Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: 8VaBG2e4FqnG5ZGpIAwaUtmIBkMgsQcLSap8QLrThBk=
Subject key identifier: 3E:C1:50:6C:6E:A7:EE:8C:08:09:7E:19:27:68:E7:86:93:1B:03:87
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01951210AC170EBEDAD5B3CC70BFECE69719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1370
Signing time: Mon 17 Feb 2025 04:00:37 +0000
Manifest this update: Mon 17 Feb 2025 04:00:37 +0000
Manifest next update: Tue 18 Feb 2025 04:00:37 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: O23ETBDAVe1PD+mDtabvFPc2bqfS7nmIFJPGJzwc1vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:ac:17:0e:be:da:d5:b3:cc:70:bf:ec:e6:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Feb 17 04:00:37 2025 GMT
Not After : Feb 18 04:00:37 2025 GMT
Subject: CN=3ec1506c6ea7ee8c08097e192768e786931b0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:fa:3c:3d:11:f4:7f:97:fb:65:2f:29:1e:
8a:d6:20:fb:8c:85:30:ab:17:89:74:4d:15:bf:55:
42:23:04:0c:a6:4b:e2:18:92:bd:ef:8a:5b:81:fe:
86:c8:5e:1e:2a:fd:ed:2d:53:28:46:ba:66:cb:30:
89:63:b3:ed:1e:75:5c:77:42:c5:b1:fe:e6:94:0e:
bb:c6:3e:85:b2:92:2c:06:df:53:b8:21:44:08:67:
51:d7:78:46:5d:fc:57:1d:c8:c9:e5:f0:66:77:9b:
e1:39:45:ff:25:33:4b:cb:b0:7e:4d:1e:42:4f:50:
e7:36:32:49:12:15:be:cd:33:60:ab:d6:aa:11:57:
07:9f:6c:aa:5b:df:67:4c:ba:5f:16:53:b9:da:e6:
9e:24:4e:f8:7c:09:21:5a:c2:0b:94:0e:7e:ab:f2:
0e:c1:4c:9c:c9:e8:49:96:e0:c8:1c:b6:66:9c:e2:
0b:8d:60:49:11:d9:73:1b:2c:2e:a5:fa:18:ea:24:
89:4c:d5:68:a5:4c:46:70:aa:33:79:46:d1:21:b0:
e0:6c:5f:31:86:f7:03:19:30:82:5c:ea:aa:79:9a:
e3:8e:66:a7:dd:d9:04:5e:de:44:ab:e0:dd:2e:7c:
43:d6:80:e6:6f:c6:39:8e:15:45:63:52:d0:da:9d:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:50:6C:6E:A7:EE:8C:08:09:7E:19:27:68:E7:86:93:1B:03:87
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:34:21:c5:94:65:eb:22:33:3b:52:ef:5f:62:a8:96:77:
a0:f3:e8:3b:b0:a1:72:0e:2c:a0:ef:bb:47:f1:65:f5:dc:b5:
7d:0f:53:fa:45:d0:0b:51:8f:af:0f:58:55:fe:fe:4d:a2:89:
f6:20:69:36:b2:63:0d:e3:0c:38:ee:13:40:0d:2b:3b:cd:bd:
eb:b4:0a:9e:93:09:79:24:4f:3c:c2:15:d1:e0:54:aa:f9:31:
88:71:4b:2f:9a:c1:e8:a9:42:ab:10:4d:c2:22:0d:6f:39:04:
c1:0f:44:73:0b:4b:88:3c:c2:92:c6:f2:97:ca:4f:94:ec:17:
49:b3:a7:9b:f1:3d:1f:2e:13:ad:61:1d:25:8c:60:f6:a6:01:
7c:77:c0:7f:ca:8d:57:2c:93:75:48:8a:90:00:0e:25:92:fd:
8b:b1:61:f0:76:00:6a:94:9b:63:0a:60:a5:71:4a:59:f9:b8:
5b:a6:e9:ae:37:c5:6d:8a:2d:a0:4c:b6:f5:83:d3:5e:84:89:
26:00:13:52:ae:6b:2d:d7:7b:c5:41:c2:25:eb:9f:f4:52:fb:
78:6d:ec:53:62:c6:30:90:8a:cb:54:9a:9d:25:08:87:51:8a:
f7:00:1d:00:d3:98:74:2b:34:60:8c:f3:84:57:09:66:7c:18:
0c:44:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:33 2025 by rpki-client