Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: VrH4QN9Elhr2D/Pm0asQiUPE5iBAeuiHDKac5ZefaiQ=
Subject key identifier: FD:65:48:75:51:54:D0:48:58:1D:D0:80:EF:54:A2:9C:61:92:9F:37
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019510C6E60999DE533686A5BD684B12B562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0B2B
Signing time: Sun 16 Feb 2025 22:00:25 +0000
Manifest this update: Sun 16 Feb 2025 22:00:25 +0000
Manifest next update: Mon 17 Feb 2025 22:00:25 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 8zjxVPflPkRoC0bCTD/xliqouVtC0fgyYeR8ay7GUjM=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e6:09:99:de:53:36:86:a5:bd:68:4b:12:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Feb 16 22:00:25 2025 GMT
Not After : Feb 17 22:00:25 2025 GMT
Subject: CN=fd6548755154d048581dd080ef54a29c61929f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:d7:a3:04:5b:a0:7f:f3:b8:b0:0d:ac:54:
83:f5:54:01:db:05:f2:aa:6c:db:d4:80:d4:d9:d4:
55:59:ad:6b:83:3c:88:fa:fb:ce:9f:3d:20:bd:72:
00:97:24:96:d6:c8:b6:a4:fc:b0:16:43:03:35:d8:
df:ac:77:38:99:96:d2:ae:5c:51:e0:cd:7e:b9:70:
4b:04:02:0b:11:ab:f4:55:fe:66:ef:46:9d:61:59:
cc:c5:cc:af:b4:87:84:35:cb:9b:a9:e7:36:53:e2:
5f:61:08:6a:d1:f9:a1:d9:5a:0b:53:32:dd:12:a8:
af:b6:7e:56:23:89:56:f9:6b:8b:59:ec:f8:80:3b:
ea:19:7b:fa:7e:94:9c:90:dc:d7:7d:d2:0f:67:76:
ab:89:1d:de:51:f7:dd:25:65:7d:12:17:c9:94:63:
b6:cb:f1:04:f6:0b:d7:2b:0d:9d:8b:28:7f:58:70:
69:b1:7a:7a:b7:a4:06:b6:55:6e:24:6d:dd:f3:30:
26:53:df:9f:71:f8:e5:c3:54:ac:32:24:2e:d4:9d:
c8:e1:68:81:a4:c0:ec:38:3d:ed:e6:93:e5:a6:09:
3c:15:a2:23:e8:b1:16:d3:a6:97:7a:31:dc:1b:43:
da:83:1b:1e:c6:83:61:a7:ae:d9:ab:02:66:b4:79:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:48:75:51:54:D0:48:58:1D:D0:80:EF:54:A2:9C:61:92:9F:37
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:4f:04:b0:8f:de:cf:cd:c3:a9:80:7f:da:1b:cd:b0:29:2c:
14:4f:4e:9a:4c:bf:1c:a4:b0:88:07:cd:2e:03:17:38:44:77:
c5:f9:c2:94:40:61:0c:45:b4:3e:b1:96:8f:6d:68:ca:31:a7:
bd:98:21:6b:28:33:b2:cb:2e:ef:ff:e8:21:12:0e:d8:03:1c:
ea:78:ab:da:8d:2a:5f:74:f7:74:50:1c:d8:76:74:52:c1:41:
08:01:a1:15:e2:0a:40:60:92:43:21:4c:fe:40:69:4b:eb:b3:
8f:87:2f:c2:18:73:ea:ec:7a:fd:4e:b1:01:48:b9:30:39:7a:
0c:e5:ca:d5:17:56:dd:44:d2:3e:44:be:22:4d:37:d8:1b:54:
45:69:6f:f5:c3:e3:e2:31:3b:04:f2:a3:8b:81:89:a2:2b:f2:
54:91:95:25:81:69:fb:38:ec:2f:1a:23:d9:81:e4:df:75:7a:
92:ac:fe:7b:19:36:c4:06:c6:0d:29:68:48:4a:bc:ff:4a:8b:
45:46:2d:83:27:11:81:a8:f5:38:c7:ed:e1:2c:2b:6c:ae:af:
19:6e:74:c5:97:e4:08:c0:16:85:86:2a:c9:ad:be:40:4c:65:
bd:bf:ef:66:56:3a:5b:34:94:27:b5:0c:82:5f:fa:6f:47:18:
a7:a0:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:45 2025 by rpki-client