Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: vxnHwxACCY9ucfDAP+IgI5TTpYxOsPvan4bZOKoTmEw=
Subject key identifier: 55:33:71:25:E3:12:C5:80:D5:FE:77:59:9E:26:38:B1:30:DE:55:6F
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019511348633603BCF7F5B283A5E16A813B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1116
Signing time: Mon 17 Feb 2025 00:00:09 +0000
Manifest this update: Mon 17 Feb 2025 00:00:09 +0000
Manifest next update: Tue 18 Feb 2025 00:00:09 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: q4VMxWGyHGALKmFcHLR5mi5YNWy9KRYClWhGsx70jXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:86:33:60:3b:cf:7f:5b:28:3a:5e:16:a8:13:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Feb 17 00:00:09 2025 GMT
Not After : Feb 18 00:00:09 2025 GMT
Subject: CN=55337125e312c580d5fe77599e2638b130de556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:fe:dc:60:63:4e:19:fa:47:e2:17:50:d8:
a4:80:05:1c:64:0c:c8:78:7a:93:e9:73:b2:7a:43:
e6:77:9d:be:d2:a5:de:43:12:58:dc:78:b7:4a:ea:
74:1c:94:d2:55:7f:3f:d7:49:12:bb:0d:e4:70:1b:
87:84:39:a0:15:c8:f3:ed:b9:39:6b:25:d8:c1:dc:
e7:26:6b:85:ba:42:18:b5:b3:45:63:bf:50:9c:58:
e9:0b:8f:52:05:39:1c:9e:62:99:23:61:e7:77:2c:
b5:87:1f:ed:57:c5:38:95:09:70:30:91:d4:42:db:
d7:e2:7d:54:a2:9b:48:35:f2:f6:ca:af:fc:f9:74:
0e:64:67:92:24:c3:c0:ce:fe:09:09:0f:1a:ad:70:
f2:b6:6a:ab:a1:24:76:a0:dc:68:d5:f3:18:da:f6:
79:ea:d3:7d:0d:62:9a:e7:7c:7c:09:2c:a8:cc:b7:
32:d2:21:6b:ba:ef:73:75:ee:ca:42:17:41:75:8e:
24:ee:07:3c:94:9c:7e:86:54:6f:7f:7f:11:05:3e:
6c:3d:01:de:d2:c0:43:e1:44:4a:12:49:90:ec:95:
62:c7:f1:18:4d:9d:1e:e9:43:09:d2:dc:ca:35:95:
4a:9f:12:ee:4c:96:05:eb:a6:7f:06:d7:1f:00:fe:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:71:25:E3:12:C5:80:D5:FE:77:59:9E:26:38:B1:30:DE:55:6F
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:29:d9:31:c5:af:c7:15:ec:e4:bd:2e:44:ab:f8:31:3b:
c1:fc:42:ba:03:2d:1a:8d:9f:b7:9a:16:b4:63:2d:7d:d8:04:
ff:e8:82:80:eb:49:3e:7d:a2:93:26:4f:c9:c3:04:fd:f2:f9:
dc:9b:d6:93:76:9d:0e:e4:b4:73:df:3c:f2:72:34:ac:9d:20:
ab:30:90:e3:48:0d:8f:24:20:ee:97:c7:64:6f:31:01:a8:2f:
10:42:17:4b:d5:8f:14:42:7d:62:b0:ba:b2:e1:f9:ad:c0:b5:
24:3b:22:a5:0f:91:a0:b8:ba:26:f5:09:3d:4f:16:0b:19:04:
34:75:a0:12:6b:f8:77:ae:3b:1e:b5:b9:e4:6b:c4:94:6c:94:
71:83:6b:8b:4a:24:75:d8:1e:36:2b:0e:dd:c0:09:96:46:17:
41:ca:19:96:b4:da:f7:cf:b9:aa:74:10:13:d7:22:6d:98:be:
b5:c9:f4:03:51:b3:24:c1:2d:9e:95:4f:3d:bb:33:02:bb:f0:
48:c0:c4:f5:9b:c9:89:dd:96:d4:99:dc:bc:7e:41:9f:f9:5d:
07:5a:c0:a5:d3:1f:a4:fb:0a:ac:22:ad:dc:95:29:85:3e:ad:
b5:f8:71:54:cc:ae:18:82:18:d9:92:0f:47:9a:fd:2f:7c:f6:
52:c1:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:39 2025 by rpki-client