Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: Bz/C9iffTu9O/97eRTu9UQeVaF82yP2wSPxZrGsKn3g=
Subject key identifier: 0C:57:9F:24:29:BD:F7:27:1B:93:E7:77:B5:E3:2D:D9:96:81:CE:1D
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0194BA8459510C24435BDF0E6247C5558023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: QAqC2HZYA7NzXX8t8wjIaHe0AuvGX+L3Jyhl6ZO/NCM=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:59:51:0c:24:43:5b:df:0e:62:47:c5:55:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=0c579f2429bdf7271b93e777b5e32dd99681ce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:ca:9d:82:fd:80:80:6d:c8:f9:94:d7:48:
8b:8e:92:4c:c8:da:be:4f:97:76:17:b1:f8:73:9e:
b1:c6:62:9b:f9:8d:a7:24:6a:10:de:0e:6e:22:ed:
e7:25:ba:12:f8:a8:9d:83:ce:41:c1:a9:80:fc:eb:
61:ab:f0:96:a9:03:c0:fe:57:c4:4d:5d:7c:c3:d1:
26:0b:f1:0f:40:40:c5:97:b0:40:57:8c:91:31:13:
a1:38:a0:ab:3c:0b:1a:8c:48:8e:c0:a0:64:ea:ef:
53:54:c0:79:c4:c3:89:cd:75:f8:f7:87:a5:86:40:
ca:db:7f:8e:01:47:55:4b:7c:4f:41:b8:d8:cb:8e:
97:93:6f:e6:05:35:b2:07:1f:81:86:d7:eb:9b:bd:
b4:5f:20:5c:3f:4b:f7:8d:28:bc:77:60:0c:66:30:
c8:6d:3e:60:84:4d:ac:99:a0:9f:2a:df:6f:5f:bb:
96:d1:6e:bb:eb:ca:32:99:77:55:53:f0:dc:a4:0a:
18:7d:22:a4:14:22:23:93:e1:cf:c9:14:fe:73:b6:
45:84:6c:ca:da:6a:60:94:33:2e:89:cf:26:b2:c6:
47:72:22:3d:f9:b0:69:73:a6:cf:55:24:cd:86:44:
68:1c:9f:b9:57:36:0b:50:bb:a0:73:52:c7:bc:8d:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:9F:24:29:BD:F7:27:1B:93:E7:77:B5:E3:2D:D9:96:81:CE:1D
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:8a:8f:bd:ae:16:90:1e:89:0c:d7:59:b4:86:b2:4c:c2:
13:c1:27:cc:64:7d:c5:24:b8:3c:37:02:fb:82:af:82:b1:a6:
aa:ea:78:f7:cc:56:8c:c9:2f:32:05:4f:74:b8:86:68:ba:09:
ad:63:30:c4:14:db:f0:aa:04:65:8b:f3:cc:f8:32:c2:98:f5:
3c:b1:d2:d5:a8:38:2d:98:83:23:e9:2c:1f:5c:65:6e:52:cf:
db:22:25:0a:be:a1:75:ec:59:79:2c:98:c7:a5:ef:3f:52:9f:
f9:0b:9b:e5:4c:44:ec:57:72:b5:20:b9:ee:16:86:cb:f5:83:
9f:d8:17:23:0e:1a:f6:9e:99:69:ea:90:c4:08:3c:5f:81:35:
16:b3:52:c9:eb:87:7b:ba:e0:77:40:bd:f1:6b:89:82:8c:63:
42:20:e8:10:92:3b:19:94:b2:d1:ad:a3:58:b4:b1:e6:f4:cc:
f9:62:a3:04:47:6a:f1:af:67:2a:a6:55:5e:90:d4:d5:e6:93:
d7:d2:5b:f4:d7:25:8c:aa:d1:c4:5c:00:8f:ea:68:f7:65:9e:
03:b1:5b:1d:af:fa:aa:dc:22:ba:cf:f4:f6:8a:fe:2b:7f:96:
e8:17:96:91:fc:51:2f:18:8e:5a:76:44:ed:c9:c0:aa:de:69:
81:9b:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:42 2025 by rpki-client on console-fra.rpki-client.org