Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: gUNx7O6xeqwEAfec0MjqQUhPjaRoQo4wPZjoGT1MNw4=
Subject key identifier: C8:AE:BC:C6:99:15:C6:3A:03:E2:49:0C:E6:93:C8:E0:8B:9F:96:FD
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0194BB970F1730349B8C265948CB36E67993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: iTDXCvyF7TbiNf+gPu7IQQAYoYDCb3jcibNipwzlkzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0f:17:30:34:9b:8c:26:59:48:cb:36:e6:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=c8aebcc69915c63a03e2490ce693c8e08b9f96fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:ec:a6:84:a2:34:40:a7:06:cc:74:bc:a0:
51:49:71:79:94:95:07:36:43:e6:8f:cd:0b:03:15:
75:f9:1a:07:fc:0b:3d:95:fc:16:d4:d0:16:4d:c2:
fc:f4:39:69:24:6b:d7:26:72:4b:9b:25:5e:69:a1:
42:19:fe:db:e8:4b:b9:66:fa:c4:ff:e2:3e:1c:d8:
21:6f:60:1a:76:ec:82:ec:e4:bc:88:1b:0a:ff:55:
04:aa:14:7e:d4:2f:ef:ad:dc:ef:73:01:c1:49:21:
f2:78:95:c8:31:45:55:81:c7:f4:f4:28:df:7f:a8:
61:a7:c0:af:e5:07:9c:1a:48:ff:d1:4d:b1:52:d2:
8d:12:a6:39:83:ed:ed:16:75:d1:00:24:e7:dd:a2:
e6:d7:2a:7b:f1:50:3a:58:68:ac:14:1f:cc:85:3a:
c2:b5:34:7c:e0:82:af:8d:c6:37:e4:ef:79:93:1e:
52:17:1f:d8:f2:2f:0e:ed:db:23:96:2f:ca:92:2a:
60:6c:d4:a9:49:88:0a:73:84:9f:26:8b:a7:4f:5f:
5a:1d:17:06:c1:47:37:bd:c1:75:fc:d3:d4:3f:00:
59:fd:07:7c:4f:ad:7a:6c:21:76:23:ae:cb:5a:88:
25:50:4a:3f:02:5a:a1:10:16:70:35:8c:ec:55:74:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:BC:C6:99:15:C6:3A:03:E2:49:0C:E6:93:C8:E0:8B:9F:96:FD
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:02:64:18:47:da:0f:cb:fa:4f:e2:6e:b4:0b:77:b8:cd:
eb:a0:29:95:24:21:47:5a:cd:50:88:03:15:be:da:88:dc:e4:
14:61:2c:61:c6:d0:ea:2e:f5:fe:d0:d0:33:ae:23:4c:b6:8f:
47:ad:6b:82:99:0e:0d:ff:6f:68:b5:bf:92:78:f7:63:e2:89:
e8:6e:05:40:33:2c:f1:00:e5:2b:12:34:1d:d3:2b:9e:03:f7:
da:95:4a:70:5f:0c:39:4c:3c:73:ae:b9:66:90:b4:57:bf:12:
b4:2c:16:78:b3:40:76:a9:12:0d:91:9f:d7:cf:75:83:fd:57:
ce:4a:f8:0c:ba:40:ac:54:ff:df:0d:fd:c4:95:29:d2:bc:9f:
ca:2a:a3:bf:aa:69:26:fc:e4:a0:3c:28:bb:9d:fa:ae:5b:48:
92:07:80:17:56:aa:7d:fb:06:83:95:1b:dc:fc:93:37:4c:c8:
66:8a:80:60:87:0f:39:b4:93:05:93:db:76:8a:83:5a:01:b8:
0e:27:0b:1e:0e:7a:8e:11:21:9a:79:95:c0:ff:41:0d:db:d3:
3c:5d:7a:25:2a:6e:53:2a:3b:a0:ba:9a:4a:73:9d:db:a3:a6:
eb:d9:8e:66:e1:0b:ee:86:19:ae:c4:31:17:91:21:3b:b5:61:
1f:79:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:10 2025 by rpki-client on console-fra.rpki-client.org