Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: O48/MAjH7JRAnkSlMKLW896FdyjXDnLM19d/h7R8t7g=
Subject key identifier: 45:AC:60:66:6A:CF:48:47:E6:B8:EC:95:57:32:D7:61:14:4C:60:3F
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019510C6FD42D6B6D8BF22EB406FDC0F13AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0DAD
Signing time: Sun 16 Feb 2025 22:00:31 +0000
Manifest this update: Sun 16 Feb 2025 22:00:31 +0000
Manifest next update: Mon 17 Feb 2025 22:00:31 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: 9E3nMMRLuE2+31WW2v7KRNB2L+JzUp6t9v9jAtrAYE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fd:42:d6:b6:d8:bf:22:eb:40:6f:dc:0f:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Feb 16 22:00:31 2025 GMT
Not After : Feb 17 22:00:31 2025 GMT
Subject: CN=45ac60666acf4847e6b8ec955732d761144c603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:d5:84:9e:01:c6:6b:15:16:d0:a6:97:a8:
47:ec:cc:4d:4c:b1:6e:c1:1d:ca:28:b5:e0:23:25:
b1:27:38:ad:fd:e3:8c:c6:46:bb:87:21:26:a5:e9:
c9:98:86:0c:2d:88:a2:d1:c2:02:f7:79:e3:30:56:
ef:25:0b:c7:b2:15:39:b5:bc:6a:e1:e4:9f:08:88:
29:11:ab:aa:fe:9b:45:3b:39:80:8c:04:b8:58:cc:
bf:88:58:af:84:7a:63:76:c3:a2:fb:b4:f7:a3:91:
56:72:c9:d5:c8:0a:63:38:2e:76:71:63:01:e3:a3:
d5:7c:11:80:f1:b3:d7:5c:78:72:65:94:68:73:ed:
66:c9:63:c9:7f:25:83:92:56:5c:5d:fe:1d:94:e7:
ea:f9:86:b4:1a:97:e9:ba:95:f6:71:e5:06:64:fe:
b0:a3:00:db:08:23:0d:4a:3a:a9:19:38:e5:85:15:
df:18:ef:1c:82:70:f6:4a:48:f3:f6:66:9f:3c:c9:
4d:49:3f:2a:bf:a2:6c:a8:90:39:36:e7:d6:a9:56:
e9:65:32:02:d9:0e:a0:53:c3:00:5f:22:1c:c8:dd:
7c:b2:21:d0:c7:8e:f8:d9:d2:6a:cc:e6:a9:ef:72:
c2:10:49:13:89:e0:c3:a6:41:ab:42:23:04:eb:83:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:60:66:6A:CF:48:47:E6:B8:EC:95:57:32:D7:61:14:4C:60:3F
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:00:be:73:64:69:9d:76:8e:60:23:98:e5:a5:e3:8f:35:
1c:6e:53:30:71:aa:65:ab:49:35:8f:f3:3b:fa:8f:6a:45:a8:
6a:1c:c2:1b:c3:1c:64:75:a0:8e:be:ff:02:50:5a:24:ac:e7:
c8:20:bd:26:64:04:35:36:53:47:0c:84:3a:0a:15:ca:ab:82:
26:c9:48:67:72:7d:a5:cd:89:c5:d0:aa:28:b4:d9:23:81:f2:
65:fc:70:5e:e8:81:0d:ca:b2:f4:6b:8b:8f:3e:2a:29:27:a7:
ad:42:65:58:5f:35:a8:98:14:88:40:a6:f1:41:d1:94:20:8b:
3e:50:aa:0f:bd:38:3f:9b:51:af:49:f5:e0:8b:90:1f:5f:70:
cc:71:5b:fc:4c:34:32:a4:a4:7e:5c:7a:f1:49:09:61:89:f5:
b0:eb:e7:51:64:f3:01:2d:2c:a6:29:78:ce:bf:76:e1:2c:3f:
ad:f3:0b:2c:d0:f6:72:e9:0c:53:7c:f2:c7:8e:a0:b8:68:44:
2c:1c:e2:64:09:70:f2:7b:96:f3:c0:11:19:73:6c:b3:6a:cf:
90:25:3e:1d:04:a4:39:40:70:ce:bb:e6:96:c5:62:65:f3:cf:
35:ba:22:d8:42:9d:54:9c:a8:ab:96:95:45:3a:c1:fa:eb:69:
b7:f6:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:48 2025 by rpki-client