Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: Ox/Rt0r/2+sh7GYdPc1UV0eJopq7l+M4zM/6m7073m4=
Subject key identifier: B6:F7:E8:FF:D2:1B:16:AB:33:4D:2B:74:C4:73:7B:33:7B:8B:C9:A3
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 0194C42CA5782B6182B15E5C1B9EC88EAAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 8C
Signing time: Sun 02 Feb 2025 01:00:47 +0000
Manifest this update: Sun 02 Feb 2025 01:00:47 +0000
Manifest next update: Mon 03 Feb 2025 01:00:47 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: YWn/yjYQaqqehclNh8enzDrDtOBcPOrY3jOGATFZw5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a5:78:2b:61:82:b1:5e:5c:1b:9e:c8:8e:aa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Feb 2 01:00:47 2025 GMT
Not After : Feb 3 01:00:47 2025 GMT
Subject: CN=b6f7e8ffd21b16ab334d2b74c4737b337b8bc9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:3e:99:9f:6c:3f:aa:e0:67:78:5c:fb:6a:
94:50:ac:6f:bb:aa:fb:ae:54:80:a4:d9:71:6b:bd:
25:5a:6b:10:e6:fb:05:ab:66:40:0f:16:4f:69:22:
4c:d3:74:27:e7:d8:8f:5b:29:fc:46:4c:6d:2a:12:
31:02:57:cf:6c:e1:e9:a3:44:89:1f:ba:7a:1b:0a:
74:17:98:cd:0b:a3:95:db:ae:e8:24:18:77:cd:49:
7a:e8:81:f4:10:58:da:26:18:99:83:7a:d3:d8:79:
63:00:df:80:9a:0a:b9:8a:65:79:dd:11:42:a9:7d:
cf:42:0f:0d:11:07:c4:b9:6e:98:37:eb:4e:fb:3d:
f3:4e:ef:ce:fa:3c:6b:57:42:65:bb:42:fc:ea:ce:
fa:c2:bb:59:37:3e:8b:50:e7:82:ac:5b:d9:eb:fa:
82:1d:de:24:2d:30:8c:bc:38:c2:89:af:56:ab:51:
e2:4c:b6:e5:8a:f6:0c:ce:3a:f3:a7:71:6c:f5:cb:
99:37:64:cc:82:d4:02:ab:f5:73:c5:39:57:d4:13:
9e:ab:1e:01:0b:35:22:37:00:2a:e3:ff:de:0f:86:
75:01:4b:da:ae:38:6e:2c:93:0e:04:23:ef:b8:3d:
90:f5:9a:c9:5d:3f:15:37:e4:f1:6c:6f:b3:89:54:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:E8:FF:D2:1B:16:AB:33:4D:2B:74:C4:73:7B:33:7B:8B:C9:A3
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:1b:1a:a9:18:f4:5d:61:8b:5f:ab:a5:86:17:68:73:76:
45:66:b8:b0:c7:08:be:24:c4:c5:a1:70:85:67:96:1a:25:89:
a3:9f:d4:2b:43:b6:11:3a:fd:42:70:d2:34:32:14:10:95:fa:
3e:4c:5d:e4:cc:b0:57:63:1b:a2:79:b8:9d:c4:c1:09:bf:6f:
71:90:8a:45:2d:05:01:eb:fd:e2:c4:a8:a7:ed:31:a2:91:83:
3c:d9:17:d1:b7:51:5c:72:24:72:f8:63:7b:7b:42:20:e8:73:
90:cc:f1:33:ee:b6:ea:e6:aa:be:08:35:36:4c:a1:0c:2c:55:
88:8a:13:99:51:f5:dd:bd:07:1d:90:10:e8:3c:4e:54:f6:b6:
82:8b:2b:93:f6:3b:fa:0c:c5:e1:7d:e3:2f:6d:05:24:7f:9e:
cc:4c:10:a9:ab:9d:27:c1:51:49:88:ea:b3:91:64:23:6a:d5:
a2:fc:ba:67:a1:44:2d:39:e8:8b:30:70:47:d5:45:47:24:8b:
d9:0a:e8:2f:ae:43:85:95:cf:fe:cc:2f:32:38:d5:2b:88:1d:
0c:8c:82:f7:e5:0c:41:7e:f1:10:f6:7e:b7:56:bb:fb:ac:e5:
a1:66:2c:12:fc:cb:f9:b6:ff:14:da:63:80:31:bc:c2:99:75:
48:c8:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:39 2025 by rpki-client