Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier: gm1WwnsicQqs4ygZ01PNJyLNay/H2A4Hc2QdMxcBASc=
Subject key identifier: 88:F4:F6:60:65:8C:EC:51:98:62:0D:EA:FA:87:4D:37:6A:67:8C:13
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 0194BA848BB77AAE717D708DC3416991D053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: XhuAzdOIdnjpuqg/duutYNdrj1YqVm31TZoyCTUSpXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8b:b7:7a:ae:71:7d:70:8d:c3:41:69:91:d0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=88f4f660658cec5198620deafa874d376a678c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:14:26:31:95:b2:3b:68:9b:10:47:4b:c1:
a2:1f:7a:a3:97:cf:93:29:16:99:27:3f:3f:0d:72:
87:7f:40:e1:f4:8a:a2:a8:76:44:5d:e9:ea:30:18:
41:3d:37:29:6d:7d:ee:b8:b4:ef:98:3c:f4:d7:3c:
4a:60:6f:38:6f:13:bf:c0:c2:e8:45:7f:4e:e7:27:
84:20:5a:3d:54:9c:b5:f4:3e:2a:6c:41:21:fa:79:
72:d0:b2:e4:9e:c7:11:1c:ff:a7:8f:86:8e:27:67:
4e:55:2e:be:fa:bc:e8:31:ac:3b:64:78:70:97:29:
18:14:2e:1d:21:04:09:75:33:13:e1:65:ff:e1:95:
7c:01:87:cf:23:89:6b:f3:0d:c4:b3:be:17:55:92:
a9:19:e5:ce:40:91:2c:1d:09:aa:f5:72:28:19:ef:
83:c4:21:e2:2f:aa:52:26:05:5b:55:16:2f:ea:80:
1f:7a:b9:9b:bc:ae:28:80:ec:7a:c7:c1:8e:ad:b1:
ff:61:35:a0:1a:81:bb:f6:58:79:41:65:8c:90:f8:
2a:9b:53:37:9e:c9:1e:b2:87:ff:58:98:8f:e7:2d:
fa:47:95:a7:e3:43:78:14:a0:f9:66:c5:fc:ac:a7:
1f:d9:99:b3:e9:97:a8:f9:21:be:8e:91:f4:cf:ad:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:F6:60:65:8C:EC:51:98:62:0D:EA:FA:87:4D:37:6A:67:8C:13
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:98:b0:ab:bb:c1:c5:48:6c:24:e2:3f:2c:13:c2:57:26:ee:
61:68:75:ff:fb:0e:9d:a4:27:38:7a:81:6c:43:6f:0d:b1:06:
67:6f:8c:a3:1c:37:f3:b3:0d:b9:df:35:07:94:3d:a8:c9:d9:
b7:db:aa:09:c2:20:f2:9a:ab:9b:11:21:a6:2b:90:ee:c4:48:
a2:6f:3f:94:81:69:67:ce:a6:67:d3:c9:0a:a0:33:03:5e:1d:
7a:06:38:71:da:72:3b:ec:21:f6:24:36:79:bb:ae:f7:c0:aa:
b2:e2:e5:01:82:8e:26:d3:0f:b5:ee:31:e6:1b:3d:e5:1f:fe:
39:5a:4f:90:1b:2f:5f:9a:dc:43:46:d9:51:37:b7:a0:e3:d0:
63:0a:05:cc:ad:8d:28:97:4d:1a:16:c2:2f:58:bc:2d:be:c3:
f2:e4:49:24:d6:93:68:09:a3:f5:1a:2b:ba:a6:d9:09:8d:74:
15:23:da:11:8e:b6:d7:26:a3:5f:09:61:e0:a4:40:cb:5d:00:
98:bf:3a:c4:f7:50:43:60:c4:b6:61:c0:74:17:96:16:51:fa:
1e:54:0d:4b:53:ea:dd:ae:4c:34:d0:f6:2a:74:52:ed:7e:81:
8f:d5:42:52:4a:8d:f6:b0:b6:35:39:c5:d2:77:fd:27:ad:41:
24:db:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:08 2025 by rpki-client on console-fra.rpki-client.org