Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: rdeGFnup0TEM4Hzix+MNjrb33LexKO1d74Nu624vwuY=
Subject key identifier: 62:A5:A2:D3:22:5C:6D:7D:B0:22:21:6B:1E:7A:C9:96:C5:53:F5:ED
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 0195116B92072ACFD846AB1DD952DC19A454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 0F2B
Signing time: Mon 17 Feb 2025 01:00:17 +0000
Manifest this update: Mon 17 Feb 2025 01:00:17 +0000
Manifest next update: Tue 18 Feb 2025 01:00:17 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: ykb1Td1ag01c0iIn88XIvENB91GZNfUtCd/JCmFkAZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:92:07:2a:cf:d8:46:ab:1d:d9:52:dc:19:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Feb 17 01:00:17 2025 GMT
Not After : Feb 18 01:00:17 2025 GMT
Subject: CN=62a5a2d3225c6d7db022216b1e7ac996c553f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:6a:31:71:39:b0:7d:38:9f:38:2f:9c:25:
70:0e:83:15:81:a6:a7:e1:49:0b:a0:25:5b:44:c6:
de:df:e1:8f:e3:44:2c:dd:88:df:59:db:4a:90:05:
35:78:f0:ee:37:e8:70:4c:36:58:d3:5c:df:74:8e:
cf:cd:b3:dc:9f:ad:09:cc:56:a9:62:02:42:8b:fc:
0e:49:7c:d5:d2:b9:da:be:68:d1:2a:3f:81:dc:60:
bd:dd:16:e9:94:cb:22:b5:c1:c4:be:2c:85:c2:71:
1e:f8:0a:18:5b:c4:c1:06:48:95:36:89:cd:43:49:
13:f2:89:84:9c:2c:29:4e:90:d8:e3:33:06:d9:15:
f4:41:15:5a:82:e2:a1:a4:fe:96:95:ff:6b:1f:57:
f6:fc:1c:38:8e:29:37:32:b4:a5:20:b0:f1:d0:00:
a7:2d:da:7b:3d:17:97:01:16:ef:82:f4:2c:d1:cf:
3f:3c:93:24:bc:77:e2:65:62:04:5f:e1:c1:63:e5:
ec:0a:e4:35:b4:64:2f:ec:e0:74:e8:a7:67:ef:91:
04:8d:e9:4c:0a:28:16:30:5d:eb:47:c9:95:c6:5d:
bc:2f:04:c3:05:8e:e5:16:13:62:bd:47:7e:e6:ec:
62:fb:73:5f:10:2d:2e:58:bb:42:e2:16:8d:fc:9c:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:A2:D3:22:5C:6D:7D:B0:22:21:6B:1E:7A:C9:96:C5:53:F5:ED
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:ac:9a:62:d5:e8:b5:64:22:5c:0a:ab:cb:15:f6:2f:19:
a8:98:b8:ee:3f:e8:a4:cc:51:06:f8:3e:88:84:41:9a:90:67:
16:c8:d8:04:72:62:52:d7:18:e5:94:31:06:01:b4:58:6c:e2:
df:64:f6:a6:17:f2:47:c2:17:14:60:4f:1b:2b:ca:d6:c4:cd:
0a:51:11:21:21:4c:7c:b8:8d:02:03:ce:21:f3:fe:b4:dd:0f:
62:dc:e3:8c:13:87:78:35:52:7f:1f:19:ba:e3:63:c4:fb:40:
8e:4b:1c:73:b1:8d:4c:1e:50:ab:a9:b0:50:b3:74:f5:69:3f:
82:89:5b:f7:01:18:0a:f3:ac:0c:7f:35:86:be:f6:fd:a7:51:
16:1e:78:40:e2:de:1c:b9:81:9d:20:e7:02:b6:fb:c3:5e:ef:
da:3a:89:1a:fc:a1:5a:a9:e8:13:ed:65:2f:08:78:74:72:a8:
1d:40:5b:4d:2e:ac:31:0f:90:36:41:2c:ef:7f:44:58:c3:94:
79:e4:47:d9:6d:17:31:56:a1:35:85:05:91:e6:b6:82:8d:10:
fa:6c:d5:64:ba:13:4b:86:15:b8:5f:d9:71:14:30:88:6b:65:
98:52:19:d8:ee:42:ab:a3:8c:0a:3f:3c:18:80:62:92:73:6b:
4e:ca:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:06 2025 by rpki-client