Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: 6wPb5jrB588G6cXBpnPoMM6mhTo2sSuIzJ9RBxyJwag=
Subject key identifier: 6D:AE:E8:34:F3:A9:53:3D:71:04:05:22:C1:D0:A2:70:7C:D5:25:02
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 019510C6D479F07DA2D9B0E4CEAEA583A3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0DB6
Signing time: Sun 16 Feb 2025 22:00:20 +0000
Manifest this update: Sun 16 Feb 2025 22:00:20 +0000
Manifest next update: Mon 17 Feb 2025 22:00:20 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: 7buSPHLpJLjZBZUFRNXOMR0p/yKsjWkdYk91/Rxrz3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d4:79:f0:7d:a2:d9:b0:e4:ce:ae:a5:83:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Feb 16 22:00:20 2025 GMT
Not After : Feb 17 22:00:20 2025 GMT
Subject: CN=6daee834f3a9533d71040522c1d0a2707cd52502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:93:7c:8c:74:e2:86:37:d2:bc:d6:1d:63:50:
4f:67:7d:d6:6b:5b:e7:ad:bc:96:5f:da:62:03:16:
0c:fd:d4:0c:74:4e:ff:bd:2d:d3:8d:c1:d8:79:59:
04:f2:0d:9e:46:f0:73:43:82:f2:8c:27:5c:e1:50:
1c:70:0e:0a:8d:3e:e1:13:6b:f4:bc:1b:e7:5a:99:
da:0b:a3:74:1c:e2:01:79:b5:b3:7a:41:8c:5b:5b:
c5:5e:e3:02:4b:bd:de:f7:12:1d:57:0f:f9:84:02:
de:b8:1a:96:f0:9b:d2:41:b4:10:8c:8c:6d:3f:48:
1b:e7:26:37:d5:e1:db:57:80:0f:48:bd:d9:bb:bc:
c2:ed:89:b5:8c:5b:a0:54:90:e6:e0:b3:d1:ab:3a:
a2:75:ac:91:25:3c:f2:b2:cf:4f:a0:9d:35:09:ee:
fd:9f:3e:f3:67:f0:a4:6d:a6:7d:d1:e6:7a:5f:42:
e0:74:ff:46:b7:86:92:b2:0f:24:84:93:f2:0d:81:
f9:a4:11:ad:fb:49:e5:00:56:a5:ce:8b:54:56:1c:
b5:93:92:73:17:50:56:23:90:46:a9:1a:e6:69:fb:
db:ac:de:46:ae:87:8f:38:c5:03:80:3b:92:bb:4a:
11:8b:a7:fc:c9:c2:26:88:5a:fd:96:1e:d8:54:8e:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:E8:34:F3:A9:53:3D:71:04:05:22:C1:D0:A2:70:7C:D5:25:02
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6f:75:7c:9f:16:89:8a:b2:63:02:57:25:2a:ff:dc:70:d4:
b2:4d:b3:03:f4:ed:64:7d:7a:73:f0:80:50:c6:e7:cd:17:b0:
fe:88:3e:dc:cb:ba:b6:02:e3:10:6c:b0:1f:54:75:68:8b:bb:
87:ba:40:a2:82:82:bc:21:42:55:ec:27:fd:5c:a0:d5:fa:49:
9a:fe:25:0e:73:d4:81:36:20:00:2b:3c:50:49:12:b2:1e:72:
a5:6d:ac:bb:98:7e:43:01:25:f5:4f:70:d6:30:c9:85:3a:c1:
13:f8:6e:5e:a2:62:70:a5:b9:16:9a:3c:ad:96:87:eb:29:07:
d8:83:ef:12:38:58:ea:3d:8e:0b:54:d5:5f:b4:4f:d4:77:f5:
02:bc:c3:c9:cc:2b:f5:08:c4:f0:59:54:b5:c7:72:a2:36:e9:
16:fd:7d:4d:d3:90:3a:29:42:ea:b9:b1:01:3c:90:6b:41:62:
c7:cf:f4:ca:ab:cb:b9:7f:b7:5e:b6:0d:28:90:27:8d:5c:a9:
4c:8b:91:f2:b8:f1:53:1b:8a:3b:9e:7b:e6:3a:eb:8f:b3:e0:
6c:8f:26:89:51:01:31:98:bb:4e:a4:c9:49:01:ea:08:fc:f7:
fa:74:a9:5d:19:74:50:18:52:e4:f9:cf:3e:00:22:86:d2:a3:
c0:43:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:59 2025 by rpki-client