Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: XKEP0/IChe/ZcD5sn5wdNsnLJXjCXQzcPuKLTGAqG4o=
Subject key identifier: 7A:61:1D:9A:35:1A:8C:89:AD:23:89:AC:CF:41:91:B9:1B:C2:0F:19
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 0194BA845798A89B089D7F1DB652A9BA65C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:22 +0000
Manifest this update: Fri 31 Jan 2025 04:00:22 +0000
Manifest next update: Sat 01 Feb 2025 04:00:22 +0000
Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: IKhjgheUBkJfZllryvnTngj1fGJlhYMjFnCxoUeqT7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:57:98:a8:9b:08:9d:7f:1d:b6:52:a9:ba:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Jan 31 04:00:22 2025 GMT
Not After : Feb 1 04:00:22 2025 GMT
Subject: CN=7a611d9a351a8c89ad2389accf4191b91bc20f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:d2:9f:12:46:b7:7f:df:28:48:07:0b:df:
fd:33:34:a0:95:97:1a:65:24:76:4c:5b:17:5b:45:
90:62:d1:19:58:e6:a5:b0:3d:b0:92:66:90:2a:6a:
bc:1a:61:8f:73:da:c5:6b:8b:f7:56:ec:91:9e:72:
4b:83:d8:7e:4f:50:a5:bf:14:e2:b0:a2:cb:df:74:
54:91:1a:05:4d:52:5b:2d:f7:bc:d5:f8:b4:25:2c:
ab:4b:bc:5b:9d:b2:e8:8d:1f:50:bf:25:58:80:14:
99:c6:76:1f:ae:84:f8:2a:e5:0e:fb:ed:45:32:1a:
be:03:77:b7:e3:46:24:30:9e:08:ac:95:b4:a1:17:
10:9e:ac:4c:28:82:92:97:6a:06:d6:07:de:08:f1:
48:39:93:4d:d9:ce:17:90:4d:ea:bb:9f:e7:b9:64:
30:39:86:08:11:a4:ff:22:b8:b8:15:80:9e:fe:b9:
63:66:95:ac:30:55:8a:e4:4b:45:fa:cb:2a:c1:4a:
25:56:a7:17:b0:74:fc:bb:94:e3:e7:0f:11:e9:98:
fc:fa:1a:bd:61:31:72:9b:f4:a3:4b:d0:e2:d4:66:
eb:e5:23:1f:90:c7:6b:a6:e4:e9:50:bd:31:e8:f8:
06:82:89:3d:2e:ed:ae:10:05:24:88:1c:6a:34:9c:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:1D:9A:35:1A:8C:89:AD:23:89:AC:CF:41:91:B9:1B:C2:0F:19
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:34:fa:e9:8c:36:01:63:f6:f1:c0:9b:6f:9a:59:c6:aa:6b:
16:f7:dc:e4:d4:c9:7c:1f:76:78:c1:a9:78:9f:dc:1e:9b:bc:
37:ed:05:c1:16:5e:5d:21:0b:08:79:3a:7a:fc:a9:2b:5c:d1:
4a:61:59:36:40:21:50:ac:22:85:2a:46:8a:04:60:b3:a9:0d:
03:92:d3:1f:68:c8:00:b5:7b:c2:e7:8f:d7:58:52:9c:2d:44:
7d:df:cb:d2:34:cf:a7:b1:ea:5e:6f:72:70:b1:14:48:ec:b3:
b4:64:10:cd:b9:69:f2:e2:76:89:9f:b5:96:86:4b:cc:20:0f:
1b:9c:b9:92:1d:cc:8f:65:b0:24:93:f7:c2:80:e7:ca:41:76:
66:37:ee:fc:53:a6:ba:67:a9:a9:b9:88:dc:c7:fb:b0:ef:fd:
6e:73:fa:8d:a5:41:2e:ba:b3:5c:09:93:bb:f4:b3:a2:ae:0e:
79:cd:e4:dc:d2:f5:ab:8a:f9:d4:55:fd:1e:8e:9d:33:22:27:
d2:89:e4:26:fa:34:fc:c2:ba:fd:10:d4:cf:1d:21:be:30:17:
59:1d:a2:61:18:af:23:a8:61:ea:69:0c:16:37:ed:e4:45:5b:
e5:1e:16:17:7f:a6:db:1c:f7:48:4a:4a:a3:e6:25:88:71:f5:
c1:20:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:08 2025 by rpki-client on console-fra.rpki-client.org