Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: sw1WBqAX8RJUwqP1r3d0Rj0Y3PXX3iofJ2qdESxZPKI=
Subject key identifier: 25:FD:9C:BB:94:B5:F6:84:43:D9:88:69:B3:F8:72:7D:80:1D:1D:BA
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0194C42C3CEACF78B5488B4F3FE9F6833B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0172
Signing time: Sun 02 Feb 2025 01:00:20 +0000
Manifest this update: Sun 02 Feb 2025 01:00:20 +0000
Manifest next update: Mon 03 Feb 2025 01:00:20 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: taFuumvvsbUTr2sjt/wAjRdqwRnVTdleo4hHyj9COrU=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:3c:ea:cf:78:b5:48:8b:4f:3f:e9:f6:83:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Feb 2 01:00:20 2025 GMT
Not After : Feb 3 01:00:20 2025 GMT
Subject: CN=25fd9cbb94b5f68443d98869b3f8727d801d1dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:b2:22:97:92:e6:fa:ed:30:21:cd:b4:dc:
4a:45:a1:8a:c7:e9:05:0e:e5:07:b6:f9:db:e0:c6:
56:19:2a:07:b5:a6:44:f9:da:45:f5:21:54:92:62:
31:fc:b0:d4:04:14:a7:09:af:ea:e9:f6:8c:59:cf:
ab:a2:14:79:fa:0f:55:9d:bc:a9:96:7c:50:46:2c:
ef:1a:05:bc:b4:4e:a8:fa:7f:9c:83:97:bf:9b:6c:
ba:03:c9:28:74:da:49:6e:90:a2:03:ad:a8:ad:65:
1b:07:0d:62:38:f5:f6:4b:68:74:6d:4a:31:53:a2:
38:67:45:08:93:d2:04:5a:79:39:b6:1d:09:6a:4f:
f2:c8:81:45:70:73:08:5f:52:c1:e4:27:f3:cc:59:
2f:91:41:68:74:29:a5:a7:8a:09:3f:1d:65:63:aa:
7d:c8:f2:e7:87:73:61:14:f0:f8:19:8c:5a:be:99:
d2:07:2d:72:69:8c:0e:1c:ad:e2:9b:56:93:1e:8a:
4c:11:23:ec:a9:86:d0:59:7e:2a:21:cb:36:d6:02:
0c:42:2e:eb:78:dd:ba:71:99:fb:07:19:c1:42:3c:
c9:26:32:a7:be:db:16:a2:f3:f3:ac:5e:2e:1b:c9:
9c:c3:41:1b:84:ae:ec:87:51:ed:28:97:fe:14:c3:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:9C:BB:94:B5:F6:84:43:D9:88:69:B3:F8:72:7D:80:1D:1D:BA
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ae:a3:9e:92:61:19:b2:a4:cf:44:8c:e7:a5:87:22:fa:8d:
b6:6a:0f:9d:47:d4:ed:87:2b:a8:b9:8d:30:5b:b4:20:0a:32:
91:1d:ac:80:fd:85:13:fb:19:70:59:76:70:e8:47:01:10:f4:
75:56:32:7f:98:9d:b1:e5:14:7c:d6:39:f9:32:24:53:92:28:
2e:29:7f:d8:17:28:79:ba:0a:34:63:43:0e:33:cf:ef:d7:2b:
7f:b7:a9:5c:62:2c:6e:f9:84:4d:8c:c8:f2:47:1d:ce:64:6e:
ea:bb:60:94:a7:ec:c0:e0:83:36:60:2a:fa:e7:8e:ca:cf:74:
b3:e5:60:9a:be:92:a9:51:9d:9d:53:97:98:11:67:fa:8d:8d:
a3:82:34:c7:3b:aa:28:3b:4a:19:89:12:f9:6e:b6:f2:80:af:
4b:c0:ca:b4:58:70:23:ae:a0:c9:3d:29:07:14:59:f6:ce:f3:
5e:97:cb:cd:c6:f0:14:fe:ce:e6:30:1d:44:0f:0e:4d:67:fa:
13:bf:b5:c7:9a:b0:3c:a3:68:de:f0:01:63:39:fc:95:1b:15:
52:03:15:97:a8:ad:74:81:02:46:f2:3a:3c:ce:42:e2:33:98:
20:8e:31:e4:af:9c:31:7d:6c:62:d9:6f:ef:04:12:0d:2b:dd:
4e:26:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:48 2025 by rpki-client