Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: X14Y6jS1+yxEIIx1oiS15uCbGpxkK7tnr8Sg81i9K3Y=
Subject key identifier: BC:D5:47:AD:74:90:AE:81:E7:4C:A7:71:7A:72:55:2A:2E:E5:1A:A9
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 0194BB29084BE178BDA2CBA9F39BBB8DF1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 07:00:15 +0000
Manifest this update: Fri 31 Jan 2025 07:00:15 +0000
Manifest next update: Sat 01 Feb 2025 07:00:15 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: pup8qXNw1+2bfZ8R9KLDV/Xvro/MXOsLBn7bxZFShjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:08:4b:e1:78:bd:a2:cb:a9:f3:9b:bb:8d:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jan 31 07:00:15 2025 GMT
Not After : Feb 1 07:00:15 2025 GMT
Subject: CN=bcd547ad7490ae81e74ca7717a72552a2ee51aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:e8:95:36:7f:79:25:c8:60:f8:09:d3:4e:
c7:b1:37:1a:6a:a9:d7:a8:33:41:4e:fe:22:81:40:
6a:dc:de:2c:4d:df:c6:4e:22:41:b4:63:4f:22:1e:
56:29:39:85:71:f8:30:50:15:8e:78:dd:9c:7a:66:
b0:6e:ca:b3:63:93:e0:bd:b9:05:b0:74:c4:9c:a3:
e8:3b:a1:85:68:62:51:77:64:56:b6:55:34:e0:6e:
3c:3f:07:31:53:62:9c:25:f7:2e:d7:1b:48:12:c5:
54:ad:48:7c:c3:95:b5:34:6d:ba:41:a9:db:e6:c6:
f9:f3:d9:92:1c:b3:21:51:5d:74:e9:eb:f6:03:c7:
ea:64:1c:05:e0:77:df:cb:ba:33:5d:5c:d2:55:86:
75:ee:44:ca:f0:5b:59:42:2a:9b:8f:1b:ab:7b:ac:
04:67:c9:08:66:b9:6b:88:4f:dd:4a:97:94:32:ca:
b0:f3:bd:d1:56:1b:01:fa:77:a0:75:4e:36:2d:8a:
fe:c8:5f:3b:b8:11:c7:be:1e:fb:a1:ca:55:d1:53:
bb:2a:1d:6e:68:0f:c6:74:fe:1e:b7:b0:2a:34:d2:
bc:6b:28:51:b2:a5:8b:da:77:ae:be:11:ae:d2:e2:
35:0d:69:0c:9e:19:7b:28:01:01:a5:d0:d3:35:a3:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:47:AD:74:90:AE:81:E7:4C:A7:71:7A:72:55:2A:2E:E5:1A:A9
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:1d:64:98:61:ce:ba:44:e6:32:c3:3d:bd:ce:d1:39:1c:
59:bf:22:5d:2d:2e:e0:72:35:a5:3d:22:f4:c9:81:e6:06:f7:
20:2c:f4:d8:6a:1a:40:69:5d:7e:5f:f3:28:77:85:45:74:97:
fd:ca:b5:b0:f0:b8:c6:8b:5a:31:c8:ad:8e:94:c7:7b:63:d0:
a5:20:d1:21:38:e1:fe:61:42:98:2c:66:7d:02:39:d6:66:12:
4b:38:bb:01:6c:b5:51:93:15:bf:db:1c:88:f8:f7:89:0a:c9:
8a:80:14:91:03:1f:85:de:46:cf:9e:3f:ce:83:6e:9a:42:d2:
d1:b0:7d:6e:c6:f8:f7:9e:ec:07:d6:5e:35:93:dc:fa:2a:46:
e8:10:7b:d1:c5:22:a4:2b:cd:c8:27:30:c5:af:b8:b8:a9:3f:
e3:f5:98:f6:5b:28:95:89:a3:33:58:f4:fa:be:19:2a:56:29:
10:51:23:7d:d3:ac:80:48:56:13:7f:61:f1:eb:18:d5:0f:14:
fd:45:21:44:ca:fd:80:88:b8:e6:1c:56:3f:9a:50:a8:8a:dd:
ec:18:c4:3c:cf:ac:7b:ca:cf:02:12:64:6f:0d:a9:62:74:3b:
34:fa:03:ac:24:a8:3e:6f:55:af:ff:78:34:bb:4a:e5:49:ab:
1e:ac:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:16 2025 by rpki-client on console-fra.rpki-client.org