Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: odsJDIvoQ+DfuyI+l/ajfVZ3ataSky0aKehow5nvcSw=
Subject key identifier: 25:1E:07:47:B3:90:43:8C:A5:E7:4E:64:24:2B:72:4D:D8:BE:D7:5B
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 0194BB600D89CD65FDA05D44FF452C206F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0CDB
Signing time: Fri 31 Jan 2025 08:00:21 +0000
Manifest this update: Fri 31 Jan 2025 08:00:21 +0000
Manifest next update: Sat 01 Feb 2025 08:00:21 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: GCEb44RD1Pw846LI6hvULa5kNSssqTqnL7P6SwKqwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0d:89:cd:65:fd:a0:5d:44:ff:45:2c:20:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Jan 31 08:00:21 2025 GMT
Not After : Feb 1 08:00:21 2025 GMT
Subject: CN=251e0747b390438ca5e74e64242b724dd8bed75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:64:49:32:d2:bc:2b:01:76:f0:cb:fb:44:
b8:6a:24:40:31:94:7a:a5:db:ad:6d:08:14:6b:d0:
ac:1a:83:20:d7:f4:63:b8:e5:22:c1:a6:b4:0f:19:
77:42:9f:a8:1e:e8:9b:f1:8e:c0:a2:4b:0a:93:bb:
fd:da:e1:f7:be:07:b3:10:f5:63:da:5d:53:a1:fa:
ef:6d:81:1b:e0:d3:84:89:4b:0d:da:fa:7f:9a:75:
6b:90:a3:a9:7c:bb:33:f1:10:3d:51:b1:e1:e1:35:
ce:ee:41:70:5c:ce:f9:63:23:50:18:07:7c:c3:9a:
b5:7c:be:da:30:ca:1c:0a:b2:35:37:92:68:b8:70:
53:07:cc:7d:08:cb:f5:4b:74:f3:db:fd:7a:7f:7f:
59:af:fc:2f:5d:e2:f5:e6:6f:cf:e0:c5:59:8c:da:
da:56:76:35:a4:65:d8:fe:86:c4:5a:c1:d5:66:1a:
3c:af:8d:27:bc:d6:6f:47:6d:f9:db:59:01:6b:93:
f3:e6:8c:7c:39:2f:fe:b7:36:16:bb:e2:7a:4b:64:
8c:a5:b1:41:93:76:d4:0b:75:a5:6f:60:b2:1e:2a:
4e:b5:09:87:56:e4:2f:b6:30:f2:7f:de:9c:79:16:
ce:1d:20:52:66:11:94:f1:90:ed:28:a5:95:4c:a0:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:07:47:B3:90:43:8C:A5:E7:4E:64:24:2B:72:4D:D8:BE:D7:5B
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:19:71:e5:58:ad:49:3b:19:c7:49:1a:df:a5:cc:42:7e:
1e:0b:61:c0:97:78:86:bb:d5:b2:b7:b9:76:fd:8b:f8:8f:a4:
79:9c:bd:5c:c0:3b:51:f8:ea:dd:1c:ad:73:4e:af:b2:2a:96:
e1:05:c5:c9:79:ac:e4:e1:46:5d:88:ed:bf:8e:1d:0a:bd:54:
eb:bc:38:56:1f:3b:6d:ed:2f:2e:a1:c5:0f:f9:cf:ad:77:4b:
d4:0b:3e:17:5c:5a:e8:48:21:d7:a2:ae:aa:dd:12:dd:ed:7a:
43:66:85:0e:20:6c:5e:7f:4b:ae:82:b8:7a:2a:1f:9e:41:cd:
fe:dc:55:05:7b:51:51:3f:50:29:04:5c:a4:c4:cb:f5:db:12:
17:a0:c4:2f:1b:11:55:21:04:ff:86:a7:6d:36:ce:95:1a:ca:
95:3c:6f:df:4d:fb:57:18:b9:a5:af:7b:9d:9e:d7:d7:d2:9a:
62:3c:ca:fa:84:24:e1:d0:80:03:c0:02:b3:b4:8f:53:18:6a:
bb:d7:16:a7:14:57:f0:fc:aa:ea:e8:30:90:44:78:21:bb:00:
e6:d8:7a:2f:25:6a:90:bc:77:16:d2:23:88:0a:64:78:64:b8:
91:90:e7:b1:64:18:84:45:86:df:01:70:0b:e8:27:4a:c4:89:
92:98:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:55 2025 by rpki-client on console-fra.rpki-client.org