Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier: PeZqIpEvM0q7TYhfhyz49DgGAZBOg0jAwkrGYYGdpVw=
Subject key identifier: 6E:DE:28:5C:CD:E2:86:31:75:BD:F4:59:09:F3:09:4B:B5:17:0A:7D
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 0194BABB30C638FCB3A7517C0E92BB042FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: OedcE3fMIGTyd8udUVap/uR3u0N3zILPO5wTCX3v5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:30:c6:38:fc:b3:a7:51:7c:0e:92:bb:04:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=6ede285ccde2863175bdf45909f3094bb5170a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:cd:2e:95:68:76:ad:77:bb:32:56:e7:05:
34:66:dc:b1:f6:cd:b0:2a:e6:58:66:57:b9:e3:3b:
11:a0:62:8e:8b:7e:82:4e:4b:80:2e:7b:30:4c:15:
c3:f9:c8:1f:92:b6:ed:fd:61:41:55:ac:aa:03:fc:
66:99:17:ae:82:0d:e1:d2:73:b1:cc:40:c0:17:0a:
2b:d7:49:5f:51:ef:f4:6a:ae:4a:b4:c7:5c:0e:52:
d4:b9:05:c8:cf:1e:54:10:70:95:fd:a4:76:05:7f:
68:1e:94:30:02:b3:e9:32:36:25:99:43:5d:56:c3:
8a:11:5c:cd:b7:b4:42:38:9d:79:85:61:9d:a9:e6:
3e:3d:50:f3:6a:b3:ed:b2:79:e6:64:49:bc:b5:8f:
33:ff:91:45:cf:f8:f9:15:6e:c2:63:ab:c6:f0:3f:
fc:ef:27:81:72:b8:f8:34:55:67:f8:16:1b:db:27:
df:43:2b:82:c8:ab:1e:57:8e:59:6f:c5:a5:14:03:
fb:7a:3e:d4:9d:d6:6d:87:81:02:da:45:4b:16:2c:
ee:d3:5d:4c:d4:5a:a4:0b:6e:db:99:89:e3:93:a6:
4f:81:0f:f1:48:c5:78:b3:2e:c8:0b:78:a1:73:7a:
9e:cf:6d:53:3a:61:98:70:7e:93:8b:6b:7a:74:7e:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:28:5C:CD:E2:86:31:75:BD:F4:59:09:F3:09:4B:B5:17:0A:7D
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5b:90:70:74:59:b0:c7:d8:4b:68:3c:a8:98:3b:a8:fd:5a:
b9:9e:e1:8d:49:0e:10:90:59:02:6f:86:4c:24:63:d8:32:56:
24:7f:67:a5:7b:c7:a8:d3:8b:00:df:b4:b5:6b:a5:01:61:17:
0c:92:b1:35:57:0b:49:e6:4b:bd:35:53:8a:f9:fe:5f:42:cf:
5d:b0:26:27:70:9c:1c:63:fa:23:24:fd:d4:31:06:2b:15:3c:
b9:01:fd:32:6e:ec:3f:e1:1b:28:a0:f3:9b:f7:72:3d:1a:14:
dd:66:01:02:df:e9:a2:b4:76:09:d7:f2:c3:51:d1:91:ef:39:
32:35:3f:76:ef:31:60:c2:38:d4:c7:f8:a1:50:69:d0:e6:81:
62:60:55:d3:59:aa:83:26:21:84:c1:4d:f6:7e:c9:35:2c:00:
a3:a5:60:d8:aa:89:5e:d7:95:f9:a3:9a:d0:bf:ac:96:b9:6d:
2e:e7:38:b1:13:59:2d:23:f1:97:8e:8b:df:94:16:d3:a1:64:
1a:f2:ea:fb:89:fd:42:d7:7f:fb:3c:96:54:34:aa:a6:b2:28:
04:f3:8b:45:46:53:1d:e5:9e:1e:0e:b0:21:78:ee:94:7b:5c:
2d:b6:28:f0:07:f5:0f:9d:31:6d:21:fb:32:53:84:26:42:99:
8d:78:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:58 2025 by rpki-client on console-fra.rpki-client.org