Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: 7p4ocrTywWoyNRsxGoPtZ6EuwhuPm120FvsrCNR51gM=
Subject key identifier: 3E:CB:57:C0:CA:41:32:E1:21:8F:55:57:76:93:B2:DB:93:FE:48:C5
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 0194BB29900345BB4B45482F35A40B3E81E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 0B09
Signing time: Fri 31 Jan 2025 07:00:50 +0000
Manifest this update: Fri 31 Jan 2025 07:00:50 +0000
Manifest next update: Sat 01 Feb 2025 07:00:50 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: H9OdjAV0raL1LsJsnr59XBrOg9VdEKvQwfkpXXFFqgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:90:03:45:bb:4b:45:48:2f:35:a4:0b:3e:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Jan 31 07:00:50 2025 GMT
Not After : Feb 1 07:00:50 2025 GMT
Subject: CN=3ecb57c0ca4132e1218f55577693b2db93fe48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:15:80:4b:fb:07:8d:6b:d6:21:58:11:60:
c2:c5:88:49:50:63:c0:86:04:6d:24:8a:fc:f0:14:
ff:48:d6:68:e0:d7:dd:cb:2b:b1:1b:99:be:a2:dc:
46:ad:22:c0:34:c0:c8:3b:2f:b6:c3:f3:c5:07:3b:
aa:f8:a4:fc:e0:01:28:0b:01:c0:47:d9:9c:eb:1c:
78:a6:33:57:e3:4a:fe:ce:7f:91:b9:36:2a:ad:22:
f7:0f:a9:d9:e7:c5:c9:4f:1c:79:cb:7d:27:9c:1c:
ca:5a:b3:b6:85:43:9d:42:05:db:76:48:2e:9e:9c:
ca:2d:8c:d7:6b:a0:de:db:25:1a:f4:2b:3b:c4:7a:
a6:8b:3f:d1:49:95:0a:42:1c:a1:eb:d5:8c:e8:67:
22:04:f1:7e:d6:df:32:1b:5d:a3:e2:07:fc:b4:13:
8f:0e:79:e9:8a:8a:9a:1f:b1:b1:3d:e7:79:06:22:
2b:07:2f:e3:3c:9c:fd:76:a2:0c:ba:d8:9c:96:ae:
05:5b:41:98:bd:a9:f5:75:05:63:65:59:e5:f7:0b:
80:e5:4a:3d:80:20:92:b5:0e:3d:e9:8d:12:6c:01:
90:3e:bd:b0:c7:14:38:b8:65:77:15:09:1f:e2:cf:
f9:99:45:61:60:d5:d8:cf:cb:1f:aa:ed:a9:55:ee:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:57:C0:CA:41:32:E1:21:8F:55:57:76:93:B2:DB:93:FE:48:C5
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:35:bd:c5:27:00:5c:26:31:7c:e2:40:db:d3:45:77:cb:
89:c1:cf:56:a8:58:b9:24:53:fe:80:07:4a:06:f5:e5:71:fd:
71:bc:0f:54:53:82:f5:91:af:bc:9a:91:ee:1f:ae:1d:de:35:
8c:5e:b5:38:72:9d:c9:85:34:71:a7:43:82:95:0c:e6:bb:e9:
5a:a0:63:cc:b7:a0:dc:fb:a3:3f:ad:9f:db:ac:50:23:11:60:
cd:ff:e9:50:fa:1b:38:fd:f6:71:a3:16:6c:df:89:bd:9a:22:
2c:91:82:a3:ff:7d:b7:18:3c:0b:e1:83:6c:2c:9c:e3:14:08:
5f:67:5c:ad:aa:d6:a9:05:34:4d:21:a3:8e:19:fe:ac:5b:a9:
1e:af:18:22:c0:67:26:55:ae:d5:80:b4:eb:62:c2:61:0d:86:
3b:18:7e:19:78:e5:bd:1f:84:61:2b:4f:fb:35:69:d0:4c:8d:
52:ad:de:74:13:cf:be:01:f5:24:f4:4e:c4:66:e4:c0:d5:aa:
a4:c2:4b:7c:a7:4d:2f:ee:ca:a1:40:7f:7b:98:d2:74:c8:a4:
3e:77:4e:5a:ca:2f:a7:23:fe:80:85:81:d6:f3:3b:aa:7a:28:
24:ea:d0:10:a9:64:22:a7:d9:c4:33:80:ca:8b:ee:26:b8:1f:
a1:b3:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:02 2025 by rpki-client on console-fra.rpki-client.org