Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: hvn8rXzDz5TF7uukmjpWoTpgvxInZHNESS3MdOTauQg=
Subject key identifier: AB:71:5D:F5:E4:C0:51:16:3C:3E:68:9B:54:D5:EC:19:CF:15:61:81
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 0194BB9758773ECCAEB5CFDF4379BC7B9C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 09:00:45 +0000
Manifest this update: Fri 31 Jan 2025 09:00:45 +0000
Manifest next update: Sat 01 Feb 2025 09:00:45 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: rOojXT6x143LsFByr9ySzRYyT5N+4GYqn9JfKiS0Arc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:58:77:3e:cc:ae:b5:cf:df:43:79:bc:7b:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jan 31 09:00:45 2025 GMT
Not After : Feb 1 09:00:45 2025 GMT
Subject: CN=ab715df5e4c051163c3e689b54d5ec19cf156181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:12:9b:62:2c:56:af:50:33:b5:5b:84:d1:
8c:d3:85:52:7d:32:49:3c:3f:12:00:91:f9:24:5b:
07:53:1f:f0:c3:c1:96:19:91:91:74:13:e6:b1:89:
ce:a7:18:83:0f:ed:96:06:60:75:86:3f:17:f3:42:
6e:5e:dc:ec:4a:86:fd:b2:b7:63:14:89:10:bc:19:
84:ac:d7:97:e4:b5:10:c6:09:3b:45:9c:6a:a1:6d:
d9:9f:95:ad:2d:49:f3:2e:4c:a0:c1:76:f7:83:94:
e2:2e:d8:01:7f:48:bb:a6:14:e4:42:e5:7b:ee:5a:
a8:b0:3d:51:11:22:5c:f1:cc:a6:b2:1b:b5:c9:12:
70:ab:13:95:db:97:b6:42:c1:27:1b:21:20:f5:0a:
e7:e0:6a:64:9d:b1:1a:93:01:59:14:24:1c:01:00:
91:3d:47:31:d7:a0:45:89:94:94:4c:8f:e1:3a:11:
3e:b7:c6:6d:89:34:6a:27:00:db:f9:61:ce:d9:c5:
75:0c:5d:20:43:b4:5a:e5:11:24:45:54:26:e5:69:
8b:06:3f:02:3f:f1:e3:b9:72:0e:eb:f6:fb:05:e7:
de:07:05:ca:3e:4d:37:d5:5d:ee:4f:0d:52:73:00:
7f:22:77:d7:96:ed:cb:47:86:eb:01:3f:2d:a4:14:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:5D:F5:E4:C0:51:16:3C:3E:68:9B:54:D5:EC:19:CF:15:61:81
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:3f:c9:a3:ee:0a:08:6f:ea:0f:50:c9:e9:0a:b1:53:ad:
e1:ee:6c:81:4a:dd:09:19:47:2d:b0:71:78:0c:7a:78:8d:3b:
d1:31:e9:88:b3:81:d1:21:6b:90:2d:2f:97:5d:c4:ad:56:27:
c5:40:52:ce:bf:34:15:da:61:65:b9:9d:d9:a4:45:51:61:8d:
58:77:82:c6:09:61:c7:a9:13:6f:77:1d:b8:44:5e:5e:37:4b:
18:54:fd:a0:7d:81:0a:e4:ea:8c:26:4c:87:9c:c8:0c:18:00:
45:55:7a:f5:87:ec:ad:df:9b:c9:2b:60:3a:b3:0f:6c:1a:b6:
b8:c8:a9:5c:b7:9e:62:b8:c5:1e:3d:19:f6:d6:f6:91:83:8b:
2b:d4:73:db:67:68:54:98:7d:30:39:08:c0:42:bd:eb:93:45:
f7:38:7d:2b:de:bc:59:77:02:65:88:90:28:21:3a:65:9b:d9:
05:55:62:9d:4a:1c:b4:22:f8:07:5e:a2:dc:13:ec:14:03:61:
83:72:50:26:ac:cd:4b:fd:87:7b:d1:1b:65:73:12:9a:42:ef:
36:c5:a6:4e:5d:50:33:ca:47:98:d2:5b:1e:40:c4:7e:41:79:
8c:bd:f7:03:e9:b3:6c:b9:fb:61:13:5e:93:b0:0c:48:c0:de:
10:2b:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:23 2025 by rpki-client on console-fra.rpki-client.org