Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: Do0d9Ko58sCKmxdTssoOabDvGyGg32JE2BbC6txlFt8=
Subject key identifier: 8A:5F:6D:04:BE:26:F5:A2:DE:7A:F0:40:FB:EC:9A:E8:44:A5:CE:EF
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0194BB28E8D85AC011996B1DCD0AE00DD738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 09C2
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: Sphoj8y4zoqDrNb7uRLyaamc32zExYQpwq78D9K/KVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e8:d8:5a:c0:11:99:6b:1d:cd:0a:e0:0d:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=8a5f6d04be26f5a2de7af040fbec9ae844a5ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:16:eb:bf:b4:7e:92:5d:64:57:cd:5e:5c:
5c:f4:00:1f:9b:9c:76:a4:95:ea:97:91:ad:26:da:
bb:10:63:49:20:85:ea:1a:3f:e1:f5:ee:45:31:34:
18:f2:a3:fb:ec:c1:fe:42:75:0f:27:e9:19:76:03:
0e:5b:da:6c:97:77:80:e3:49:c4:eb:cf:da:a5:bb:
9c:05:74:6c:c3:18:45:94:95:75:fa:76:c7:93:a1:
da:86:c1:91:f3:8a:3d:94:90:b9:9d:f4:ad:37:75:
94:25:fd:29:1c:ff:3a:1a:07:90:3d:32:bb:b7:2e:
0c:d8:60:d5:9a:c7:de:8f:14:67:17:f5:9a:09:cd:
dd:3c:8f:88:fb:4f:f6:fb:a4:cb:31:f6:85:71:36:
b2:8b:7e:d3:1b:d0:13:35:03:1d:4a:37:08:dc:d4:
6d:3f:8c:e8:ed:d9:e9:51:9b:26:b8:0d:fa:a5:20:
0e:53:18:58:d6:44:ae:4c:be:a7:b9:d1:d7:50:d3:
ab:0b:4a:ea:05:87:91:4a:f1:9b:1a:d0:be:3b:fd:
c5:69:c9:5b:13:ec:38:e7:2b:b3:56:e6:60:3c:0f:
50:15:a1:d6:eb:69:29:7f:89:d4:d5:b1:3b:0a:2c:
db:77:3e:ca:74:7b:40:9d:d8:e8:8b:d9:97:37:04:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:6D:04:BE:26:F5:A2:DE:7A:F0:40:FB:EC:9A:E8:44:A5:CE:EF
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:65:d7:4e:dc:28:24:06:c8:de:69:03:f5:53:30:f1:8e:2e:
6b:3a:d8:40:e0:2e:59:01:b4:84:a1:f2:96:25:16:08:6c:80:
28:1b:f7:db:2e:05:e5:9a:3a:e6:bd:97:c9:b2:87:2f:c2:56:
d8:8c:10:56:7c:bb:a1:2e:f9:a0:6d:eb:0d:89:bc:75:65:1f:
44:9c:9f:62:c0:94:da:2f:d2:7d:68:7c:38:0d:e0:13:5c:7c:
b5:f9:8b:0b:06:1b:17:20:d2:54:33:58:96:18:22:7d:3f:75:
3a:aa:e2:83:8f:56:7e:33:65:5a:c2:bd:20:b7:88:0c:88:a4:
25:0f:de:58:b5:61:36:e9:36:67:12:40:43:0c:12:fc:14:db:
58:3c:20:09:00:02:b9:97:43:0c:c1:33:5f:e9:d2:1d:d2:6d:
fa:06:7c:c0:9a:28:e0:0b:f9:b0:2d:e4:56:6a:a1:44:d4:80:
da:f9:27:9e:56:04:b5:53:08:2d:66:02:f6:ae:14:07:9c:b4:
ea:38:c3:91:23:4e:41:1e:76:23:99:e9:ed:1d:a1:bf:22:60:
cb:6e:d0:d2:74:a2:5a:0f:cd:80:98:83:84:2d:bd:ed:ae:4b:
02:91:a5:be:84:74:31:9a:17:87:8a:54:46:49:e6:60:2e:3c:
ec:79:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:57 2025 by rpki-client on console-fra.rpki-client.org