Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
File: zPKS2CwKIlLdMoWihzMfRFDtNZo.mft (raw, json)
Hash identifier: UNvUQheEMfXK3HFHwlpp8SHMgze3woucanXuYZMRm3U=
Subject key identifier: BE:22:41:1B:8C:6E:7E:55:EB:87:D2:E0:B7:13:E1:57:1F:B6:52:F0
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Certificate issuer: /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial: 0194BAF285589D86A5CDBEDEBFF0805495F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
Manifest number: 0804
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: CkBOc7z4kdZJGb4-90X6hX6L7jo.roa (hash: 2s0FvcQyY/vg4fHm2yrRgYb/gxmRARkKeZ3RrkEOVnA=)
2: zPKS2CwKIlLdMoWihzMfRFDtNZo.crl (hash: pvk/hE22QoJC8GUEeDQhVq0eUHkfkvhWSK1RR9AUjus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:85:58:9d:86:a5:cd:be:de:bf:f0:80:54:95:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=be22411b8c6e7e55eb87d2e0b713e1571fb652f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:c8:06:2e:99:b7:54:f6:c6:f3:32:09:41:
c3:68:16:75:97:ad:65:76:c3:66:7e:8b:e3:cd:c2:
31:c2:d7:87:8d:17:ab:33:e2:31:5d:e2:87:60:3b:
62:f6:56:54:70:79:f7:02:ea:e0:dd:51:a1:40:8b:
d3:aa:2f:53:b3:83:09:06:6e:14:b7:5d:4d:f9:8a:
e4:36:72:bf:1a:f0:9b:cb:35:3d:24:0f:00:bd:57:
19:a9:1b:ea:39:40:5d:78:3c:f9:9a:06:fb:50:33:
31:a9:f0:26:d2:1c:1f:20:d6:7b:f4:5e:b2:33:3b:
4e:6d:35:30:82:a2:9c:cc:a2:e0:33:87:c9:27:d5:
b9:8b:d9:88:47:9d:bc:59:ff:b6:40:15:1b:37:57:
7f:1d:dd:7e:9c:d7:3c:21:8f:4b:2c:92:43:48:52:
f6:6e:16:33:ee:c2:be:4f:62:6e:7c:fb:4a:68:25:
92:ca:8f:fd:2f:16:9a:ba:f7:ad:c0:d2:ba:d9:a4:
29:c7:5c:ed:01:b9:30:14:37:65:a8:c7:89:4c:2a:
a2:08:ea:11:02:49:0a:0a:8a:53:ab:06:c7:20:96:
de:0b:a5:ca:fe:05:c2:33:3b:a4:b2:b1:26:04:a1:
ff:47:2b:3c:0b:38:4d:f4:5b:0a:8a:c3:ea:ad:2c:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:41:1B:8C:6E:7E:55:EB:87:D2:E0:B7:13:E1:57:1F:B6:52:F0
X509v3 Authority Key Identifier:
keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:53:28:17:ae:dc:3d:2f:82:0a:8f:d8:49:40:22:bc:44:
a7:57:1d:b5:d4:0a:f1:22:d0:d4:9a:7e:83:8c:ae:6a:e0:92:
ef:cf:94:1e:37:7b:00:b3:e1:76:d8:8f:10:0b:87:2f:c0:32:
12:4b:d5:cc:3f:f5:a9:c1:f5:b2:5e:49:14:ab:03:8d:4e:d0:
c1:79:62:26:7c:ca:f5:c5:69:f3:14:27:d3:f8:cd:87:31:c5:
ca:fc:b1:7b:02:2f:e3:24:98:3a:4c:b5:5c:a5:41:9b:fd:1b:
24:b1:d6:f7:b5:b9:83:78:48:e5:29:59:3c:d2:f3:d9:dd:28:
40:3a:1a:12:1e:09:c9:9e:b2:d1:f0:e2:fa:8d:63:68:36:f9:
8f:e1:56:7c:30:ae:e9:7e:be:75:e6:12:2b:39:a1:b9:c1:8e:
e8:b7:70:11:08:f7:8a:6b:3d:34:c1:fe:b5:48:2f:1f:07:24:
18:12:8a:1b:91:75:cd:95:01:59:15:65:15:19:28:e2:11:e3:
e3:ab:75:07:e0:4f:35:9b:34:a4:01:7c:ff:5b:0b:34:ec:25:
39:19:2f:be:22:41:c9:65:32:21:fc:b4:6c:0b:05:09:fd:bc:
e7:0e:28:f5:e2:a0:98:63:a5:9d:91:13:a3:03:0c:ce:81:a8:
25:f2:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:02 2025 by rpki-client on console-fra.rpki-client.org