Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File: C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier: gxSjnK6b9k9rJxNd/R+zJz/ybyM/fo4gR/5GbkHISUA=
Subject key identifier: D7:47:3A:75:EA:F7:06:07:DD:E9:79:6C:BF:04:CB:B2:CE:27:12:E6
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer: /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial: 0194BB28FD6632C1C8EE7B81040249658148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number: 0A3C
Signing time: Fri 31 Jan 2025 07:00:13 +0000
Manifest this update: Fri 31 Jan 2025 07:00:13 +0000
Manifest next update: Sat 01 Feb 2025 07:00:13 +0000
Files and hashes: 1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: f8WRBBRxn8jPVyk+QMhXWwqRvm5ZD03fVXZhKYFSr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:fd:66:32:c1:c8:ee:7b:81:04:02:49:65:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
Validity
Not Before: Jan 31 07:00:13 2025 GMT
Not After : Feb 1 07:00:13 2025 GMT
Subject: CN=d7473a75eaf70607dde9796cbf04cbb2ce2712e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:5c:c4:24:dc:51:ca:11:88:d7:6b:eb:7f:
5c:22:49:8e:f1:bd:f1:0f:14:dc:a3:c0:3a:59:44:
b2:6d:36:4d:dd:03:a2:d1:a2:43:8f:e7:33:55:f1:
5b:8e:54:13:7c:5d:64:0b:20:6f:e0:c8:bb:e6:79:
93:9b:42:36:51:39:8b:51:a2:cf:a9:fa:96:bb:27:
84:c5:97:d9:24:13:11:94:b3:bb:80:21:49:07:03:
00:ec:1a:73:a1:fd:3b:d2:9e:81:e1:45:63:e7:dc:
23:57:cd:6d:43:6c:b7:ed:ea:52:b2:07:d4:9a:42:
4c:a1:59:ee:78:d9:13:ac:6a:3f:f5:df:21:69:87:
4c:f3:ff:d5:2d:48:6a:36:33:79:7f:be:b8:3c:47:
7d:9d:57:3a:01:3e:80:0e:87:40:a6:bc:85:16:b3:
7b:96:b7:84:cb:0d:6b:cf:c1:74:2a:fe:6d:0e:13:
d2:4b:fa:e5:a0:8d:07:c5:6d:38:f1:7d:3f:7e:ab:
d0:bb:ee:93:65:30:ad:e3:46:99:34:4f:53:d5:74:
c4:45:bc:e6:8f:34:86:24:51:bc:63:5b:67:42:84:
64:4a:40:12:cb:ce:57:a8:94:85:ef:80:1e:a2:95:
cb:68:d6:a1:56:a4:b1:b7:b1:c7:14:0c:ff:49:a6:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:3A:75:EA:F7:06:07:DD:E9:79:6C:BF:04:CB:B2:CE:27:12:E6
X509v3 Authority Key Identifier:
keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:85:19:0e:a7:11:5c:2b:13:0a:74:74:d1:4b:cd:09:dc:
29:fa:ef:da:47:29:92:b4:e9:90:6d:14:f1:88:4c:6a:0f:b1:
55:c2:a0:2a:5c:9a:75:db:37:1a:53:8e:98:4a:cc:5a:7f:c2:
a9:2d:1e:48:98:3e:8f:06:15:c0:a6:a8:d0:e6:28:b8:78:b6:
25:75:c3:d5:ae:5b:63:b8:8a:fc:b9:31:bc:67:aa:1e:3b:7b:
86:85:27:7b:b5:f6:04:83:5a:36:62:d0:62:2d:4d:32:5d:9a:
cf:c4:e3:5e:be:cf:bb:9f:e5:d3:9c:d4:e5:36:55:ce:8a:25:
c1:75:5b:aa:5a:ed:96:1c:b5:9c:c1:75:de:e4:e7:62:2e:25:
80:a9:a4:e7:f4:db:3f:ab:d8:ff:30:eb:70:12:b4:3a:da:03:
0f:2d:ac:4a:94:63:9e:4a:9e:0c:ce:cb:59:30:bc:43:7e:d5:
fe:3d:b1:a6:80:34:5b:47:cc:bb:e8:55:1b:9a:17:97:44:68:
d0:e2:9f:86:03:0b:0e:62:8e:cc:e7:8d:f9:7a:c2:ca:96:23:
25:24:88:e3:76:44:d3:0e:a4:65:ad:4a:24:27:47:0a:b2:b8:
52:26:1b:7a:d9:07:4e:27:c2:a5:1d:20:d6:1c:19:e4:5a:6a:
fe:44:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:02 2025 by rpki-client on console-fra.rpki-client.org