Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: EwZ5EuuczMBpEum7Sf9NQ0f5k+ImYyJEHyXsOkEMOAs=
Subject key identifier: DD:B7:7E:20:B5:A5:5B:18:14:1A:E1:8C:70:2B:B4:69:2A:0D:79:36
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 0194C3F5F9C78FC0CCA339C66003024CD2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 0637
Signing time: Sun 02 Feb 2025 00:01:04 +0000
Manifest this update: Sun 02 Feb 2025 00:01:04 +0000
Manifest next update: Mon 03 Feb 2025 00:01:04 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: 7LdZQGWIDxQFklNmj0LA7+Txzku8Ub0/XnFBbfVLl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f9:c7:8f:c0:cc:a3:39:c6:60:03:02:4c:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Feb 2 00:01:04 2025 GMT
Not After : Feb 3 00:01:04 2025 GMT
Subject: CN=ddb77e20b5a55b18141ae18c702bb4692a0d7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:cc:9e:7b:d8:6f:56:49:dd:95:0b:67:0b:
75:03:07:a8:6a:fb:23:bc:17:af:20:1c:3c:6b:8b:
e7:ff:91:d9:91:f8:c8:bb:d9:40:6f:f7:55:cb:39:
20:ee:01:dc:f4:a1:7a:29:d3:1f:91:0e:19:83:d3:
7c:39:5b:d0:f0:9e:4c:36:2c:fc:9e:26:f4:55:e8:
9d:0d:25:54:c7:2b:97:32:db:6c:c7:f2:dd:4d:6f:
4a:1c:df:e3:0a:20:df:09:2d:bb:c0:b1:57:fc:f0:
6e:9a:fb:b1:2a:ef:5d:cb:57:a6:25:77:22:9c:6f:
bb:bd:01:70:40:f4:83:89:c5:63:dd:b3:bf:d9:0f:
0f:b2:69:d1:4c:60:ab:ad:d7:0b:34:c9:55:f5:0f:
bd:9f:c1:83:38:db:5e:ce:3c:09:72:68:fd:a7:3b:
76:9e:92:24:96:9b:c8:71:d0:fe:56:0f:93:41:9c:
e2:00:0e:0d:dd:b1:03:95:2b:1f:07:04:dd:1a:39:
fb:b4:10:3a:76:53:f2:48:04:a1:a6:9f:20:cc:7c:
60:5c:4c:e4:40:f2:e4:55:38:83:78:19:a0:c4:f9:
96:5f:19:35:44:25:10:c6:54:3d:8c:27:4a:e4:90:
f3:fe:5b:81:3f:b0:63:af:1e:e4:85:32:df:b6:26:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:7E:20:B5:A5:5B:18:14:1A:E1:8C:70:2B:B4:69:2A:0D:79:36
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:3d:6b:08:ce:03:b8:61:bc:46:cc:33:12:1e:01:bb:e4:
5b:9a:37:95:50:82:29:8a:f2:a7:e0:c5:55:bf:1f:ed:77:8c:
1f:09:1d:d9:c3:8a:ac:0f:4d:8a:56:58:90:29:3b:c0:7b:83:
2a:99:37:37:88:32:15:a4:c4:f6:9f:bc:1e:19:a5:7f:ad:0b:
36:e5:93:55:28:42:9b:50:1c:4b:38:2f:b6:af:5f:22:ff:94:
41:e3:32:53:8c:1e:9c:9e:bf:b0:b0:5b:d4:0d:d9:f4:6b:48:
82:9a:d7:b4:af:af:f5:ae:c2:42:97:5c:85:9d:be:d4:aa:4b:
54:f8:0d:11:74:7d:17:72:59:0b:cd:07:0c:c7:09:ff:a9:82:
87:c9:d9:50:fe:c1:05:8c:0a:f6:00:a0:c1:b7:df:c4:dd:52:
7c:0c:bb:17:83:81:d0:d1:1f:b7:6c:e3:da:c9:44:eb:85:9a:
78:50:a1:ac:73:87:c0:c1:0c:dd:9c:ee:e7:fd:1e:48:b5:81:
27:29:05:bb:cd:21:8e:e6:e9:94:92:1d:45:0d:d3:e7:9a:e1:
31:db:71:70:6c:17:f8:4b:89:ab:f1:a5:3f:c7:47:1a:16:32:
e1:02:f3:00:fb:3e:df:6a:56:9f:67:08:06:61:03:81:13:72:
dc:7a:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:46 2025 by rpki-client