Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: LkUjkStf/s6odrq5KFuzE+x6uCHH3Js97BsW3O7ZZb0=
Subject key identifier: 81:A2:AB:F9:25:7C:62:F0:F4:58:87:8D:D0:39:73:A0:26:B7:28:23
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 0194C42C8DA614FA6DC213B82B89F8C4DAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 0FD7
Signing time: Sun 02 Feb 2025 01:00:41 +0000
Manifest this update: Sun 02 Feb 2025 01:00:41 +0000
Manifest next update: Mon 03 Feb 2025 01:00:41 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 5FsI47Y0NQqianMPXSVdUEnjQA+CmevQ1MDf79b+v5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:8d:a6:14:fa:6d:c2:13:b8:2b:89:f8:c4:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Feb 2 01:00:41 2025 GMT
Not After : Feb 3 01:00:41 2025 GMT
Subject: CN=81a2abf9257c62f0f458878dd03973a026b72823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:64:25:d5:49:9b:a2:a7:58:11:af:ed:4d:
fd:a2:e6:9d:c0:54:4b:e0:cf:2a:d6:d2:ae:96:4f:
54:c6:de:e4:bf:8c:59:fc:fb:e8:b1:d1:f3:14:26:
4a:21:8c:94:30:9f:2d:a1:64:25:1e:42:3c:cf:64:
9b:6b:7e:02:90:03:6c:8d:4f:f8:de:36:f8:c8:56:
c4:be:f9:09:6f:bc:f8:7e:d2:0e:fd:4d:82:dc:98:
2b:f8:b4:1d:85:ef:f6:8e:ed:5c:39:c5:0e:fb:2c:
34:7c:a6:b8:e3:14:fc:89:77:60:ff:74:45:cc:78:
5f:f7:84:5e:ae:66:4d:31:31:9a:fa:b5:bb:59:53:
ea:d1:33:e5:3f:d8:48:c2:71:f7:f1:28:90:72:78:
86:b7:1f:fe:99:81:3b:e8:de:4d:80:13:75:9e:79:
64:8f:cf:74:0c:3b:3e:9c:aa:f5:7b:f2:1d:18:92:
55:66:2a:6a:21:00:cf:8d:2d:2f:1a:02:59:d4:35:
f5:82:92:8d:47:5f:90:69:24:76:ac:f6:d2:c8:2c:
c8:56:29:1f:0d:03:fc:5b:93:73:83:c0:66:30:dd:
13:2a:67:77:63:d5:55:23:39:0d:49:0d:6a:60:08:
bf:82:41:c8:4f:3c:e7:6b:e9:5a:d2:f4:b8:7f:f9:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:AB:F9:25:7C:62:F0:F4:58:87:8D:D0:39:73:A0:26:B7:28:23
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ed:94:8d:2e:6d:cd:d8:85:d0:39:68:08:52:b0:f4:52:21:
b7:48:8a:cd:5c:03:79:15:d4:2d:93:0d:5c:72:51:b4:e5:a7:
b5:1a:91:f0:d2:f1:05:7e:21:b7:da:99:41:bc:e0:20:e7:8e:
87:3d:31:b8:c5:52:b3:53:6d:b5:10:0b:a8:8d:56:60:57:80:
09:c0:53:78:82:ab:b2:28:45:be:fe:67:54:f7:23:91:e1:5b:
27:00:fa:4a:1b:20:0b:b7:31:12:a0:5b:cc:76:0b:23:95:66:
62:49:8a:39:36:d1:17:2b:da:67:bf:e6:ac:03:b4:0b:be:cb:
ce:70:b4:8d:98:5d:12:5c:ca:17:4f:1b:63:3a:95:7f:13:58:
a1:08:17:64:02:69:79:61:75:be:42:96:c3:5e:b2:86:6a:ed:
a6:43:97:37:56:db:82:f7:fc:3b:57:9f:69:d1:2e:03:98:fe:
71:3c:a0:4f:80:ba:57:87:1b:e4:6b:91:a9:d3:f1:5b:c3:c2:
84:42:80:76:6f:09:3b:64:a2:84:dc:4c:ad:0a:7d:a9:9d:4c:
3e:e2:49:bf:74:75:b9:55:22:a6:02:b8:62:42:6d:b7:92:36:
02:6f:fd:5c:df:54:8c:0a:ab:ea:3e:06:5b:a9:44:d1:3d:fb:
15:71:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:45:32 2025 by rpki-client