Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: pVwHZGVJ+BtOb0t9AiQwFdu7z/GafQeLB56ouRcUXL4=
Subject key identifier: AE:49:FA:E8:AE:93:9D:A7:3F:92:7A:18:78:95:F9:39:6E:21:7F:3D
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 0194BAF1FD2596DB3F34E33ECA965F94C8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 11FB
Signing time: Fri 31 Jan 2025 06:00:08 +0000
Manifest this update: Fri 31 Jan 2025 06:00:08 +0000
Manifest next update: Sat 01 Feb 2025 06:00:08 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: vE9EfGuGBqgc3SO81SkZytfk+JJGNoYfc6WQIr1rjqg=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:fd:25:96:db:3f:34:e3:3e:ca:96:5f:94:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Jan 31 06:00:08 2025 GMT
Not After : Feb 1 06:00:08 2025 GMT
Subject: CN=ae49fae8ae939da73f927a187895f9396e217f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:8c:13:d2:7a:fb:16:f2:d5:38:23:96:c1:
bf:ff:b0:49:a6:ca:fd:4b:08:14:2a:37:a8:ab:4f:
b6:b5:cb:28:fd:fd:bd:6e:8d:7b:85:f7:e5:f7:cf:
79:e8:30:72:89:ed:e0:55:4a:d7:58:07:e4:c5:47:
18:bf:db:b9:a0:f6:8d:4e:53:ba:24:81:da:44:a8:
63:cb:05:a0:2b:7d:db:f3:a4:47:b3:3e:97:c2:46:
8c:52:e9:25:33:b6:69:7d:86:27:46:78:bf:e4:94:
25:21:a8:31:91:ef:14:f9:5f:9b:5b:35:b3:65:e5:
69:0f:04:d1:b4:0f:4e:db:c9:4f:08:01:95:80:73:
21:31:84:63:f7:2b:fb:8b:c1:eb:bb:33:f5:70:b6:
d7:b3:a3:fd:ef:54:aa:ca:e3:04:b6:ee:05:e4:05:
81:f4:f1:6f:21:c4:95:68:9f:61:69:e0:1e:33:0a:
3f:a5:5c:61:a2:2c:82:14:e3:2b:51:02:9b:0d:55:
29:99:03:8a:94:61:fb:a8:08:5b:6c:76:1f:96:17:
e1:70:2b:2f:09:2b:5f:b4:98:2a:7b:e0:c2:a5:f6:
65:a6:46:f1:1a:77:e7:55:d2:17:1d:2f:76:13:cf:
17:ac:21:ce:f0:32:49:cc:5b:3f:6f:73:a9:67:ae:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:49:FA:E8:AE:93:9D:A7:3F:92:7A:18:78:95:F9:39:6E:21:7F:3D
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:77:23:7a:3e:f0:d9:ae:96:7a:9b:91:5e:b8:29:2e:19:17:
fc:3b:f4:b9:a8:61:48:b9:75:fe:8d:01:13:03:af:ba:d2:16:
fe:54:9c:ba:5c:49:db:a4:03:d0:39:65:db:db:5e:c7:31:6b:
2c:35:f4:c6:ff:26:a7:45:48:67:8e:51:9e:fe:72:46:57:d6:
d2:50:5c:e4:7d:f5:b7:b0:b1:84:f2:74:6b:ed:ce:5d:36:e2:
86:c5:9e:28:7b:b1:7c:64:54:0d:ea:06:65:62:d8:ae:4d:23:
17:f0:99:91:19:6b:03:0f:71:13:43:9c:aa:da:24:0a:52:d4:
2c:93:b2:38:8e:9c:a0:b3:d4:85:08:2f:eb:a2:33:bd:38:19:
f8:03:b7:74:93:ff:4b:a6:8c:07:7d:e9:8f:e4:6a:34:c4:65:
56:c2:f1:6a:2d:44:51:ac:fc:39:82:5e:d9:31:7c:c8:cb:0a:
28:75:2b:b2:4f:5e:22:af:19:96:52:f8:1c:3c:dc:db:a4:39:
07:55:c3:8e:da:4a:74:77:bd:aa:1c:d6:e8:f6:16:92:28:9c:
6b:a8:1b:34:5f:5f:a9:7c:ed:12:bd:0f:13:87:6c:48:61:77:
39:54:90:dc:c9:8e:1b:f3:cc:20:1e:19:98:0b:4b:33:19:78:
89:54:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:50 2025 by rpki-client on console-fra.rpki-client.org