Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: xX0l1w0T6mEurDMzfmeS0DJ/lf8T0jcmqNBfN2huYLw=
Subject key identifier: 21:EA:45:EB:85:89:AC:A9:BD:7A:FC:69:04:28:1E:D6:D5:71:F3:8D
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 0194C4636393CA27D2FEFBF3B2626786F0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0D02
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: w9j2YP3s3FpwvRSvPNZTPegXmdqN3JvZzCQIH+tiu/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:63:93:ca:27:d2:fe:fb:f3:b2:62:67:86:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=21ea45eb8589aca9bd7afc6904281ed6d571f38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:0e:b7:dc:ab:48:70:85:2e:33:bc:39:5a:
e2:7a:df:d7:24:9c:ba:8c:a9:aa:19:ea:17:83:8c:
90:77:a6:1f:72:2a:3f:a2:51:81:46:1e:e3:33:b8:
0c:01:3b:82:5c:46:7a:d6:b0:15:62:db:3a:39:f7:
00:5d:6e:84:8d:6a:44:bb:49:e9:ff:80:f9:2f:be:
26:0a:27:9c:75:aa:a5:e1:51:6a:5f:23:67:42:85:
4d:04:f8:6a:2d:69:d3:bb:a8:76:34:68:45:29:8a:
1b:bf:46:6e:71:d1:79:60:ef:b5:e8:b4:49:55:94:
0e:36:87:47:d4:c0:1e:3a:56:18:fb:f2:b0:1e:14:
2f:a3:60:d8:64:d4:f7:fa:20:57:39:82:c6:e0:ee:
43:f0:96:ef:f8:39:a7:55:7f:d6:cf:ea:e6:4f:d8:
4c:4a:1c:b2:80:09:63:e9:4a:04:70:50:b5:12:40:
78:09:7b:a5:10:d3:2b:d4:bb:b5:fa:6c:9c:19:ae:
61:7c:85:a2:03:82:52:91:50:fd:88:81:17:e8:29:
fa:69:dd:06:99:ea:38:dc:05:de:bd:d5:67:cb:4b:
c9:1e:1d:47:5c:79:c6:aa:01:2a:04:a0:14:d7:56:
1f:ef:e6:fa:57:d7:19:93:6c:71:e2:6d:96:1b:27:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:45:EB:85:89:AC:A9:BD:7A:FC:69:04:28:1E:D6:D5:71:F3:8D
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:d5:c9:c5:74:6d:d2:12:29:24:5b:f8:b2:0a:a2:04:6b:
4d:05:db:8b:86:58:86:4f:3f:60:5d:9c:8a:9b:cb:36:cc:ff:
bc:5e:b2:e7:67:90:d5:30:f7:19:1a:0f:23:7f:65:66:f8:3b:
99:c5:2d:10:94:01:f7:8e:fd:a8:da:9e:3d:eb:3c:9f:a7:ab:
11:de:78:0d:fe:2c:84:cc:45:92:6a:8b:ff:e4:05:eb:ae:ea:
19:bc:6b:06:8b:6c:22:63:4d:b6:48:0d:c0:f6:76:d3:38:15:
11:0c:0e:ef:fd:d8:39:52:01:1e:f8:1d:9b:a1:25:8e:06:0d:
50:70:a8:b9:16:37:53:62:55:e3:74:80:de:5b:f6:cc:2f:9d:
88:56:ac:c9:c6:c1:cf:7c:bc:ea:7a:83:a4:00:ba:79:28:65:
24:98:63:ad:56:d2:ee:46:73:f6:cb:23:1b:c8:85:86:86:f3:
ed:d3:a8:19:cc:a0:17:28:b4:f9:36:46:32:b5:f1:a2:0c:34:
28:d7:c1:f4:51:e9:0d:c1:39:94:1f:da:d3:4f:37:67:d7:93:
3a:72:13:96:a3:63:69:68:2b:bb:eb:e5:10:62:2f:58:39:ed:
59:32:29:32:ef:52:b2:c9:eb:42:84:a6:a5:e2:86:ea:c2:9a:
61:43:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:49 2025 by rpki-client