Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: jRT8nPmf3laRuES7QkQcSKsvt5RX5FKhcpVr7ToH7Qw=
Subject key identifier: B9:91:4A:E2:CC:6D:FA:BB:A0:7E:1E:9E:C4:70:7C:E4:AC:C4:C9:6A
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0194BB97270E6E7EE6892AF76B5BA1888CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 08EF
Signing time: Fri 31 Jan 2025 09:00:32 +0000
Manifest this update: Fri 31 Jan 2025 09:00:32 +0000
Manifest next update: Sat 01 Feb 2025 09:00:32 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: JLBYK2wuIr+Bx/mVoAvSfFPPonu1IPHfS9bdzlbXbIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:27:0e:6e:7e:e6:89:2a:f7:6b:5b:a1:88:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Jan 31 09:00:32 2025 GMT
Not After : Feb 1 09:00:32 2025 GMT
Subject: CN=b9914ae2cc6dfabba07e1e9ec4707ce4acc4c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:c7:80:e6:8b:94:ed:a8:93:c7:c3:ca:16:
31:ca:06:f7:91:b2:fa:8d:0b:6b:79:31:9f:c9:e6:
27:b1:47:9c:4e:ad:b2:57:21:70:71:66:19:f9:71:
95:1c:b7:c4:48:f0:c2:99:62:c0:35:ac:a7:46:42:
7b:9a:81:64:ae:5e:e1:eb:ea:1c:81:19:11:42:b8:
7d:37:53:22:ea:c0:b1:d7:46:00:42:b9:2d:f0:b4:
2e:01:8d:c7:86:13:ba:2b:d7:e7:9e:67:ef:a6:44:
71:8b:28:76:a5:8b:ec:f1:c9:44:9b:b7:39:47:17:
04:aa:96:b0:47:e8:44:75:4a:fd:4b:36:b8:30:a8:
87:fe:7b:05:89:02:03:e8:92:5b:d3:c2:3e:da:6a:
2d:d9:a4:af:29:2f:be:37:0c:bf:dd:d8:07:45:13:
54:18:1b:fa:09:ab:c6:cd:3c:af:a2:14:32:53:0a:
34:83:98:fd:b3:ba:b4:10:af:af:b5:b5:b0:0f:f0:
2e:2f:9e:06:b8:6b:94:73:84:57:03:33:70:e5:48:
dd:78:b5:64:c9:43:84:f6:e5:36:7b:e2:8d:39:97:
c9:cf:b9:14:61:58:35:49:fd:fc:39:f6:2c:6b:3d:
37:4d:42:eb:44:17:26:61:84:e8:f5:64:d0:a9:7b:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:4A:E2:CC:6D:FA:BB:A0:7E:1E:9E:C4:70:7C:E4:AC:C4:C9:6A
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:26:1b:a6:b2:b8:f1:b9:22:a6:64:2e:97:0f:bb:7b:7a:
5b:a9:f4:ed:4a:0a:55:e8:4c:77:b4:37:22:6e:d9:31:2c:55:
24:7b:f0:f6:ac:71:90:70:7f:20:34:9e:67:76:3f:2c:a2:27:
ba:5c:7f:81:b3:f2:15:95:17:60:e0:4b:20:33:a6:b3:0a:ce:
24:cc:f9:cb:f2:60:39:4e:5f:7e:16:80:a9:35:a9:cc:5a:63:
b1:bc:4b:3e:d2:0f:d3:b2:f1:53:7e:61:b2:64:47:9f:fe:33:
8a:5e:2d:99:a1:fe:d8:c6:2a:8a:c2:20:e4:12:08:df:ba:3c:
97:95:31:82:07:17:f7:1f:4d:10:54:4b:b1:75:fb:ec:96:08:
6c:03:cd:5b:dd:e7:25:bc:dd:4d:0f:71:fb:1a:84:3f:95:52:
37:58:fb:c2:3e:80:07:74:1c:66:18:4e:96:8b:ad:e3:d9:0e:
e5:1d:28:e5:37:7a:a3:c8:b4:0d:2d:04:e4:a2:61:41:b0:cb:
34:96:78:13:52:5e:c1:5a:f3:b9:64:28:ed:1e:41:be:3a:06:
28:fc:66:92:c4:98:c6:6f:b0:1f:bd:03:f8:de:d5:e0:3e:b7:
fe:0f:df:b4:00:10:dd:e6:03:79:cd:0f:43:88:7a:c8:97:9e:
30:2b:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:29 2025 by rpki-client on console-fra.rpki-client.org