Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: MmPo1lKoAtqA6AMAgxQhhjGx6DdoTfIfSBpOx3MRTl4=
Subject key identifier: 05:0B:8B:EB:B6:73:87:4E:45:B4:2C:A3:20:72:BF:79:D1:87:C0:D3
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 0194C4D140ACA2A44B5D0729A5253C1FB691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 04:00:35 +0000
Manifest this update: Sun 02 Feb 2025 04:00:35 +0000
Manifest next update: Mon 03 Feb 2025 04:00:35 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: stVI6ps943zNSNCC7bZJjTLpeoUyJOS3mKvzD1HKLes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:40:ac:a2:a4:4b:5d:07:29:a5:25:3c:1f:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Feb 2 04:00:35 2025 GMT
Not After : Feb 3 04:00:35 2025 GMT
Subject: CN=050b8bebb673874e45b42ca32072bf79d187c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:f5:e4:63:c7:c9:05:36:ce:43:c6:fa:f5:
19:98:7e:e7:d1:63:4f:3a:38:6b:50:4e:c7:79:f3:
c1:eb:77:63:0a:af:fc:21:cb:35:82:2c:70:68:25:
d8:b0:07:01:a1:bb:a8:d9:62:95:57:0f:a1:01:7f:
0a:13:c9:71:84:83:65:4f:18:48:52:19:0d:2d:ac:
ae:46:26:d5:3b:16:32:75:65:70:c2:7a:43:1f:33:
19:9c:4b:19:4b:1d:b2:56:34:e7:11:bf:47:4b:ea:
ad:18:34:ec:67:d7:1d:19:b5:94:bf:a2:71:b1:29:
5a:b6:79:6e:d6:80:a4:b6:49:1f:64:5c:d9:9b:1a:
15:a3:a8:cb:20:47:ef:a4:2a:fd:83:c4:9d:6a:b7:
cc:62:89:15:94:34:44:29:61:e8:d9:15:2f:3f:b7:
f3:8e:db:b5:49:5c:55:aa:17:6a:a2:ed:33:b0:6a:
88:b3:36:62:ce:b0:09:73:bf:81:f7:5b:f1:80:12:
42:7b:0f:5d:b7:ce:8a:18:02:0e:6a:f6:b2:fd:8c:
26:4b:e3:c9:bb:fa:ba:3b:b7:74:45:db:3b:bf:71:
e2:9a:78:70:8b:6d:5b:20:af:b4:ce:d4:bd:2b:fc:
31:e3:ba:5e:11:7e:4f:c0:0e:c3:30:90:0e:c1:84:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:8B:EB:B6:73:87:4E:45:B4:2C:A3:20:72:BF:79:D1:87:C0:D3
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:13:6b:11:15:80:16:92:89:3b:d1:30:e3:44:a7:35:55:
93:09:23:fc:c1:2b:41:3b:2a:4e:90:2f:15:c8:eb:09:4f:fd:
36:2c:81:2d:0e:39:56:90:63:4b:36:33:4f:e1:e0:cc:40:e7:
fa:18:ae:57:75:ad:3a:62:b4:d0:7b:a2:d6:9a:27:26:c8:29:
cd:10:e9:24:2f:03:c2:af:5a:0c:a8:06:d0:90:08:33:b9:b6:
4f:ba:70:0d:96:7a:ab:f7:bb:b2:d8:9c:01:46:e3:ec:4c:5e:
46:9f:1e:c9:db:e7:b2:28:28:8e:fe:7c:0b:d3:44:3f:1d:ba:
dc:02:51:07:50:b7:f3:97:fb:69:7a:17:be:cc:9c:c0:9d:31:
22:70:f9:70:41:7a:71:7b:4e:72:59:39:5c:fe:a2:4c:65:af:
5b:9b:af:d0:55:51:31:f5:b2:99:59:17:21:60:4c:c3:a3:93:
6b:4f:87:96:d0:c5:14:01:7c:63:5a:99:6f:4b:84:30:f9:42:
ba:46:50:44:00:77:cb:e4:2e:73:fa:b3:ed:14:fa:07:1b:70:
d6:23:12:b6:72:91:98:ff:7a:58:07:cf:6d:44:09:8f:ce:f4:
80:df:96:2a:47:20:fd:8c:b9:a0:94:83:70:bc:b9:f7:af:29:
c3:58:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:48 2025 by rpki-client