Feb 2025 22:00:56 +0000
Files and hashes: 1: E77W28wiF50IkO-MfbqRhLv-CH8.roa (hash: 0/YWvGyP0HxspplkXKv5ivuZGVdUvzbxzTq1+TTsXNs=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: zNMKAtZDK+CTYI2Kf1Ju/I8Orebk16dVMCnPd9FdbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5f:08:64:1b:28:fb:e7:68:bb:c1:50:a5:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Feb 16 22:00:56 2025 GMT
Not After : Feb 17 22:00:56 2025 GMT
Subject: CN=f50c1855df9647744afd8790f306ace3cfaf5359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:25:88:71:57:d3:dc:48:f6:ab:4b:f1:94:
73:6f:1f:a1:04:03:98:8f:95:ed:68:99:b5:4e:6f:
b8:a7:86:c6:f9:21:7a:7b:e2:91:da:52:77:07:12:
ad:13:68:76:81:8a:c0:58:e7:46:bb:63:73:3c:dd:
51:aa:f0:92:ce:84:a4:48:18:b3:79:d9:ce:88:ce:
3e:f9:e4:b7:0a:fb:52:4b:58:a1:27:67:69:fe:66:
41:78:de:19:bb:af:fa:87:11:71:17:44:a7:cf:29:
ce:b8:78:20:e0:59:a7:68:80:c8:0e:7e:7d:5e:37:
fb:af:51:20:98:d6:32:bb:d6:15:0e:ae:22:fd:ef:
2c:64:00:77:eb:c8:6e:e8:30:a2:c5:c3:8f:a3:7b:
97:05:bc:68:19:9c:8e:c4:e4:a9:5e:c5:25:39:70:
01:fb:35:47:f6:8f:9e:1e:7b:c6:f9:df:5c:57:61:
f1:f4:b6:35:1b:94:d4:c8:09:86:c3:7a:d7:e5:6c:
e7:b3:59:d7:c9:f2:4c:19:98:2d:24:4c:29:ed:98:
87:64:9d:a9:c9:67:3c:12:7b:54:9d:11:87:bc:44:
46:e9:e4:db:ef:fc:89:a7:fb:9e:04:a8:06:a5:7d:
00:0c:ed:aa:b4:47:c2:34:ba:7e:e4:17:34:d9:b0:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:18:55:DF:96:47:74:4A:FD:87:90:F3:06:AC:E3:CF:AF:53:59
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:57:9f:56:79:f9:49:3c:50:49:96:2f:5c:35:37:b7:aa:83:
42:4d:51:1c:2c:70:87:0f:3c:6a:ae:76:6f:0a:11:f9:fe:c7:
18:60:8c:44:7a:2a:5f:de:34:af:33:a5:89:4c:95:c7:28:13:
aa:2f:af:2a:56:06:0c:24:85:10:14:3b:e5:94:cb:85:36:b2:
c9:3c:69:98:a1:6d:4a:25:de:7e:b4:b9:18:84:cd:4c:a1:5c:
0f:cb:31:63:4c:e0:7f:2a:fe:55:f8:22:48:22:b2:24:72:8a:
a9:49:6b:77:cc:53:ba:0d:93:98:c5:87:7e:88:21:4e:d4:4d:
3a:65:99:c7:74:d3:81:19:fa:3d:d4:85:74:7c:f6:64:12:a5:
ed:af:1c:9c:92:4d:d7:31:40:0b:56:82:0a:ef:11:8c:4c:07:
5b:6b:5f:83:55:3e:b6:59:a8:40:10:79:de:ca:01:93:89:28:
1b:60:55:83:ef:32:ef:0d:41:16:0c:c2:01:67:36:8c:8e:0c:
69:f8:9f:63:28:89:c1:b2:ac:9f:7b:56:1f:d6:c0:a9:fd:cb:
01:58:9e:3d:44:57:58:77:d3:1e:91:2f:c3:a6:f7:6d:26:17:
c2:6e:2a:7e:45:6e:66:7c:14:8a:4a:c9:5e:43:4f:95:2f:dc:
df:37:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:26 2025 by rpki-client