Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: jPWy/airur5wT9hnjLuhTuIUCvqGj3RUSkITgQ544n4=
Subject key identifier: 94:18:54:B9:7E:37:2F:23:0D:AD:5D:4A:1C:0B:37:53:B7:7D:DD:92
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019511A27C44AF316C3191010695624A5A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 07D5
Signing time: Mon 17 Feb 2025 02:00:16 +0000
Manifest this update: Mon 17 Feb 2025 02:00:16 +0000
Manifest next update: Tue 18 Feb 2025 02:00:16 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: sXWNAuYNUDR10nZZz77+fQJ4bny/EGdg/2nv+c+4HCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:7c:44:af:31:6c:31:91:01:06:95:62:4a:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Feb 17 02:00:16 2025 GMT
Not After : Feb 18 02:00:16 2025 GMT
Subject: CN=941854b97e372f230dad5d4a1c0b3753b77ddd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:5d:23:1c:b4:2b:e9:1a:07:59:f4:ff:b0:
0e:45:bc:eb:32:cb:ba:06:69:4a:a0:3e:44:77:85:
32:81:06:57:2e:fa:78:f0:41:81:23:5d:ea:08:1b:
a9:3f:5b:4c:5f:65:03:c8:6a:d6:98:bc:7d:11:ca:
e7:e3:85:1b:71:db:0e:5e:ef:a5:0c:c5:0d:e7:9e:
d8:6d:ab:b4:d3:e6:a1:b2:26:2a:e0:54:ec:46:91:
4c:59:61:c6:1d:99:a3:17:81:fa:5b:a3:f7:cf:f4:
35:13:7c:ba:51:d8:a6:f2:f8:6e:ad:64:0f:33:d8:
26:4b:54:c0:53:06:41:47:d0:7a:5a:30:c0:d0:78:
30:ca:51:78:4f:88:2d:9c:2d:61:20:b8:60:c3:e0:
57:d5:3f:74:cb:68:fb:15:ce:21:c4:45:23:bb:9e:
7a:16:eb:a7:78:61:d5:69:bb:07:06:22:4e:c9:5a:
e6:f2:a7:97:b8:09:31:18:ce:60:4c:38:05:97:ca:
b2:9a:1a:45:a4:b2:76:ad:ec:2e:34:91:29:30:c7:
7e:db:8f:4b:96:dc:06:1f:fb:57:24:81:74:e4:83:
1e:99:3f:e6:06:b3:9e:fd:04:03:fe:4c:a7:b7:92:
42:e9:32:9c:c9:d2:07:e5:a1:0f:6b:12:9a:b8:8a:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:54:B9:7E:37:2F:23:0D:AD:5D:4A:1C:0B:37:53:B7:7D:DD:92
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1a:4b:86:5b:a3:db:31:0d:36:00:3f:03:19:83:e6:ca:9c:
bc:12:8a:d2:3b:a5:ec:6d:8d:34:2a:ed:3e:2a:ea:34:b6:ad:
84:d6:d7:ca:de:f6:0b:e1:2c:72:b7:ba:d0:1d:ae:92:63:cb:
de:7c:f0:ab:a6:43:54:4e:82:03:25:12:c0:41:7a:43:c9:7e:
e9:b9:8d:10:f1:86:31:15:99:64:d3:5d:f7:df:23:43:31:05:
2c:75:41:81:8d:1d:e7:a2:64:6d:a1:65:ab:bc:44:a2:f0:00:
73:d4:53:d9:fa:38:be:29:48:ca:3d:61:61:26:b8:1c:e5:f6:
7a:39:78:05:3e:ee:dc:a1:20:6c:a5:e5:b6:b2:3a:b5:0d:da:
a8:36:94:0d:99:68:8a:69:7a:5b:12:1d:76:67:67:3a:ba:23:
ec:46:2a:1f:62:ea:60:0d:dd:54:83:86:a3:53:85:31:f3:79:
e0:7a:0d:ea:8f:5e:80:8d:2d:f6:94:76:36:30:ca:3b:9f:a6:
80:9a:9e:19:62:44:d4:db:fc:a3:cc:2c:f1:73:9c:f6:e8:55:
e2:30:b9:44:fc:25:28:a5:46:67:54:dc:51:da:4a:e8:81:21:
fd:a4:a9:61:a1:01:11:25:d4:da:53:15:d6:ce:be:d5:be:c2:
69:48:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:50 2025 by rpki-client