Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: JtnfgM/VW1B/zLh74alWl4JIZMqc5EvBu68mn9lfzUg=
Subject key identifier: E1:9D:77:E3:7C:27:D8:16:0A:4F:56:28:C5:28:57:2C:63:18:57:23
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0194BAF288DBE7224ED05342DAC1F671AEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 06:00:44 +0000
Manifest this update: Fri 31 Jan 2025 06:00:44 +0000
Manifest next update: Sat 01 Feb 2025 06:00:44 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: xJjmaIWutr1h7VyM6jQ0Dlgq0sgwQaUJ08QskDVKOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:88:db:e7:22:4e:d0:53:42:da:c1:f6:71:ae:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jan 31 06:00:44 2025 GMT
Not After : Feb 1 06:00:44 2025 GMT
Subject: CN=e19d77e37c27d8160a4f5628c528572c63185723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:57:21:d8:94:c5:13:60:a1:2b:7e:98:08:
cd:8b:2d:17:dc:50:b4:13:f3:6a:6a:96:41:e3:21:
da:97:2b:f0:9e:bc:7b:49:cf:08:9a:9c:e4:6d:8c:
8c:1f:5d:9f:23:a2:a2:a1:6b:4f:d8:67:6a:e0:77:
cb:63:14:65:46:98:a6:67:7c:d7:80:03:d7:57:a5:
14:d6:59:42:21:22:ec:c5:e8:62:e6:29:47:e5:13:
94:a0:aa:ab:d9:8d:b2:b5:d5:fc:e1:6a:ee:06:8b:
18:b3:4a:50:e9:c5:10:39:99:95:86:96:64:57:b3:
fe:4c:54:75:a7:36:eb:64:4f:03:bc:68:fa:16:dc:
a8:62:57:d0:87:f4:54:b4:89:2e:2d:3b:9c:33:c4:
0e:89:e9:df:b0:92:7c:6e:a9:ed:35:2c:22:a1:3c:
e2:17:fc:fb:9d:25:5f:e3:fe:5a:67:85:51:45:a1:
c7:3b:89:29:47:d0:c9:cc:76:51:b1:e8:fb:9f:85:
98:57:e3:1d:d3:89:4d:32:cf:14:88:6c:18:c6:70:
80:9a:07:62:b8:d3:f0:a0:09:90:75:63:14:b4:42:
a0:f9:be:d3:01:dc:e9:f2:f4:1c:49:8a:13:e6:03:
16:9d:ed:66:2c:50:5a:b3:bc:b1:81:d3:ce:60:a9:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:77:E3:7C:27:D8:16:0A:4F:56:28:C5:28:57:2C:63:18:57:23
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:23:1b:06:b8:b7:e4:02:72:8b:7d:7a:3d:c1:dd:e3:16:
22:2b:47:6c:6a:7e:58:f2:30:97:aa:8f:4e:a9:8c:05:cc:88:
5e:e9:6a:cf:6f:f3:aa:81:c1:0f:01:6a:3c:78:65:52:10:5a:
69:df:45:92:98:04:c1:f6:12:6a:15:4f:b6:c5:1e:8e:a0:80:
7c:cd:c5:08:38:7b:ed:c1:91:f8:c6:cc:2d:33:d2:05:0b:b0:
18:14:ac:87:7b:0c:8d:5a:00:b1:65:04:23:9d:a5:73:55:ba:
2b:4e:1f:44:a2:92:e5:ff:12:05:3d:b1:88:2d:61:aa:b5:74:
0f:28:00:91:c1:2f:24:48:07:ee:95:74:7a:6e:32:ea:37:2e:
f2:4f:ce:aa:bb:20:fc:88:87:fe:5b:50:90:5f:a2:9c:63:b0:
e5:6f:6b:b3:fa:14:6d:bb:e9:23:b6:5d:62:b3:43:c9:26:3b:
db:6e:51:dd:9d:59:15:c1:93:cd:a3:1d:98:c1:af:fc:02:31:
45:88:2a:36:cc:58:19:7f:c5:8c:18:df:cc:c1:d5:6d:ca:c1:
40:38:ba:16:5f:03:3b:b6:72:ce:18:51:fe:67:64:26:1c:d2:
05:43:81:77:27:d6:fb:5b:d9:ed:e6:29:e2:c5:7d:a5:3f:8b:
a8:30:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:59 2025 by rpki-client on console-fra.rpki-client.org