Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: WEhTjNQ2Ue7dht6mvyE7rBU+rWnQQAcF8uN4jVZcll8=
Subject key identifier: B5:D3:DD:6F:C3:EC:0E:5E:6C:01:85:58:44:41:E6:54:3E:13:04:40
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 0194BABBAE71D538FE4122EA528740BBB3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: f2NaM1wKu9mS++OS8mfUse3JffPO9uIs+RkPZ7HdZsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ae:71:d5:38:fe:41:22:ea:52:87:40:bb:b3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=b5d3dd6fc3ec0e5e6c0185584441e6543e130440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:aa:3f:c1:bf:4f:02:57:69:3d:78:38:87:
ef:fa:c3:97:8a:7d:53:0f:3a:6b:98:df:7e:28:d0:
b2:e3:57:cb:53:81:6a:46:eb:0f:fb:fb:78:5e:07:
a6:39:27:f5:46:69:f5:08:b5:1c:1e:57:ca:24:26:
90:34:91:bd:29:14:7d:c5:bd:dc:d3:7c:7a:6c:04:
1f:fc:a0:4f:f2:16:55:20:55:07:80:30:84:cd:32:
db:da:a4:2b:d9:61:1a:e4:44:ce:7a:59:6a:65:d4:
3a:57:a1:64:6d:3e:83:db:93:64:f4:5e:76:5b:38:
8d:cc:52:3b:9f:23:c3:96:e6:17:25:90:5e:ea:23:
6c:d7:69:3e:e6:40:e1:3f:35:9f:07:52:31:44:78:
56:7c:3a:13:83:bd:a0:1d:fc:58:52:06:d6:ba:2b:
e8:69:12:52:70:82:5a:c7:28:32:01:98:6c:59:b8:
a4:67:b8:a3:9c:33:01:3b:eb:f5:5d:84:03:3d:e7:
d1:d3:63:90:e7:b5:2d:80:5a:03:8a:01:7a:49:ae:
14:bd:5e:ae:81:2a:21:97:34:5b:18:e3:2d:06:db:
e5:4e:88:52:17:5a:4d:33:51:f3:90:30:bb:b6:f0:
0e:6a:d3:af:51:c5:b7:33:e6:15:82:df:59:65:cd:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:DD:6F:C3:EC:0E:5E:6C:01:85:58:44:41:E6:54:3E:13:04:40
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:eb:52:4c:ce:40:33:6a:76:af:33:12:02:90:bc:15:76:
02:de:51:fd:6d:c2:69:f3:0f:12:85:e3:a0:d3:57:3a:67:70:
17:94:3d:c9:bf:f2:a4:03:1c:8f:29:35:74:e4:18:4b:10:36:
51:5e:34:bd:f3:e7:5d:22:b6:85:a1:b9:93:76:94:7e:eb:d7:
a1:1a:15:a4:b2:dd:f7:e8:38:2f:83:b7:4d:ea:46:3b:7c:bb:
e5:c7:bf:00:64:cd:9c:87:98:2c:de:4d:0d:16:78:4c:c6:9b:
84:a1:45:cf:36:10:d8:05:98:5f:d3:db:5a:a5:e1:f7:93:98:
24:3e:f2:f1:7c:00:c0:e5:60:83:be:c3:f6:ec:b0:84:94:c5:
f2:fa:9a:f3:29:4e:af:0a:82:5a:eb:9d:93:ab:ba:ca:21:54:
04:f6:be:17:5a:77:ac:49:85:97:fd:2b:d6:f0:e7:60:61:7d:
86:51:3a:49:87:5c:83:9b:64:cb:fd:2d:23:a7:f8:20:6b:c8:
fe:b1:78:62:15:a1:f3:84:b4:9c:71:43:98:b8:25:af:ac:3f:
b0:62:cc:de:f3:98:f9:42:31:b5:4a:c8:ab:dd:c9:f6:2b:c9:
0f:7a:df:07:9b:3d:9c:3f:07:fc:fe:05:e1:e4:97:02:51:ca:
7c:03:9d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u65x1Tj+QSLqUodAu7P4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi
NGM1NGIwHhcNMjUwMTMxMDUwMDQ5WhcNMjUwMjAxMDUwMDQ5WjAzMTEwLwYDVQQD
EyhiNWQzZGQ2ZmMzZWMwZTVlNmMwMTg1NTg0NDQxZTY1NDNlMTMwNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPiqP8G/TwJXaT14OIfv+sOXin1T
DzprmN9+KNCy41fLU4FqRusP+/t4XgemOSf1Rmn1CLUcHlfKJCaQNJG9KRR9xb3c
03x6bAQf/KBP8hZVIFUHgDCEzTLb2qQr2WEa5ETOellqZdQ6V6FkbT6D25Nk9F52
WziNzFI7nyPDluYXJZBe6iNs12k+5kDhPzWfB1IxRHhWfDoTg72gHfxYUgbWuivo
aRJScIJaxygyAZhsWbikZ7ijnDMBO+v1XYQDPefR02OQ57UtgFoDigF6Sa4UvV6u
gSohlzRbGOMtBtvlTohSF1pNM1HzkDC7tvAOatOvUcW3M+YVgt9ZZc0InQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXT3W/D7A5ebAGFWERB5lQ+EwRAMB8GA1UdIwQY
MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt
Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx
LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5DrUkzO
QDNqdq8zEgKQvBV2At5R/W3CafMPEoXjoNNXOmdwF5Q9yb/ypAMcjyk1dOQYSxA2
UV40vfPnXSK2haG5k3aUfuvXoRoVpLLd9+g4L4O3TepGO3y75ce/AGTNnIeYLN5N
DRZ4TMabhKFFzzYQ2AWYX9PbWqXh95OYJD7y8XwAwOVgg77D9uywhJTF8vqa8ylO
rwqCWuudk6u6yiFUBPa+F1p3rEmFl/0r1vDnYGF9hlE6SYdcg5tky/0tI6f4IGvI
/rF4YhWh84S0nHFDmLglr6w/sGLM3vOY+UIxtUrIq93J9ivJD3rfB5s9nD8H/P4F
4eSXAlHKfAOdpg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:32 2025 by rpki-client on console-fra.rpki-client.org