Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: WYynR1c12Rna2dPCYga6ylkx3xAcWKxvja4uNuGpP2M=
Subject key identifier: C1:3E:4C:03:2B:B3:83:3C:A4:49:94:C1:B4:C3:6A:1D:BC:0E:73:53
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 0194C4D104ECCB0A93E1EAF6BBC815E22C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 0D12
Signing time: Sun 02 Feb 2025 04:00:20 +0000
Manifest this update: Sun 02 Feb 2025 04:00:20 +0000
Manifest next update: Mon 03 Feb 2025 04:00:20 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: Fp49uZkjp1gB+XUyLX/R/f2Mmvyyhw0u/GTSb2XyWcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:04:ec:cb:0a:93:e1:ea:f6:bb:c8:15:e2:2c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Feb 2 04:00:20 2025 GMT
Not After : Feb 3 04:00:20 2025 GMT
Subject: CN=c13e4c032bb3833ca44994c1b4c36a1dbc0e7353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:85:e3:3f:0d:f5:db:96:60:90:32:d5:19:
3a:91:68:2e:86:29:96:b8:4b:98:5b:d9:6a:78:50:
5c:5d:01:59:e5:a4:96:a6:47:d3:13:b1:83:6c:fb:
66:8e:9f:5e:1b:29:87:48:39:92:c3:cb:38:ff:5a:
84:63:d5:78:78:ac:9f:0a:d8:a3:55:91:b5:c1:03:
06:a3:9d:03:6b:b7:9c:74:4a:e7:60:9d:1d:a3:dd:
17:f2:2a:29:fd:70:b7:22:54:47:f9:ba:bc:29:d0:
1f:7b:12:c1:97:ca:ad:85:03:94:ba:95:7e:6c:c3:
97:10:75:1b:44:1c:fd:ee:d0:32:de:75:88:dd:90:
8a:31:ec:00:00:15:a5:20:53:3d:ed:df:ff:86:66:
73:c7:8a:93:3e:62:06:6f:1a:e5:be:66:d3:cb:76:
27:0b:3d:d4:7b:4d:fa:e2:e1:30:b5:32:ec:83:88:
d1:12:7c:04:1d:c1:c6:5d:e3:c7:7d:28:2c:c8:90:
72:a2:04:66:78:a8:39:13:87:9a:f0:af:b6:38:b5:
04:91:c7:79:70:cb:03:6e:b9:ef:c4:4b:4b:51:a9:
79:25:b1:cd:51:fa:90:1e:ee:a4:51:36:7f:99:a7:
4d:09:2f:de:6f:13:c2:98:34:59:54:e2:bb:2d:2c:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:4C:03:2B:B3:83:3C:A4:49:94:C1:B4:C3:6A:1D:BC:0E:73:53
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:08:3e:33:8a:2a:1d:da:6e:01:44:e6:e6:ff:a0:e2:63:
c5:ca:be:11:26:87:8d:5b:28:7e:63:fb:1a:21:1d:9f:47:ed:
03:33:6c:29:40:97:0a:e4:3f:86:c9:83:c7:9a:b6:5f:cd:e0:
3b:5d:a8:04:65:0c:a9:18:ff:db:40:ce:db:96:7b:69:f8:e8:
f1:b3:99:11:3a:85:2d:31:8d:f8:cb:75:6c:bd:6a:6f:24:fa:
f1:e7:ee:bf:bc:bf:e9:29:48:ff:f7:c2:e6:5f:1f:bd:3b:1e:
47:47:76:02:7e:4c:b2:73:8e:51:2c:24:ad:74:c2:4b:9e:0b:
f7:d7:a6:79:00:39:16:68:fd:0e:36:2d:c1:d4:32:49:79:9a:
41:72:a9:87:02:ac:42:d1:88:d4:17:68:7f:4c:c4:6c:6d:1d:
a9:f5:ba:7b:ec:75:00:7c:2d:87:8c:76:40:80:ef:69:ad:6c:
f3:2c:c1:9c:f9:c3:ea:fb:ee:69:53:f2:1f:01:ff:ef:79:84:
61:ee:e1:0a:6e:04:d0:c1:11:09:fa:5c:79:1a:4f:eb:24:58:
4b:1b:b4:7b:83:d7:8b:88:f3:06:50:19:83:1b:38:60:26:05:
5d:e4:f6:6e:76:ff:fd:ee:a2:39:63:f3:f2:c6:a5:0f:16:bf:
78:2c:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:29 2025 by rpki-client