Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: wIlMZxhogs2BYYUlxnYeQXkYO/mMsaVIDl5aKOgG8w4=
Subject key identifier: 3D:45:FE:95:D8:90:84:C5:4E:3E:4B:42:6F:F1:8E:16:1A:34:D2:28
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0194BA84B46E12638D39F523EC8C214178D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1197
Signing time: Fri 31 Jan 2025 04:00:46 +0000
Manifest this update: Fri 31 Jan 2025 04:00:46 +0000
Manifest next update: Sat 01 Feb 2025 04:00:46 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: TWGoazuC0rajUm2ZgKaNipH0CdNzpEQurpR/aPcrYZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b4:6e:12:63:8d:39:f5:23:ec:8c:21:41:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Jan 31 04:00:46 2025 GMT
Not After : Feb 1 04:00:46 2025 GMT
Subject: CN=3d45fe95d89084c54e3e4b426ff18e161a34d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:64:86:78:b3:ae:e1:31:4f:c6:6c:40:11:
27:4d:ff:58:54:0d:90:8d:bb:cd:f3:74:91:b4:77:
82:79:b1:2a:69:d0:14:39:12:8b:2c:17:ec:dd:e5:
7e:8b:e6:86:a1:ec:8d:ec:76:74:f7:6b:c0:9f:ea:
7b:5f:8a:55:67:85:1d:38:4c:9f:d0:2a:45:2d:dd:
48:bb:95:21:8f:ba:b1:16:04:1c:08:50:50:d6:05:
04:9f:5a:a6:40:90:15:c8:01:c8:ea:d9:74:38:75:
4c:61:96:36:53:b5:cc:fa:77:81:70:50:08:b6:12:
11:bf:74:1f:64:85:cd:51:53:da:06:8c:61:55:a6:
9b:b2:ce:cc:07:94:cd:73:3c:84:36:8e:dd:53:73:
61:54:b4:8a:e3:b4:4f:25:f2:28:48:2a:3c:2c:67:
fd:aa:e9:80:bd:8b:ce:73:dd:9e:fd:5d:91:2f:2b:
c4:b0:81:8b:fd:9c:4b:90:2c:7a:fb:81:2c:fe:b1:
07:27:a3:44:4b:22:9d:f6:66:ae:44:92:89:70:c6:
0c:1f:88:b3:30:98:08:12:84:4d:39:c9:03:09:e0:
28:09:fe:ab:dc:1f:b7:bd:04:c9:f0:b5:7e:74:82:
b7:fe:05:52:79:6f:4e:89:66:74:5f:d8:b0:6f:b8:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:FE:95:D8:90:84:C5:4E:3E:4B:42:6F:F1:8E:16:1A:34:D2:28
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:92:df:49:0e:d4:0c:f5:a0:c5:c2:f8:64:76:e8:a8:83:
4e:c0:77:ca:cc:39:c8:36:48:ec:10:92:c6:60:21:d2:e1:85:
e1:71:a3:43:a6:c2:09:2c:ea:2b:e0:f7:6b:a9:e9:9f:2b:35:
3f:89:b7:e8:87:74:b4:28:6b:63:93:ef:06:db:25:4a:ee:d2:
35:91:cd:22:8a:c2:ec:49:89:39:a4:5d:dd:54:fa:77:ef:71:
26:00:c7:fd:ac:cf:5a:5e:22:3a:d8:73:10:7c:66:f8:0d:80:
87:c7:02:09:77:fb:95:7d:d9:b5:ba:d6:3e:9b:16:fd:2c:a6:
f7:e1:57:e7:36:25:47:e3:84:7f:45:ad:fb:8b:a2:7c:3a:ee:
59:90:72:34:ca:dc:4a:72:62:e8:9c:48:71:c6:4e:d7:bb:62:
c0:08:09:01:b1:6c:b0:c2:74:20:44:02:30:7a:a2:f8:5b:b2:
07:87:6d:61:ef:01:0e:20:ae:ac:fa:e1:fb:1d:f3:2d:15:89:
f2:45:04:26:96:dd:9b:13:27:c0:e6:fa:64:ea:26:2b:40:e4:
ef:34:ef:b8:ed:e4:ba:ce:57:44:df:18:54:4f:53:ae:77:ed:
23:d8:c5:3d:64:13:0f:35:38:12:41:a3:d0:5f:7f:5d:fa:65:
1c:25:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:36 2025 by rpki-client on console-fra.rpki-client.org