Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: veAQsD4ByD2b0zbzrcqzwoFL91Aoa05vO/W0RomNCZ0=
Subject key identifier: 85:D7:A9:7B:2F:74:B0:E8:99:F1:B3:86:E5:30:6C:CC:7D:B9:A5:58
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0194C42C314581B41DD808F3C531783EF25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0CEC
Signing time: Sun 02 Feb 2025 01:00:17 +0000
Manifest this update: Sun 02 Feb 2025 01:00:17 +0000
Manifest next update: Mon 03 Feb 2025 01:00:17 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: /rNheRzO89eytuK+xV7rSKf8/aeUhy3MOMJaN7uTTUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:31:45:81:b4:1d:d8:08:f3:c5:31:78:3e:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Feb 2 01:00:17 2025 GMT
Not After : Feb 3 01:00:17 2025 GMT
Subject: CN=85d7a97b2f74b0e899f1b386e5306ccc7db9a558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:11:c0:e4:91:fc:69:81:b9:60:6f:cb:e9:
d6:dc:d6:75:e2:0a:81:03:be:53:49:2b:f9:cf:3a:
a1:de:b0:c6:8e:11:1b:5f:e2:90:d5:e2:88:29:f6:
1c:de:e7:fb:a6:cf:7b:62:3d:e5:9b:7b:7a:c3:ac:
aa:b9:ab:ad:e4:9c:d3:71:b5:b9:63:20:26:e8:78:
dd:89:77:e6:b5:25:bd:d3:f6:dc:db:68:fe:74:46:
92:39:59:a7:c8:ba:f4:c1:bc:19:92:45:1f:44:4c:
88:ed:5d:aa:84:24:38:92:41:04:08:f6:74:04:e6:
68:f0:46:92:e9:98:db:a4:9e:a6:04:d4:0a:12:cd:
38:42:82:5b:d2:6d:a3:62:92:af:39:e4:97:45:96:
8b:34:9a:06:45:90:b3:a3:d5:0b:5b:f9:16:3d:75:
07:1a:4e:e3:bb:30:53:b0:a4:a4:42:ba:2a:39:5a:
c7:76:5b:1b:46:21:3b:86:ab:39:30:8d:60:05:f8:
60:ef:b0:52:9d:8a:96:7d:78:f3:5a:7e:ec:89:32:
eb:35:87:3f:b4:cf:2d:69:9b:bb:f1:ff:92:14:f5:
50:25:79:f6:cd:26:d6:26:87:4d:a1:a1:a1:8f:e3:
20:f3:b6:13:92:b5:cb:76:60:93:1a:59:c6:ff:3e:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:A9:7B:2F:74:B0:E8:99:F1:B3:86:E5:30:6C:CC:7D:B9:A5:58
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:b2:3a:25:2a:84:f9:50:a0:85:79:c7:3c:33:1c:9f:4e:
02:5a:14:bf:2d:4a:34:91:3d:88:8b:38:a7:e1:78:12:ec:f9:
6d:91:04:17:13:9f:a6:78:0b:6d:74:f1:ed:9b:25:6a:70:e7:
7f:e6:8a:9b:fe:82:00:53:43:b6:ac:d2:51:07:f8:3b:2d:2d:
48:8e:59:ed:40:ab:e1:b9:b5:ba:78:a3:e3:4a:f3:be:ca:3f:
ac:34:56:bc:14:50:64:db:ee:b7:0b:fe:3e:a4:d7:25:ce:93:
78:9b:62:a3:bc:29:9a:02:9b:2d:52:62:11:3b:50:7f:6c:a4:
17:91:22:20:18:1f:91:e7:a7:6b:80:87:ac:8c:51:7b:ef:d0:
f2:f4:17:21:69:2e:f7:85:6a:f4:19:e5:cd:06:8b:b4:f6:6a:
23:d7:b8:8f:bd:a9:ac:6c:d7:9d:21:c5:97:0a:9c:bc:ac:34:
b6:1a:ec:69:cf:7d:97:8d:0f:b9:10:dd:e8:0c:ba:d2:e1:d0:
05:23:fb:66:f6:cd:f4:09:dd:fd:c9:fc:9d:9d:80:f7:88:49:
d2:89:55:b8:c7:e0:de:b2:df:06:ca:76:9b:c0:75:f4:97:3f:
e5:0c:9d:78:54:37:c6:bf:dc:d4:97:94:f2:3b:7e:c8:3d:5c:
15:5b:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:49 2025 by rpki-client