Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: KYuWDDT8WZnvfseHXDFD/EI/Grv0Tf973T4rdMqQA6A=
Subject key identifier: CA:19:74:8A:FC:6B:31:57:F6:31:D1:51:5F:B3:21:70:6F:86:6A:24
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 0194C38799259E3FB1759B76ED2841A26FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0CC3
Signing time: Sat 01 Feb 2025 22:00:31 +0000
Manifest this update: Sat 01 Feb 2025 22:00:31 +0000
Manifest next update: Sun 02 Feb 2025 22:00:31 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: XPX7SnZBs1QKDbyERTsF76xW666OM7dNt2GYXtOknao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:99:25:9e:3f:b1:75:9b:76:ed:28:41:a2:6f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Feb 1 22:00:31 2025 GMT
Not After : Feb 2 22:00:31 2025 GMT
Subject: CN=ca19748afc6b3157f631d1515fb321706f866a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:fe:d0:49:eb:5f:8b:c4:39:bd:dd:7c:14:
ff:be:16:08:37:f3:0a:ae:7e:5e:1a:71:21:4c:a7:
b4:9f:63:58:04:17:d0:38:82:31:44:70:d1:d2:bc:
f1:e9:41:c6:7f:37:a0:a6:f1:b1:f9:4c:6d:65:2b:
a7:b3:63:9c:70:7f:a9:67:02:6b:18:e7:88:33:67:
10:71:ee:b1:d3:34:ab:e2:e4:b4:91:ce:09:bc:f1:
d1:5f:2d:50:ff:ac:52:2f:85:71:23:8a:a1:64:b6:
f4:2d:54:1a:8c:9c:1b:af:35:3d:9c:e7:fc:30:35:
4f:26:42:d1:66:c2:3c:f9:4e:f3:e7:70:85:2f:60:
7f:e6:da:95:be:ae:58:90:9c:ee:25:57:e5:16:1e:
5d:05:33:b2:c8:80:27:87:db:0c:aa:b2:42:f1:82:
13:24:46:20:41:e8:af:9d:54:7d:32:2e:8d:e3:ab:
9a:0d:44:f1:00:ba:15:35:9a:f4:a7:f7:60:bb:df:
af:cd:d9:ef:81:e1:c0:72:8d:1c:38:43:31:fd:a3:
c3:48:ee:54:39:b7:f3:8c:e3:43:f8:c5:4a:f9:5b:
34:90:65:c1:5a:c8:ec:ac:5e:53:73:85:61:ad:58:
eb:52:52:c5:75:4a:41:1d:35:ca:34:a3:22:76:6c:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:74:8A:FC:6B:31:57:F6:31:D1:51:5F:B3:21:70:6F:86:6A:24
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:a0:b8:bc:fc:40:f6:fd:ad:08:aa:83:e0:9b:f0:14:5b:
60:58:93:1c:c9:a2:54:8b:d6:5c:bf:20:95:cb:6a:72:bf:b4:
62:82:8c:55:5e:eb:24:2b:84:12:a7:ce:a7:26:e9:9d:94:d5:
04:00:80:24:07:c0:ee:c8:0c:d2:2b:f5:43:9a:c8:d2:5b:e7:
3e:6a:7d:ef:08:83:bd:2b:0f:ca:2c:61:36:b8:08:e5:2c:1f:
b1:c1:50:a8:c1:5a:e3:14:ba:4c:d6:49:1c:66:f4:ac:f2:fd:
00:d4:32:27:e5:e6:e1:7f:40:b4:da:9c:c3:12:73:08:f8:93:
d9:e8:9c:3a:d7:c3:e0:3c:30:2a:32:a0:38:33:12:1b:56:89:
29:8f:75:ae:20:52:24:a8:d1:f4:86:b7:e5:ab:32:68:69:5b:
a9:87:d8:a5:33:8c:df:25:84:46:22:b5:72:ee:5c:5f:c4:a7:
40:09:46:03:33:e0:c7:c8:94:23:85:de:72:0d:c4:3b:6e:42:
5a:10:f9:c7:0f:da:1b:8e:15:34:f8:1f:3b:bf:ab:99:86:13:
70:32:00:f8:e9:13:df:87:2d:b3:d7:f3:54:ff:f6:2d:bf:26:
22:3c:a6:e6:df:b5:48:cb:47:b4:24:4f:15:ee:e4:31:db:88:
4b:74:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:19 2025 by rpki-client