Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: NGMynJmhdiswt2YaoiS9Z6TO2cjBF+p+ANWaXgGjzoM=
Subject key identifier: 31:6E:6C:E3:A8:C4:D8:C5:77:3A:24:B3:EC:A7:52:09:D6:D4:CF:CC
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 0194C4D0FBA88941A0A9DD282F7CEB1336D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 04:00:17 +0000
Manifest this update: Sun 02 Feb 2025 04:00:17 +0000
Manifest next update: Mon 03 Feb 2025 04:00:17 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: Adm0fYh9T4A3am3VOEJtuFONNh2pQQB88Zxuwi99gqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:fb:a8:89:41:a0:a9:dd:28:2f:7c:eb:13:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Feb 2 04:00:17 2025 GMT
Not After : Feb 3 04:00:17 2025 GMT
Subject: CN=316e6ce3a8c4d8c5773a24b3eca75209d6d4cfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:62:7a:f8:31:c0:51:7d:44:ee:ec:bd:ef:
e0:3f:5d:25:9b:09:10:79:5a:04:98:c7:c4:af:e5:
89:79:db:29:b7:39:d5:7d:11:c9:d5:1d:6a:e2:19:
2b:10:c6:3c:58:c1:d5:8a:da:fb:3b:f6:aa:62:85:
94:51:04:45:66:97:f4:aa:be:a1:14:a6:16:2b:df:
c5:cc:b6:0f:fb:a6:d8:58:18:65:79:f1:ed:38:e3:
a5:74:55:c9:76:ae:87:9e:b9:84:4d:1c:01:d8:18:
c9:b8:0c:9f:ba:78:f4:26:de:d3:fb:63:bf:b6:b9:
0f:bd:b1:74:0c:50:1b:50:20:84:fa:48:85:36:5b:
c7:81:39:fb:54:e7:c6:34:af:4d:3e:ad:1f:cf:52:
02:f6:91:6b:83:8c:59:e1:69:b0:45:db:5f:bf:eb:
4e:ab:b7:e1:94:a3:65:75:9a:66:80:b6:95:f7:60:
cb:33:f9:d0:c7:cc:b9:df:a1:90:ae:25:a3:a3:60:
79:73:a7:a8:69:d3:0e:6c:67:eb:d4:cf:97:c7:b4:
39:89:68:9c:01:e8:23:4e:ba:ce:80:5e:a9:14:3c:
8d:2a:31:ce:b4:11:27:26:cb:4a:1f:4d:ff:4c:29:
b6:a8:03:03:95:77:09:67:b8:b4:85:56:8c:59:f9:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:6C:E3:A8:C4:D8:C5:77:3A:24:B3:EC:A7:52:09:D6:D4:CF:CC
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:28:a8:32:17:2b:d0:41:e7:bd:4d:97:f1:26:b5:0c:82:7b:
46:d3:71:dd:d1:7a:a8:37:e3:c0:74:a7:54:99:90:3a:6d:54:
6f:69:27:e4:d4:4a:21:78:a3:16:da:52:b5:89:87:16:87:b8:
dc:e0:3c:0e:28:b8:ef:b5:79:29:fc:e2:66:24:c4:4e:80:26:
32:cd:b8:2a:32:ce:c8:97:d8:c2:8a:32:b9:0f:49:e7:aa:e9:
ef:10:f4:00:6c:4c:93:07:67:d4:4b:e5:6e:7b:9b:90:92:df:
16:0b:5d:2f:0f:34:e9:01:65:84:40:2d:28:a0:57:23:e8:52:
ea:60:24:e8:71:c5:0d:61:61:d2:52:0b:6d:49:2f:05:84:f8:
5d:60:bb:bf:f2:2c:bd:fe:c1:85:66:11:67:6d:ce:5f:75:97:
2a:6d:94:8d:40:ab:ad:74:69:ca:d7:fd:33:37:b4:65:74:2d:
00:c7:28:4e:ff:05:00:7a:b6:a1:3e:04:82:c7:5a:67:ba:96:
75:65:66:61:d2:b3:e5:44:b8:ad:66:45:b8:92:e2:db:84:57:
b2:bf:76:a2:87:3a:72:db:eb:00:09:50:7d:ea:20:c0:20:63:
38:22:0e:70:fc:17:75:e4:7b:43:55:8b:8a:53:71:9f:13:07:
63:e9:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:27 2025 by rpki-client