Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: pTAMeTmgb0uuuXGiObWCRHJUfoJyaIm579flBGHElv4=
Subject key identifier: 35:2A:F6:5E:8F:EA:8B:9F:A1:85:B7:D2:A2:03:B2:05:D9:7E:8F:57
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 0194BB2924111176AA346203070237DC9B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:23 +0000
Manifest this update: Fri 31 Jan 2025 07:00:23 +0000
Manifest next update: Sat 01 Feb 2025 07:00:23 +0000
Files and hashes: 1: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (hash: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: KDKSoKZ9xpWwWPeNcYTQPO6AI3eadRctzj5Dkz+CrSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:24:11:11:76:aa:34:62:03:07:02:37:dc:9b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 31 07:00:23 2025 GMT
Not After : Feb 1 07:00:23 2025 GMT
Subject: CN=352af65e8fea8b9fa185b7d2a203b205d97e8f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:2c:2f:61:a1:a5:5f:44:dc:72:2d:84:29:
93:01:eb:45:3e:0b:37:2e:bf:d0:29:dd:f1:58:fc:
6f:6e:45:9c:5d:cc:35:69:bf:ce:f6:59:2f:a1:2d:
23:21:2a:7f:d1:1a:16:e5:d9:8d:9b:ec:c6:2c:7a:
a9:86:bc:99:f1:c4:31:a0:fd:21:b3:c9:88:b6:5a:
5f:d9:72:ed:85:08:aa:08:56:29:2d:4d:30:4e:89:
03:cf:0d:24:fc:ad:69:97:4e:66:63:bc:0d:92:dc:
1c:ae:44:d4:cd:c7:1b:4a:14:d4:98:91:1b:51:a4:
69:52:30:f7:04:45:e1:86:69:80:b4:d6:90:24:41:
10:74:ba:02:3a:95:7f:d5:d2:f5:44:bb:1b:bf:10:
5a:8e:53:64:98:55:5e:c1:e8:9b:cb:53:30:bb:e0:
7f:51:97:be:8c:ef:7a:84:1b:d2:47:a5:77:99:16:
ec:16:9d:13:2f:e8:3a:9d:2d:eb:f2:40:50:b9:81:
55:ee:6b:b2:3e:19:71:27:d4:99:a3:35:55:19:8e:
a8:20:4f:36:33:6b:dc:f7:00:ae:53:c8:a4:af:d4:
2e:1e:1b:6c:e3:f5:0c:28:34:96:97:58:fc:6c:88:
aa:9d:94:5d:41:93:c8:58:78:d9:9a:90:89:72:f0:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:F6:5E:8F:EA:8B:9F:A1:85:B7:D2:A2:03:B2:05:D9:7E:8F:57
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:59:ed:8c:da:f3:b7:4a:22:0b:a4:9b:68:6f:e0:86:ef:
02:a3:29:04:93:29:d3:01:9b:85:9a:26:c8:5d:1e:31:e5:a6:
fb:a1:53:f6:c9:e2:1b:b0:eb:62:37:d1:ed:87:a8:98:b0:a3:
65:eb:8a:79:25:c2:11:f2:f7:1f:74:9f:b8:99:10:19:a5:86:
4a:0a:33:1f:cd:75:8e:5f:a3:74:39:33:08:4e:6d:13:97:a8:
3d:92:3e:94:d2:72:f9:79:d2:84:9f:c1:f8:4e:bb:e4:45:f0:
1e:20:76:ae:e9:6e:21:9c:4a:40:42:c6:63:d4:ea:96:66:53:
80:c4:a4:c8:8f:1a:d8:af:e9:b5:c6:18:d3:b0:4a:02:68:6e:
6b:f5:0b:2d:76:21:fb:47:1f:3c:ed:dc:a6:fc:f9:da:96:00:
55:a8:89:94:95:d1:7c:2a:48:ee:46:b2:3c:af:d4:00:f6:44:
21:f3:49:df:cf:84:38:b7:de:91:d3:f4:17:c2:6d:8b:1a:cb:
df:01:e7:5a:6e:1d:3e:5b:62:ef:6b:ec:22:42:8e:99:ba:be:
6c:7b:d6:90:26:91:9c:39:a9:76:91:26:31:4a:89:3d:54:d2:
0c:3a:98:f8:db:c4:b5:28:87:9d:37:f3:b1:ed:b1:87:9d:46:
5c:f1:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:28 2025 by rpki-client on console-fra.rpki-client.org