Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: xWP6pBmc0BzVt9bZlthgQUuPcUh8Bny8REyQAfUQCKI=
Subject key identifier: 1E:8F:8F:4D:13:1B:17:CC:6A:27:B5:8A:78:3D:D0:0D:EE:4A:C3:74
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0194BB2914AF46FB2EBBE6378F68F098B771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 07:00:19 +0000
Manifest this update: Fri 31 Jan 2025 07:00:19 +0000
Manifest next update: Sat 01 Feb 2025 07:00:19 +0000
Files and hashes: 1: 1-utv31eNtHYCODQjw0OBJ9A1ak.roa (hash: /AARSXPg1zjQZ6XPrMtvagEPxIaMWqUCldvhvMILl0E=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: +o6akLGW4XFIiR34KBpml6SfeBdLNBnzu/9Uej7g86Q=)
3: v-1dMJATbmCqn4ZIXY3_7O06Kgo.roa (hash: e/oJSwkuDJQUs8pWr+iLRNfJ7vsAry7pnZFcOPKfgOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:14:af:46:fb:2e:bb:e6:37:8f:68:f0:98:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jan 31 07:00:19 2025 GMT
Not After : Feb 1 07:00:19 2025 GMT
Subject: CN=1e8f8f4d131b17cc6a27b58a783dd00dee4ac374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:af:66:f6:78:fb:3f:0d:11:e0:2f:b2:d3:
d8:58:25:3a:ef:06:f4:d8:74:8d:56:91:7d:2e:fc:
6c:4b:7b:75:b6:be:91:89:c0:3e:49:52:7f:ee:c0:
99:b9:85:d4:80:4f:25:c6:ef:3b:3c:59:e4:6f:0d:
96:b8:b3:9c:62:e4:2a:4f:64:5a:32:bd:f3:6c:ba:
b5:2c:0b:bd:eb:a3:0a:e1:43:4c:fe:3a:41:b3:cb:
a4:bf:8b:ab:d0:08:22:66:52:f1:9e:f4:bd:8d:12:
73:ab:24:24:8a:ed:46:f9:a4:f3:19:b3:89:09:31:
86:48:51:ed:fa:1d:ca:42:23:5b:97:0c:c4:46:fd:
70:e2:55:96:1e:73:80:cd:a4:73:53:a7:7b:cd:d2:
3f:c0:bc:0d:14:23:0b:c8:98:14:3e:b9:c6:6b:b4:
1b:40:25:30:f4:af:ae:40:e3:dd:cf:07:ca:66:72:
9a:d2:a7:be:99:46:89:4e:91:7e:40:e0:82:a2:25:
69:f0:89:4c:58:14:89:52:67:f0:c2:42:11:e8:c1:
f8:2c:9d:41:46:e6:93:34:b7:2d:0b:b4:e6:84:81:
ff:7e:9a:52:9a:da:2b:f6:3f:be:db:b3:33:99:ed:
2c:06:6e:ae:5f:3f:0e:17:be:57:74:77:69:d6:25:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:8F:4D:13:1B:17:CC:6A:27:B5:8A:78:3D:D0:0D:EE:4A:C3:74
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:a6:40:07:2b:68:c1:0e:ce:1a:4b:1c:72:c4:be:4f:8a:
48:52:d6:6d:95:0a:ef:b4:55:6b:90:8c:58:b6:1c:04:1b:0b:
f1:d0:23:bf:b2:54:12:71:73:b5:4c:40:7a:fd:e6:4d:9c:6b:
52:6e:40:c0:e4:96:f2:a4:ae:67:86:01:37:36:72:51:13:06:
d4:95:a7:38:d2:30:03:ed:dc:82:8f:2c:36:fd:d7:2f:0b:fb:
93:fe:36:f2:2d:be:aa:3d:41:74:bd:94:62:f9:23:f6:aa:6a:
02:a7:7b:72:d9:8f:e5:ab:a2:f5:46:b0:a1:b1:d3:49:71:db:
a0:eb:c5:3f:f0:d2:04:6d:44:66:0c:03:eb:f5:0e:14:80:e1:
ac:84:fe:38:48:7c:9b:6d:a5:31:42:3f:d3:82:aa:34:53:ca:
29:a8:d7:c5:56:43:50:cd:57:1d:8f:60:28:56:b6:30:3f:db:
96:8b:fd:03:e3:3a:ca:c4:76:cd:59:b7:00:0d:a5:0c:a1:2b:
7f:6c:6f:83:cb:38:48:01:05:e4:f8:69:3d:84:12:70:78:5d:
da:b4:0f:60:72:12:57:fd:2b:a4:7f:31:80:ff:22:26:dc:b5:
71:46:fd:0a:4c:72:88:c2:4b:b9:ed:ed:05:0d:7e:53:74:d3:
f8:42:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:19 2025 by rpki-client on console-fra.rpki-client.org