Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: i6ig8R16JFUaKeaJ24DzwMKDBiU0DhXgjoRSDRZ9wOc=
Subject key identifier: 4A:64:20:FB:C9:28:2F:40:45:F2:B1:70:8F:A1:B0:2C:22:AB:60:21
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 019511A25D8CAAF2A1A94CD07CC24011361C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 145E
Signing time: Mon 17 Feb 2025 02:00:08 +0000
Manifest this update: Mon 17 Feb 2025 02:00:08 +0000
Manifest next update: Tue 18 Feb 2025 02:00:08 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: fnCMn79QClzSxMcUBNyg11LB9suMMT0ZGrhhNRaRSvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5d:8c:aa:f2:a1:a9:4c:d0:7c:c2:40:11:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Feb 17 02:00:08 2025 GMT
Not After : Feb 18 02:00:08 2025 GMT
Subject: CN=4a6420fbc9282f4045f2b1708fa1b02c22ab6021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:c7:64:96:63:ec:5b:e1:14:bf:3d:16:c7:
87:d9:70:67:a0:16:0f:c5:2d:b5:a1:ad:df:53:cc:
3e:42:e3:0a:e3:9f:ac:0c:4e:a8:af:0c:1d:da:6f:
3a:30:5d:48:e4:16:98:41:6d:f0:17:2c:95:85:16:
a8:ec:1f:7b:5f:b0:07:c8:62:36:5c:2f:88:c6:52:
b8:22:11:5c:4f:01:6f:3f:d8:35:bb:f2:10:32:60:
d5:70:63:84:80:d2:cd:f7:3a:4d:a0:4b:8b:a7:87:
ee:fb:53:22:53:41:a3:f9:6a:78:4c:37:df:e8:6e:
48:ab:2c:c8:b8:09:e1:89:46:e4:95:a9:6b:a6:34:
f3:85:8d:b7:78:0b:28:53:f3:b5:f0:6e:f8:17:95:
f0:19:a6:8e:75:fd:ad:d6:67:87:46:b2:6c:4a:65:
ac:57:94:41:f0:e1:e3:9a:b4:db:0d:b5:b2:76:e6:
46:17:45:cf:33:9f:0d:35:9e:5f:f4:3b:f0:06:be:
5f:6d:1b:b1:87:67:b0:f6:4f:5e:e7:8c:e9:34:f3:
83:2a:67:aa:70:a7:dc:fa:36:c6:a4:1a:a8:f0:d3:
c5:28:a9:64:7c:29:1e:23:b5:5c:39:34:e3:2a:39:
fa:66:90:ea:5b:ff:3f:c2:22:f8:94:8a:9a:5e:d1:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:20:FB:C9:28:2F:40:45:F2:B1:70:8F:A1:B0:2C:22:AB:60:21
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bd:0c:6f:e9:4c:c0:7e:24:f7:99:b1:fd:38:d5:26:ad:52:
c7:d8:98:8f:c6:66:64:63:58:d1:6d:40:f7:e7:0a:14:9a:a8:
c2:35:0c:a3:ef:9f:d5:14:44:e9:5e:a8:99:ee:dd:e1:39:16:
54:d1:aa:70:5f:9f:d3:37:23:7e:20:4e:2e:92:7f:39:40:0f:
91:48:5f:da:13:f7:4a:0a:c1:b8:28:66:c6:5c:0d:ac:9e:77:
4c:c1:6a:34:72:75:3d:d6:ea:23:89:b0:e8:fd:de:72:86:4d:
cf:90:2c:3c:48:d6:0e:76:90:0d:17:d9:8f:de:df:93:14:81:
34:80:29:2f:2d:b2:e1:fa:ee:98:45:ca:64:51:14:2e:a3:3f:
f6:99:12:d6:01:7a:bb:1f:81:1f:8a:cf:4b:17:75:26:4d:5a:
eb:72:ad:4b:57:f4:3b:33:7a:c3:9a:5a:d8:b4:1f:69:9b:58:
49:48:d3:91:5f:aa:87:26:60:a9:9c:95:61:ec:66:d8:51:7b:
59:a3:7c:85:29:ea:79:b1:47:8d:40:6d:26:aa:34:b6:d0:26:
2a:58:70:ba:00:23:17:34:3d:b8:41:4e:20:28:5e:54:8d:47:
cf:93:9d:79:1b:89:06:82:a2:38:a3:3c:2a:18:98:74:d2:00:
cb:bf:19:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURol2MqvKhqUzQfMJAETYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi
NGM1NGIwHhcNMjUwMjE3MDIwMDA4WhcNMjUwMjE4MDIwMDA4WjAzMTEwLwYDVQQD
Eyg0YTY0MjBmYmM5MjgyZjQwNDVmMmIxNzA4ZmExYjAyYzIyYWI2MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmALHZJZj7FvhFL89FseH2XBnoBYP
xS21oa3fU8w+QuMK45+sDE6orwwd2m86MF1I5BaYQW3wFyyVhRao7B97X7AHyGI2
XC+IxlK4IhFcTwFvP9g1u/IQMmDVcGOEgNLN9zpNoEuLp4fu+1MiU0Gj+Wp4TDff
6G5IqyzIuAnhiUbklalrpjTzhY23eAsoU/O18G74F5XwGaaOdf2t1meHRrJsSmWs
V5RB8OHjmrTbDbWyduZGF0XPM58NNZ5f9DvwBr5fbRuxh2ew9k9e54zpNPODKmeq
cKfc+jbGpBqo8NPFKKlkfCkeI7VcOTTjKjn6ZpDqW/8/wiL4lIqaXtFOhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpkIPvJKC9ARfKxcI+hsCwiq2AhMB8GA1UdIwQY
MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt
Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx
LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT70Mb+lM
wH4k95mx/TjVJq1Sx9iYj8ZmZGNY0W1A9+cKFJqowjUMo++f1RRE6V6ome7d4TkW
VNGqcF+f0zcjfiBOLpJ/OUAPkUhf2hP3SgrBuChmxlwNrJ53TMFqNHJ1PdbqI4mw
6P3ecoZNz5AsPEjWDnaQDRfZj97fkxSBNIApLy2y4frumEXKZFEULqM/9pkS1gF6
ux+BH4rPSxd1Jk1a63KtS1f0OzN6w5pa2LQfaZtYSUjTkV+qhyZgqZyVYexm2FF7
WaN8hSnqebFHjUBtJqo0ttAmKlhwugAjFzQ9uEFOICheVI1Hz5OdeRuJBoKiOKM8
KhiYdNIAy78ZVw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:30 2025 by rpki-client