Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: UGdFvSayXR46YsuHB37nCPso8gF7q7mu8ng+MjLuDag=
Subject key identifier: 2C:13:33:E8:CE:D1:50:F7:65:57:6B:DC:EA:E5:C8:6C:67:3F:CC:B9
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 01936933DDF5495CCA5F7695EBDD3BC967A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 0DA7
Signing time: Tue 26 Nov 2024 16:00:27 +0000
Manifest this update: Tue 26 Nov 2024 16:00:27 +0000
Manifest next update: Wed 27 Nov 2024 16:00:27 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: wJ2NVYN4U9EWPgQBcJyLXmE/UtoUNiG88xsHi71bspY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:dd:f5:49:5c:ca:5f:76:95:eb:dd:3b:c9:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Nov 26 16:00:27 2024 GMT
Not After : Nov 27 16:00:27 2024 GMT
Subject: CN=2c1333e8ced150f765576bdceae5c86c673fccb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:f0:d8:10:a2:a5:31:1d:b4:93:19:7e:ba:
b0:ff:5c:58:aa:42:1a:a8:79:3b:e0:74:65:24:57:
d6:e3:0a:54:de:66:a8:c7:5c:e3:e8:8a:58:e0:d9:
21:d3:af:40:4b:38:b3:16:4a:d0:bb:9c:b8:0e:6e:
ff:a5:f6:ff:f8:03:9e:60:db:0f:d4:94:78:77:eb:
e9:42:5b:fb:5a:ba:8a:86:9e:bb:9a:af:c9:37:6e:
59:33:ff:d1:70:42:19:57:5b:3f:28:2a:06:9d:de:
74:ec:a4:a7:01:d4:af:cf:75:bd:1c:53:20:6c:7d:
b6:0a:f3:29:14:70:66:fe:32:3b:94:04:52:88:41:
66:ab:fb:ae:de:33:a1:9e:79:7e:05:c5:35:9c:5b:
ec:43:f2:c9:80:32:dc:6a:81:9a:a2:71:f3:f3:58:
dd:24:c8:27:43:6c:3f:14:b0:14:85:ba:c2:ee:5d:
00:b6:51:fe:2c:40:5e:b7:4a:32:6c:1b:ae:14:8a:
6c:db:14:b7:30:3e:61:58:00:1f:df:7c:df:0a:54:
2d:de:9d:9f:98:33:73:64:08:7a:ea:78:ea:d6:be:
d4:6a:78:1d:18:98:b5:9a:36:64:12:77:b7:ad:cf:
2b:9f:6e:c1:f5:c1:f1:7b:a7:ae:4c:43:0c:2f:16:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:33:E8:CE:D1:50:F7:65:57:6B:DC:EA:E5:C8:6C:67:3F:CC:B9
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:b2:87:08:9d:f7:84:54:db:f9:f6:9f:44:1a:95:8d:13:
dc:97:b5:fc:ac:56:3c:28:d9:d9:9d:e4:a1:a8:45:5e:89:fb:
09:de:b8:99:ea:19:7a:5b:17:4e:6e:d4:3f:09:30:0a:13:81:
c5:9b:94:58:9f:59:ad:17:2d:62:33:cd:8d:f9:1a:f5:3a:d8:
98:e8:6a:54:31:6c:56:5b:61:e1:08:ff:f5:cd:78:9d:7f:8d:
2a:3b:89:cb:79:45:31:45:fa:73:f7:85:41:49:85:bc:95:38:
fc:1f:3a:4b:ab:50:fc:80:49:57:88:21:1e:3e:73:69:b1:20:
18:77:28:d4:8f:2c:c1:af:8e:69:65:13:9c:79:9e:77:1c:97:
94:73:5a:10:9c:ec:40:d8:0c:46:b2:13:84:c4:32:c8:ae:92:
5f:7d:bc:14:22:9c:86:47:0a:bf:15:a2:7c:20:56:b1:6a:fe:
51:db:7e:57:69:96:5d:99:36:17:97:69:95:cb:15:16:bb:90:
f2:6b:d9:83:df:39:b0:28:40:32:7e:b6:6d:61:4d:53:3d:2d:
67:89:93:00:f8:f6:35:f5:7e:21:91:74:f3:0e:db:8e:bc:ce:
d0:b6:73:ea:12:8d:5b:38:33:0e:58:0f:87:c5:12:e0:c4:78:
16:ce:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:49 2024 by rpki-client on console-fra.rpki-client.org