Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
File: zTwRDf139XdXORwPrt7r42CGVx0.mft (raw, json)
Hash identifier: r/ABPkOLaHU4gVAGCpNK4OjRnorQmqOsMCRY5vw55aE=
Subject key identifier: 5D:8C:0C:38:66:C6:2F:A2:E8:0E:3A:FF:DB:1D:83:E3:A3:98:80:84
Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Certificate issuer: /CN=cd3c110dfd77f57757391c0faedeebe36086571d
Certificate serial: 0194BABB6DB1501FC6F96F2A8D38043070FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
Manifest number: 0C45
Signing time: Fri 31 Jan 2025 05:00:32 +0000
Manifest this update: Fri 31 Jan 2025 05:00:32 +0000
Manifest next update: Sat 01 Feb 2025 05:00:32 +0000
Files and hashes: 1: n79crWM-L0W_-YTIs0SA8x1g-4g.roa (hash: WTPugh0CrOL+7geJ0TTyRViJCXrCGCyNH+3nK4QxB48=)
2: zTwRDf139XdXORwPrt7r42CGVx0.crl (hash: lDkklfscCGNkFp8TPScBtss0kggBTJPDGeW1FQSP4no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6d:b1:50:1f:c6:f9:6f:2a:8d:38:04:30:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d
Validity
Not Before: Jan 31 05:00:32 2025 GMT
Not After : Feb 1 05:00:32 2025 GMT
Subject: CN=5d8c0c3866c62fa2e80e3affdb1d83e3a3988084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:5d:a4:cf:ec:3c:78:5d:a6:df:09:94:41:
db:0a:65:03:a6:14:26:9f:26:83:71:f9:46:31:68:
34:0a:00:df:25:ac:87:7f:bf:fc:01:84:a5:a3:dd:
25:3f:ae:a3:f9:4a:60:f4:58:8f:ce:1c:1a:9b:35:
e4:5f:49:9a:62:57:1d:aa:eb:70:3a:2c:c9:f6:23:
b1:49:a3:a6:60:03:f9:38:5f:85:5e:4f:20:f3:a1:
2d:2b:f9:91:e3:c7:d1:d4:0b:e7:82:e4:1e:7d:48:
ff:33:47:d5:b5:54:51:0f:1b:99:48:9f:9f:40:cf:
3b:ee:dd:c4:a1:bf:07:9a:2e:35:61:f1:15:63:39:
e6:47:cd:2e:da:21:29:98:01:01:14:7e:68:59:0c:
cb:f9:ae:e5:a1:7e:ae:25:e5:d0:46:3e:6c:a6:49:
f3:4b:0b:ee:69:8a:7d:6d:98:96:64:ff:f9:6a:66:
03:1c:fe:d0:c7:49:98:03:c9:ca:5f:0c:49:ef:3c:
06:bc:81:35:da:1e:42:ee:8e:d5:c4:62:c7:f1:94:
fb:07:9b:c4:e1:67:e3:37:87:6a:8f:8c:29:0d:5d:
9b:0f:29:6c:59:a7:7f:27:80:43:0a:7a:60:55:64:
29:39:6f:31:58:26:68:80:d6:49:b5:96:96:37:44:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:0C:38:66:C6:2F:A2:E8:0E:3A:FF:DB:1D:83:E3:A3:98:80:84
X509v3 Authority Key Identifier:
keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1b:c9:a6:f0:22:e1:7b:2f:26:63:a9:bb:52:8e:9d:40:c4:
e6:8a:41:1f:ff:ce:d8:48:44:49:05:60:e7:d3:34:67:11:46:
b8:10:22:ba:a2:3b:44:25:12:74:00:21:19:93:2c:ca:6a:4d:
a0:71:99:15:a4:d0:eb:0b:f0:1e:e6:4a:83:84:4e:50:d6:4b:
6b:7d:96:e1:c8:db:0e:0a:20:2f:1f:d6:e3:0f:17:1d:d5:ab:
ae:65:d7:3e:dc:ac:85:6c:b0:3c:7e:49:1b:4a:20:94:84:93:
ef:be:bc:9d:79:dd:c3:4b:6f:00:df:6a:7a:d8:bf:bb:30:74:
3f:39:30:ef:9e:ae:12:f3:6e:71:f2:9e:f5:71:74:78:72:93:
d1:59:4b:2f:89:6c:02:26:5e:80:10:f0:27:04:e3:57:9f:66:
66:9f:fc:fd:76:18:59:53:af:00:ed:9a:91:a6:b7:b8:55:aa:
46:52:55:9a:4a:01:5f:7c:30:69:4d:0a:f1:9c:5b:78:5f:91:
f9:1a:38:04:92:6d:81:05:5a:e8:83:8c:05:c5:d6:03:6b:f1:
69:4e:56:a3:c7:cd:78:18:cf:1c:6f:1b:14:a4:9f:b0:4d:3d:
3a:74:2c:13:ab:3e:62:5a:63:6f:84:0d:99:57:4c:45:6f:2b:
ca:8c:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:23 2025 by rpki-client on console-fra.rpki-client.org