Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: tDwgjzSSwGhmGrjdBF6h9P1ZNdSRaTFv1jpHwkmgykw=
Subject key identifier: F0:FE:BE:FC:3F:CD:D4:9D:78:5C:4D:1B:96:B6:43:1B:C8:17:5D:F1
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 0194C3F5E07D331E163D1890F8A247D80D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 00:00:58 +0000
Manifest this update: Sun 02 Feb 2025 00:00:58 +0000
Manifest next update: Mon 03 Feb 2025 00:00:58 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: AaqwRdZSiFRY6HY7aOv5ufIA3oMM5Lueg3zrLSCQAxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:e0:7d:33:1e:16:3d:18:90:f8:a2:47:d8:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Feb 2 00:00:58 2025 GMT
Not After : Feb 3 00:00:58 2025 GMT
Subject: CN=f0febefc3fcdd49d785c4d1b96b6431bc8175df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:a9:66:a0:d5:ac:75:ba:97:20:ea:b1:95:
c4:59:ce:63:43:63:fd:ae:73:7c:26:97:b1:26:18:
3d:9b:fc:3d:4c:75:8a:dd:40:48:fe:7c:0f:6c:9c:
cf:f9:48:62:6d:0c:5f:4f:4e:5c:ef:bc:49:c8:99:
ee:2b:ee:82:3a:ba:56:87:2f:04:c2:fd:53:fd:8f:
a5:ef:ab:37:a7:f0:ec:5f:e1:b4:2d:56:9e:97:48:
fa:90:0d:79:77:cd:b2:d1:2e:f0:11:14:63:e4:22:
a4:d2:02:e7:87:65:61:64:2c:74:9a:31:da:d4:c2:
5c:67:e5:2b:42:59:6f:48:10:26:3c:d5:7e:75:a2:
39:01:b8:e7:54:fc:86:32:77:48:ee:5b:2d:2b:43:
99:97:99:7e:f9:04:85:10:33:d4:65:b8:e6:e4:56:
d4:d3:d7:b3:eb:96:8d:5d:0f:e3:b3:54:40:38:57:
f7:f9:d7:eb:36:48:ca:e7:d8:06:4a:21:91:6d:85:
68:58:0b:44:81:5d:d1:6f:87:13:fd:65:0c:d2:21:
eb:2a:b8:9f:5d:92:06:6d:1a:60:2a:ef:a0:42:0b:
44:9b:79:a0:0d:de:d0:11:e1:72:c0:c2:51:f8:31:
f0:38:8e:fa:dd:84:6a:d9:67:2b:a0:17:bb:61:91:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:BE:FC:3F:CD:D4:9D:78:5C:4D:1B:96:B6:43:1B:C8:17:5D:F1
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:03:f7:10:1c:ae:de:0b:b0:88:78:64:e9:12:4a:2f:99:
ef:8f:66:56:da:0a:37:e3:5c:a7:e2:32:22:b8:57:14:0c:d6:
47:44:80:79:23:81:9f:1c:60:3d:48:55:d2:78:c6:e4:cf:d2:
11:97:43:d5:4e:10:d6:55:ce:ff:39:e3:8f:c4:57:5f:cf:a4:
69:f6:96:3c:27:01:9b:5a:4f:cc:1c:b9:09:37:57:36:6c:eb:
b5:0d:ed:8b:da:5d:78:83:f0:c8:80:cf:c0:2a:4c:0b:27:6f:
4d:eb:d2:98:9c:d4:cb:da:f6:6f:7b:43:2f:34:40:ef:37:a9:
e1:a5:21:09:cc:b8:b9:26:09:0c:ba:6a:7f:2a:e0:19:f4:f9:
18:0b:d8:cc:29:3d:3e:26:4f:77:c6:d0:a2:f1:2c:a8:82:8e:
c7:dc:15:41:54:eb:fc:1e:b3:f7:24:68:04:5d:8b:78:19:10:
1e:2a:c9:cb:5b:3c:f8:3f:7c:a6:96:ae:46:da:24:2d:c8:d4:
7a:f6:e4:e4:df:ae:0e:18:ef:3c:3e:59:9d:0e:4a:95:9c:a5:
56:ed:81:b8:d1:2a:26:4f:c0:24:64:e4:15:c7:82:11:a1:65:
64:11:58:8c:26:e0:13:bd:8c:38:3d:72:8f:ff:cf:d7:da:4d:
ef:75:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:07 2025 by rpki-client