Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: 3+CmsS7uwfciv/AW9USj8sotyD+B29I6RUlM64h12b8=
Subject key identifier: 69:54:17:9A:6D:47:61:E0:B6:48:AE:02:A7:0F:D6:6E:D9:20:EF:F0
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 0194BB96FF006B798323DC51F2A2E9A12BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:22 +0000
Manifest this update: Fri 31 Jan 2025 09:00:22 +0000
Manifest next update: Sat 01 Feb 2025 09:00:22 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: c2FIhH8uZDiX3POazspTU1FYOfatMGAom9fp36m3XAI=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ff:00:6b:79:83:23:dc:51:f2:a2:e9:a1:2b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Jan 31 09:00:22 2025 GMT
Not After : Feb 1 09:00:22 2025 GMT
Subject: CN=6954179a6d4761e0b648ae02a70fd66ed920eff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:85:62:f0:12:91:68:e4:56:e6:61:3c:b7:
97:03:4f:c5:32:a0:35:77:93:fd:11:bf:96:af:a8:
59:f5:b3:63:87:1e:3a:ee:bb:66:62:39:70:ab:ec:
18:36:f8:d4:46:c7:80:c2:32:eb:a3:23:ea:e5:b0:
98:5c:c7:a5:0f:80:1a:ee:94:cc:89:91:9c:3a:58:
9b:5d:ef:f9:5c:81:f3:79:5c:8c:e2:03:2b:74:9d:
87:d6:b8:60:24:05:32:a3:c0:8e:24:72:cb:68:95:
98:3b:3e:84:cd:04:44:36:20:a7:58:26:6f:bc:77:
25:07:2e:50:46:2a:c8:46:4b:82:98:e4:31:ab:e6:
29:07:a5:5f:e7:53:64:c0:c5:32:dc:6f:b2:ca:36:
12:9d:e6:0b:74:a7:8d:d8:c9:7c:f7:e3:50:d5:da:
cc:b7:e3:17:cd:ff:ea:6b:3d:45:7c:42:ae:d6:b1:
ee:66:9c:aa:22:b1:ef:4f:b7:6e:04:fe:ee:b2:ad:
12:2c:9e:8a:f7:97:e2:38:35:c5:43:58:0f:18:73:
b4:53:8c:2f:75:51:ce:0f:b4:33:1a:65:60:61:f5:
a7:07:2f:6f:bf:7e:0e:cc:52:a0:1a:67:03:9b:d5:
5f:94:db:f6:10:59:b8:c2:f8:bc:7d:98:8a:20:e6:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:17:9A:6D:47:61:E0:B6:48:AE:02:A7:0F:D6:6E:D9:20:EF:F0
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:99:46:1a:64:a2:4a:a0:e3:af:34:c4:5b:20:1e:cb:60:29:
65:20:1c:4f:6b:28:a2:e1:7a:03:23:57:c3:ba:c7:d1:b1:dd:
46:45:59:67:b7:c3:53:13:00:21:6f:5d:22:0c:92:6b:8e:e5:
db:a9:3f:b3:19:c1:53:32:36:ee:73:95:1f:70:a4:a6:02:91:
de:0e:73:cc:d8:d4:d0:f4:20:71:fe:6e:47:58:54:85:27:29:
45:32:8e:60:9f:f7:c2:d6:14:02:63:f8:75:f9:4b:68:f8:75:
05:78:c3:94:2d:bd:74:f6:2b:65:23:5e:3e:16:e5:82:d0:84:
4a:31:4b:ec:3b:a1:6e:25:bb:bd:bf:c5:20:cb:44:23:c3:c1:
72:af:b0:f6:3a:69:85:36:e8:51:cc:06:5e:41:48:e0:0c:ea:
12:46:f1:a8:40:19:32:26:a1:cd:d5:c0:cc:62:26:17:30:0e:
b2:c7:1d:14:0d:7b:0f:8e:c7:b2:88:f0:a4:ec:88:1a:e2:bb:
b2:1f:c2:d9:0f:74:66:b0:37:be:e9:a8:7c:a3:ce:ec:28:43:
1c:b7:c6:9d:cd:49:bf:3d:b5:ef:97:f9:74:07:65:83:c1:b4:
48:53:f2:29:68:a7:ac:7e:8a:03:eb:1a:04:3c:1c:ac:bc:f8:
1a:8f:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:33 2025 by rpki-client on console-fra.rpki-client.org