Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: D1iiuTnHmRha7Va0SPFyAFlEmSXMnwX+Ly0PIxopvzg=
Subject key identifier: FC:44:AD:D7:42:C4:39:FF:35:A2:16:06:0D:9F:9C:FB:EE:1D:20:A2
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 0194BC0507CBC5C1F83711031F120929926F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: lQbXb7eiVykbCvE+9zlQH5xpRH4qKxLLEiV3CZIWNQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:cb:c5:c1:f8:37:11:03:1f:12:09:29:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=fc44add742c439ff35a216060d9f9cfbee1d20a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:db:4f:31:43:55:f0:84:8a:0d:8c:50:c1:
b6:1d:c8:ae:77:06:ae:75:a1:a6:d9:9c:08:3d:10:
08:62:9d:d8:88:8c:14:15:c5:b6:ff:d0:f4:9f:7c:
be:d6:37:5a:f8:6e:45:dc:a6:ed:a1:8b:6b:41:96:
7d:f7:44:6a:e2:a3:d7:9c:98:ef:e6:01:0d:ca:2c:
b4:a7:83:dd:ac:65:ba:6f:fb:a4:44:1b:b0:88:bf:
ee:fd:3e:91:1f:97:2c:01:56:4b:95:aa:40:b0:93:
45:2c:1c:64:f9:5b:71:03:df:71:eb:2f:19:77:56:
98:35:d9:55:f3:9a:7a:db:41:91:07:40:2a:fd:9b:
5d:93:fb:3c:69:0c:d7:94:47:fc:35:ab:b2:cc:a7:
69:c5:71:f4:89:57:52:a8:20:ce:d0:48:d8:5c:c8:
5c:00:fe:f7:a7:04:3e:42:36:ce:91:da:a8:4c:56:
3e:e9:10:bb:e5:bf:03:6e:e9:5b:36:36:6c:37:31:
61:9d:57:bd:bc:03:e1:da:81:12:bd:ea:05:f7:84:
69:f0:8d:34:e4:35:35:97:20:38:b3:b5:1f:e9:72:
7b:cd:c0:2d:14:a1:10:32:42:86:e8:e1:fc:d6:ae:
bc:1d:56:3c:2e:f9:05:23:8e:e6:92:49:4d:79:be:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:AD:D7:42:C4:39:FF:35:A2:16:06:0D:9F:9C:FB:EE:1D:20:A2
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:44:e7:f9:da:42:ad:52:c8:36:de:77:97:d4:54:66:14:
47:2c:b5:b0:28:96:bf:5d:8e:d9:9d:ae:c1:53:ef:0b:f1:76:
2c:dc:de:14:48:a9:eb:a3:b3:5d:b9:87:a4:84:9b:10:43:88:
7b:9a:67:57:6e:2b:fe:d2:6d:60:47:7b:e8:88:64:7d:99:a3:
bd:f5:1b:17:10:00:b0:c0:49:bb:12:b9:19:18:a3:a6:0c:41:
0d:65:f7:dd:78:87:61:00:19:2c:5a:2e:3c:d5:ff:ca:65:28:
45:8d:07:6d:88:df:ff:3f:87:5e:f1:83:e3:f5:e6:b2:f8:26:
b8:77:c8:86:b9:31:77:1b:f7:05:a2:59:b9:4e:9a:e1:a7:bf:
22:e7:2b:ea:2e:cc:65:6b:42:55:43:d5:50:6e:cc:f3:1c:96:
0e:ad:e0:f6:29:81:01:2f:f6:69:d7:7a:f8:df:43:cf:a5:f0:
d9:a9:1a:95:48:27:a0:a8:df:72:31:be:04:f8:f9:bf:87:82:
09:70:c8:73:3a:a6:f2:3d:ee:8b:1d:4d:3f:e4:b4:57:75:1f:
45:a3:b8:62:83:0d:39:81:03:e3:4b:fc:1e:21:9e:93:cd:64:
de:d4:04:00:a6:6c:a4:36:9e:97:14:70:4e:09:20:68:0b:fc:
cd:37:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:59 2025 by rpki-client on console-fra.rpki-client.org