Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
File: zZ2srF97QCrwm1L-aJFlS5NJmsU.mft (raw, json)
Hash identifier: p+cY0QUPr1vjzlT68ySHpNKt09GoxOTrM5AZbCsMPY4=
Subject key identifier: 8A:DD:12:C8:46:7C:F4:4D:98:14:D6:EA:5C:91:97:35:BC:19:8D:E8
Authority key identifier: CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
Certificate issuer: /CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Certificate serial: 0194C42C063F5D2610B0390619FCF695A03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
Manifest number: 0743
Signing time: Sun 02 Feb 2025 01:00:06 +0000
Manifest this update: Sun 02 Feb 2025 01:00:06 +0000
Manifest next update: Mon 03 Feb 2025 01:00:06 +0000
Files and hashes: 1: zZ2srF97QCrwm1L-aJFlS5NJmsU.crl (hash: /rpChorTuAd0tEj3ZFPNOrM8+DaV7xo7fIkspq2cfmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:06:3f:5d:26:10:b0:39:06:19:fc:f6:95:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Validity
Not Before: Feb 2 01:00:06 2025 GMT
Not After : Feb 3 01:00:06 2025 GMT
Subject: CN=8add12c8467cf44d9814d6ea5c919735bc198de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:3a:ca:86:52:25:59:51:64:39:b5:cf:a3:
36:5b:35:e0:90:d5:7a:74:25:96:15:34:aa:62:ea:
b8:9e:8c:55:15:ba:75:16:88:39:de:89:28:af:5f:
0b:f3:a1:eb:ba:7b:17:d9:0c:d8:a5:9e:06:be:d2:
97:0c:c5:23:70:9b:de:54:f9:82:b6:80:b5:14:40:
4f:45:6d:fc:e2:17:55:98:ef:6a:8f:4e:55:e2:0b:
6d:0a:4f:e0:84:b8:89:df:e8:3b:de:23:23:1c:f6:
2b:e5:68:e9:34:c1:80:91:e3:24:79:c8:0d:3c:69:
c7:ab:75:4b:5e:ff:6a:8d:35:cc:e4:33:38:35:2c:
1a:98:cb:a2:ca:e6:42:ec:5d:5e:9f:9f:e2:3c:3a:
15:5e:0b:b2:d5:8b:aa:f2:66:14:20:db:23:7b:fb:
c2:85:bf:2e:9f:e1:15:39:60:0f:d3:d7:5e:b4:77:
8e:d1:01:3c:bd:5b:2b:e2:14:62:91:ba:ce:2a:72:
6c:f7:d0:b0:c4:c1:64:cb:ee:29:7e:90:20:f4:92:
39:f3:db:5f:76:4b:5e:da:cb:a8:31:8e:c3:26:c2:
08:cf:03:36:1d:5b:85:07:50:bd:01:60:85:be:34:
37:14:70:fa:52:23:73:65:90:13:56:09:85:8e:f4:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:12:C8:46:7C:F4:4D:98:14:D6:EA:5C:91:97:35:BC:19:8D:E8
X509v3 Authority Key Identifier:
keyid:CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:c4:77:dc:18:be:ef:52:19:7c:93:d6:23:0f:5d:89:df:
dd:df:00:af:0f:41:73:af:a2:89:6c:9b:7b:cf:cd:8e:b8:4e:
f0:8a:6f:22:7a:04:59:d0:88:c0:e5:72:65:b2:43:a4:4a:26:
46:d5:1c:3b:1f:25:fc:7b:08:6c:af:48:d9:cf:bf:e5:8a:1c:
5d:94:ad:3d:5d:30:9e:c6:62:3e:ff:08:f4:7f:ab:ac:bf:8c:
39:8d:58:fd:ec:34:98:1e:d8:15:99:7b:02:70:3f:2b:4f:99:
10:70:b6:9d:3b:8c:19:6d:70:4e:7b:57:ae:e0:ce:75:b7:f5:
fe:b2:a6:09:46:2d:7c:20:a3:f1:5a:bf:d6:ae:2a:fa:bc:53:
f9:1d:9f:51:28:ce:3c:cd:20:b9:08:51:fc:d9:a9:ab:7f:38:
bd:d0:10:83:4c:17:82:45:05:ad:10:69:48:36:cc:fc:21:76:
6c:e4:e6:ba:b6:4e:25:dd:a3:29:01:df:d4:d4:77:5f:5c:5f:
14:4b:a1:31:d9:94:df:a7:ad:7b:af:46:d1:cd:5b:7a:72:de:
45:68:58:ad:79:77:6e:ad:6d:d1:3e:d3:f4:a3:bb:10:da:88:
c4:aa:43:d5:42:eb:61:fc:8e:d8:94:40:75:9c:64:39:e6:b9:
b8:1f:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:36 2025 by rpki-client