Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: 4K2lZnud/XsAMPqWBLvHhPcT9UD4idKCmtvrzxOpIPc=
Subject key identifier: FC:4A:4C:A5:03:5B:34:9D:36:78:72:4E:29:2D:93:27:22:6B:D4:49
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 019512109C030CB2E5BA5806D1BB4788ADC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 0733
Signing time: Mon 17 Feb 2025 04:00:33 +0000
Manifest this update: Mon 17 Feb 2025 04:00:33 +0000
Manifest next update: Tue 18 Feb 2025 04:00:33 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: 2qwMCqHC/7IJGXUOECMyFsT3U2V+mavP0PJCU8w0Wdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:9c:03:0c:b2:e5:ba:58:06:d1:bb:47:88:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Feb 17 04:00:33 2025 GMT
Not After : Feb 18 04:00:33 2025 GMT
Subject: CN=fc4a4ca5035b349d3678724e292d9327226bd449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:96:06:de:0a:4b:be:97:ab:b7:8c:59:6a:
6d:63:85:14:b5:1b:99:01:33:2e:0e:a8:8c:a6:2c:
e7:b2:0d:e2:b6:22:02:e1:bf:6a:e8:00:7a:6e:ae:
ed:f6:67:45:39:00:20:0d:b7:45:cd:5c:87:6d:0a:
ff:fd:49:85:de:99:a2:89:34:82:e1:cb:8c:41:7f:
eb:3d:cc:5e:c7:a1:46:9b:5a:c5:c9:45:60:87:18:
77:6c:e1:ef:07:a1:a4:55:79:d3:11:8b:3a:37:42:
a4:9b:e8:3b:10:ce:da:c0:b6:07:4c:ba:22:b9:ab:
f0:b4:64:ca:90:23:36:a6:a9:6a:f8:51:8b:0f:00:
64:32:70:2f:01:05:51:9e:46:ef:82:fa:d1:fb:d3:
6f:cd:c0:54:6f:fa:59:bd:5f:65:c3:41:59:92:33:
c6:ee:e8:f2:17:7a:53:f0:8b:aa:89:35:f5:16:3d:
ea:1d:4e:01:ce:14:ec:6e:8a:e3:64:1a:1e:f3:6e:
5f:5a:35:bb:03:10:72:fc:58:be:51:e6:af:ce:a4:
a8:f3:17:87:17:89:91:33:e4:d7:f6:4e:54:8a:e0:
4e:39:d2:97:7b:0d:64:49:33:6d:37:98:b7:4a:99:
63:16:6b:4b:11:f9:95:bf:7b:a0:17:67:e1:0a:49:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:4C:A5:03:5B:34:9D:36:78:72:4E:29:2D:93:27:22:6B:D4:49
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:4b:26:d7:13:a4:c2:fd:55:ba:a8:47:92:36:e8:98:07:
62:04:26:a5:60:23:44:a5:8d:ae:70:6f:16:40:17:0b:62:8c:
31:e0:e9:e9:e4:c2:99:b1:30:de:34:4e:e2:e7:4a:22:89:72:
12:74:df:c5:50:14:aa:23:dd:23:40:4b:25:29:1c:cf:45:bf:
1e:e6:ed:53:9e:f8:b9:18:b1:04:9e:c3:22:dc:18:af:49:96:
2c:61:26:b6:1d:4f:6a:5a:37:6c:dd:8c:3e:8b:8b:47:96:60:
f9:a6:7b:b4:aa:7e:eb:d1:d6:c3:c6:37:68:18:1c:1d:a0:5b:
1d:0b:58:39:6c:ac:7c:a0:cd:ad:fa:22:7b:6a:b2:a1:5b:13:
34:9f:33:49:00:49:4e:98:32:08:a7:a2:f4:3a:9a:cf:14:e7:
a6:98:fa:2a:6e:81:c2:2b:4b:18:e8:70:0a:9e:c9:a2:70:cc:
f4:73:4f:16:b8:0d:27:c7:94:3f:34:fd:8f:9d:80:3d:a3:a0:
7f:a2:24:24:a2:62:dc:fe:a5:9a:8c:c0:44:02:4a:37:da:3c:
ef:b9:19:18:b3:c9:14:1c:d2:9a:f7:aa:c8:63:ec:71:61:15:
f5:ac:7b:74:f7:b3:1a:0b:0f:87:97:e5:93:60:c4:63:42:4c:
28:7d:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:50 2025 by rpki-client