Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: jE9Xzl+tk1ZoVZHy2JHWEKgP0Zr8Eh0PylBbUo82Kkw=
Subject key identifier: B5:80:3E:A9:79:92:3A:BA:55:4E:77:5A:49:57:B9:1F:A2:9D:9F:BD
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 0194C38869317BBAA2BF7E023A8A57D3B2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:01:24 +0000
Manifest this update: Sat 01 Feb 2025 22:01:24 +0000
Manifest next update: Sun 02 Feb 2025 22:01:24 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: 39iNpAcxfqjSfCuXfpG7O7KBOS4NKPKlwCaONibPls4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:69:31:7b:ba:a2:bf:7e:02:3a:8a:57:d3:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Feb 1 22:01:24 2025 GMT
Not After : Feb 2 22:01:24 2025 GMT
Subject: CN=b5803ea979923aba554e775a4957b91fa29d9fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:09:3b:51:fc:c5:92:d7:01:e0:3b:64:62:
af:64:86:39:32:ae:f6:25:ba:08:53:40:48:43:b0:
9a:f1:64:72:ad:28:6a:5f:1c:3e:8b:f7:ec:42:f7:
49:7a:6a:4c:0f:28:35:bc:3d:cc:ef:58:21:4b:fa:
02:67:1e:c5:c7:b1:19:8a:c1:b5:bf:95:86:69:66:
1b:93:10:88:7a:8e:31:b5:8a:8c:aa:ba:84:e2:b0:
75:a4:e0:a7:90:c6:d6:3f:71:aa:34:35:bb:f2:06:
84:36:9b:5b:c9:19:bd:a4:c3:68:6c:05:a2:39:a3:
7d:8a:5f:af:75:4f:cc:ac:15:8f:aa:2b:2a:89:ea:
fc:d4:b3:bf:05:09:a2:45:e1:03:01:88:14:b7:79:
e0:fc:13:1c:f0:77:22:bb:2a:74:ae:73:77:3c:98:
f3:18:d9:42:92:e3:68:14:ac:0a:5d:8d:16:81:c9:
82:6b:a0:2d:24:cf:19:25:26:05:1a:12:d8:1c:9d:
7b:15:a0:13:22:79:29:b9:73:74:7a:77:ee:0e:0a:
0c:ae:b2:63:e8:9f:45:5f:f8:f5:04:0d:15:be:9c:
aa:cd:2c:70:14:0b:d6:26:cd:28:20:26:e8:c7:a0:
87:7b:51:77:11:05:37:81:79:99:e7:9f:ef:02:52:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:3E:A9:79:92:3A:BA:55:4E:77:5A:49:57:B9:1F:A2:9D:9F:BD
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:1b:b7:a5:ca:81:16:9d:cd:3b:0b:52:9e:11:6c:80:c7:
68:ac:46:a7:ad:67:19:fb:e3:df:12:e3:be:f8:93:07:14:83:
6b:be:40:ff:b6:14:3c:9e:2d:97:20:9d:d9:14:02:74:17:6f:
fd:0e:00:53:1a:12:ce:51:f3:69:e1:a2:a9:37:5e:c8:77:90:
e0:73:20:6f:4a:75:c3:38:87:fb:b5:1e:34:80:6a:34:ba:80:
40:03:4c:33:d4:24:79:5b:01:19:16:82:98:79:9b:50:fc:d7:
da:c4:24:9c:23:41:2e:c2:dc:5e:bb:55:67:7b:fe:3e:ef:6f:
8f:48:3d:21:ec:fe:a4:08:96:21:88:c4:35:7a:19:e2:b4:31:
74:f3:27:24:11:2d:fb:b2:83:7f:6e:b5:ce:d3:31:ee:86:33:
d5:8c:80:be:6c:c5:da:2c:0b:62:dd:34:48:ce:e1:f4:1d:7c:
d9:76:f2:b9:58:28:ef:f7:af:37:88:b1:e1:6d:6b:b3:34:eb:
73:0e:f8:7e:4b:81:9d:30:d1:c3:c9:fc:09:92:e0:29:34:06:
71:7e:20:5e:f3:b8:fd:49:8a:c5:cd:0b:ff:78:d9:42:0b:10:
63:52:90:c5:7f:ca:36:73:b5:64:d7:4b:ce:19:cf:f3:98:59:
5f:24:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:44 2025 by rpki-client