Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: +3wvLOjFZ/fV4yhMhMpYpYx/5tlhi/kyRQGTQVKxJbw=
Subject key identifier: 85:26:DD:28:49:8A:AF:65:93:1D:6D:E8:A1:2D:73:FE:A2:3B:EE:DB
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019510C72612106C9A84536097538B324E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:41 +0000
Manifest this update: Sun 16 Feb 2025 22:00:41 +0000
Manifest next update: Mon 17 Feb 2025 22:00:41 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: jAs2SDO0Eww0VcT1pR+ZJGGpLWvycYhB3v9Ta693y9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:26:12:10:6c:9a:84:53:60:97:53:8b:32:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Feb 16 22:00:41 2025 GMT
Not After : Feb 17 22:00:41 2025 GMT
Subject: CN=8526dd28498aaf65931d6de8a12d73fea23beedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:9f:1e:92:47:e7:94:02:8e:94:99:05:7c:
7b:de:9c:7a:02:6c:f4:6b:c1:80:84:15:cc:b9:aa:
ae:f8:e1:ee:a7:76:69:a6:68:30:c5:a5:b7:4c:5c:
bb:23:53:da:45:77:76:ee:d7:88:68:d7:15:af:06:
22:da:2f:3e:07:ae:03:66:be:4c:43:93:1b:b8:d0:
a0:38:b5:33:dd:da:02:7d:a2:eb:98:0b:7f:3f:ea:
04:de:70:b7:d9:14:c9:ce:a1:7e:ae:16:51:b9:32:
28:24:02:44:df:cc:19:b6:60:a2:58:29:e4:84:7d:
cb:e5:27:c3:16:a0:4c:da:8b:c0:b2:52:3a:c5:36:
4f:60:53:ab:41:d6:9e:1d:84:8b:da:36:9e:27:cd:
d9:ca:41:50:18:1b:17:ea:2b:c0:18:50:83:b2:cf:
0e:bd:11:35:25:f0:b5:6c:82:00:9b:47:2b:80:3e:
04:c4:ac:19:5e:c0:34:86:29:8b:8e:be:b0:17:f3:
4b:1f:7c:b6:51:c3:53:85:c3:a0:57:49:24:9c:54:
99:5d:2f:51:34:00:6d:a6:0f:47:a3:cb:cf:ef:73:
7c:db:79:70:19:6d:57:96:8d:6c:ee:36:e4:b9:bd:
bd:8f:48:44:a5:4e:01:23:81:3b:ef:5c:48:10:5a:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:26:DD:28:49:8A:AF:65:93:1D:6D:E8:A1:2D:73:FE:A2:3B:EE:DB
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:ad:7e:aa:53:13:a0:1d:ce:53:cd:4a:38:1a:32:a9:1f:
d2:3e:9e:de:71:0c:c3:0c:37:f1:e0:9d:32:eb:b4:78:04:7e:
1e:53:8f:97:d5:9c:ed:fd:30:cf:30:10:33:5d:44:e2:f8:45:
16:8a:b9:44:a1:67:4c:79:b8:0a:c8:ba:30:41:c8:da:dd:83:
4c:1a:0b:9a:b0:4e:5e:4e:d2:f5:6d:e6:ac:dc:36:2e:e6:5f:
45:6f:1a:22:b1:b6:0d:18:ea:0b:ea:96:8c:88:70:9c:da:86:
2c:8b:9a:f5:cb:48:a5:d4:b5:cb:b2:8f:1d:7b:d1:82:ca:2e:
ae:2d:5c:e6:90:8d:0e:36:28:e2:6f:e1:4f:80:64:75:e1:20:
5e:8e:59:41:df:b3:a6:4b:46:96:53:fd:13:7b:3d:fe:83:76:
eb:e8:4d:e7:a2:25:04:42:a2:43:e6:7d:d7:77:e8:4d:e2:89:
f9:f5:07:8a:8c:0d:21:33:cb:62:92:c7:b0:06:47:2b:51:19:
8b:30:b6:26:a1:ea:03:31:b0:67:15:8e:b7:c1:2c:1a:aa:33:
d0:33:dd:ae:bb:a8:c7:79:5a:1b:43:c7:31:c9:84:b5:2c:56:
57:c7:25:2d:27:3c:b8:8a:38:15:e0:0c:62:80:81:36:d6:64:
1a:d1:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:08 2025 by rpki-client