Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: X37ghr4ZWpHP0AJFpAz4nDE2fY1BANXD3g3vqc19ZXw=
Subject key identifier: 86:51:C4:D4:17:20:B4:62:1E:E6:D1:50:F5:37:46:43:F8:05:0C:E8
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0194BB96CC5B04609B39D4470E4D87C9AFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 09:00:09 +0000
Manifest this update: Fri 31 Jan 2025 09:00:09 +0000
Manifest next update: Sat 01 Feb 2025 09:00:09 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: cVOoPf8798513BDPIHpu7gn11F9wuYaTf68Sm3DStKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:cc:5b:04:60:9b:39:d4:47:0e:4d:87:c9:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Jan 31 09:00:09 2025 GMT
Not After : Feb 1 09:00:09 2025 GMT
Subject: CN=8651c4d41720b4621ee6d150f5374643f8050ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:05:d6:ca:3e:77:1f:ca:89:fc:42:c8:c8:
68:68:b3:72:22:c8:ff:a0:59:c3:4d:ed:d2:ba:71:
0e:10:3b:62:12:79:89:9c:62:4c:33:2d:cd:55:09:
20:a5:48:50:ce:92:65:dc:da:6a:04:37:bc:4d:9e:
8f:8f:26:d5:70:bb:0b:f3:40:e4:14:28:8d:53:d4:
fe:b1:d1:1b:53:f0:9a:51:b0:fa:6e:ce:ba:46:0f:
55:6b:9e:cf:aa:28:fe:fc:e7:e1:41:d1:c7:ab:e3:
bf:fc:b2:80:b9:c4:22:74:eb:dd:c5:ea:2e:6c:db:
8c:4d:0e:4e:6e:6b:e3:f0:4f:7b:2c:64:1b:0e:82:
48:04:bd:9b:78:0d:64:2f:0c:0a:75:d1:d5:31:72:
b4:09:b8:dd:91:ad:42:a7:43:36:3e:7f:47:7b:af:
c4:95:45:bd:19:34:b3:b5:4f:79:7d:7a:36:aa:fb:
6b:92:04:99:36:5f:c0:5c:fa:a8:7a:02:1c:bd:21:
d2:8b:53:11:77:33:df:ad:c2:16:ed:33:03:40:37:
27:83:fb:00:46:48:e3:66:d0:81:e6:39:6d:4c:b7:
0c:9c:e5:bb:ce:27:ef:45:6c:c6:64:7c:b9:58:c4:
2b:b3:66:0a:dc:a7:11:51:a4:fc:e8:5b:5a:f8:56:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:51:C4:D4:17:20:B4:62:1E:E6:D1:50:F5:37:46:43:F8:05:0C:E8
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:96:8a:2d:72:0d:7d:b6:bc:3d:d3:c7:db:c9:29:23:47:
50:b2:d3:e3:d9:a3:b7:17:76:8e:92:2f:9d:94:a1:72:f1:3d:
e8:54:e0:0e:6a:dd:c3:b6:c1:f6:04:15:bf:4d:5d:4b:44:1f:
28:09:c6:02:10:18:27:11:7f:1e:be:05:e4:92:a6:37:6a:9e:
22:9e:f1:0f:12:41:35:a5:21:d2:ed:ea:41:c3:3c:f6:69:e4:
85:7f:12:7b:76:f4:c5:e3:e5:d6:5f:c4:96:09:da:6d:04:fb:
cb:51:7b:13:ff:0b:dd:89:dc:e4:18:dc:2b:aa:3a:7d:27:cd:
1e:13:86:e3:01:36:fd:34:48:31:92:b1:d4:62:be:3b:00:78:
aa:ab:22:fc:9f:22:df:0a:d7:78:91:94:78:6d:09:a3:bd:27:
1c:db:a8:d9:7c:d3:72:51:36:b2:e7:2d:45:e6:b5:48:d2:7a:
d4:bd:49:28:11:cb:35:75:63:c8:c7:59:0b:4f:21:93:04:68:
c0:f1:df:e9:41:6a:3a:08:27:3d:2b:36:8e:e7:24:dc:5f:1c:
c9:cb:ad:32:ec:cc:74:b1:5d:4f:df:34:53:ab:94:2f:86:21:
f5:f2:60:1a:27:6c:59:e7:ac:70:97:fc:cd:4f:d3:b4:90:7d:
e7:e2:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:56 2025 by rpki-client on console-fra.rpki-client.org