Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: 2oDVEIrHwZUsmqjVzJrPrPNMGPaF0GlaScvbKTrrOQI=
Subject key identifier: D0:45:D9:28:B7:5F:CA:43:5C:E1:17:57:FC:56:D1:79:1A:F8:5B:38
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 0194C350FD5A7580BA829A7DBF08E5EA5927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:52 +0000
Manifest this update: Sat 01 Feb 2025 21:00:52 +0000
Manifest next update: Sun 02 Feb 2025 21:00:52 +0000
Files and hashes: 1: JsN1D5OuopYHCLFIEZKZ2Itv5Oc.roa (hash: VDHMrvw/Ab+Op1OiM6hZje7T+CuOROPSPcHkZG8rfgU=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: FT8/xvrejpn9C/p3Ca5gQ51iWimzHgdNiCKLC7XNPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:fd:5a:75:80:ba:82:9a:7d:bf:08:e5:ea:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Feb 1 21:00:52 2025 GMT
Not After : Feb 2 21:00:52 2025 GMT
Subject: CN=d045d928b75fca435ce11757fc56d1791af85b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:43:68:46:a1:dd:3d:a8:22:b2:2d:e8:f4:
56:a2:8e:86:b4:31:38:86:ad:ae:03:72:fd:ea:01:
25:5e:25:73:2c:91:41:9a:9b:72:14:59:be:05:e5:
10:b5:8e:ed:e8:4a:74:2a:5e:c7:4b:a9:7c:57:1d:
4d:e3:a8:31:16:d2:66:59:f7:95:72:ad:6e:a5:b1:
fd:87:d5:24:8e:d7:ec:8b:0b:b7:8b:43:5e:76:06:
bf:bd:58:c8:ed:9e:72:72:d7:bf:47:d5:08:25:5f:
eb:6e:79:9c:49:d9:5d:e2:c7:68:8e:0c:7a:21:5d:
1c:43:88:0a:8a:54:77:0f:5b:ce:c0:4f:11:21:ca:
ef:d7:80:63:25:af:dd:3d:84:69:20:06:b7:10:d5:
81:56:f6:9a:85:76:52:cc:85:e5:cc:66:8e:a9:8d:
ed:ce:23:b0:19:53:7e:79:e7:28:30:d3:5c:14:8a:
d1:a2:02:b9:bd:b9:97:6d:53:b3:73:54:77:88:09:
02:b5:b1:31:29:dc:1b:d1:f2:9d:21:27:e5:98:13:
e5:94:27:94:21:f8:47:e8:85:13:98:e8:4f:4b:40:
61:ad:3e:46:ce:3d:ef:b0:26:53:5c:68:76:55:2a:
78:be:85:9b:3a:29:72:b2:1b:5b:6d:35:55:ba:ba:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:D9:28:B7:5F:CA:43:5C:E1:17:57:FC:56:D1:79:1A:F8:5B:38
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:a5:16:56:fa:44:d0:37:ee:0d:e3:f8:d7:a9:dc:f6:e9:
58:1f:b8:58:4a:0d:44:25:fc:3a:68:dd:7a:48:26:95:de:62:
64:e7:b7:85:6f:7d:04:87:a8:6d:a2:15:11:6d:50:37:82:d4:
da:57:2f:1c:e5:ee:81:8e:d5:69:f3:89:a7:0c:d1:7b:67:06:
de:7f:f0:8b:9e:33:3d:20:3d:63:69:fb:71:c2:56:4e:22:e0:
4b:06:ad:3a:5e:be:b9:6d:d5:85:1d:1f:ef:5a:3a:18:22:bf:
1a:66:b8:52:2f:ca:3d:2e:14:c3:68:a2:76:01:ea:07:43:d8:
4e:4b:91:42:37:9a:a2:02:8d:d1:55:3d:17:f1:f8:ed:dd:54:
08:01:2f:48:c4:f7:0b:19:eb:0c:f1:94:bb:26:61:8a:05:cf:
94:d9:f6:e9:86:8a:ca:6c:a4:cc:73:1d:5b:1c:b3:2c:80:c9:
4c:a9:ba:17:c1:8a:b7:09:6e:6e:e8:cd:33:47:1f:1f:7b:a5:
aa:f2:2a:7e:71:22:86:97:6d:9c:e5:a1:41:d3:de:21:64:3d:
2d:2f:52:fb:a2:3e:41:73:e1:90:70:7e:98:6b:76:3f:3e:19:
cc:8c:f5:ab:36:38:57:b9:de:ce:b2:fc:8e:1f:24:76:be:2b:
aa:52:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:52 2025 by rpki-client