Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: 9qD/y6VNsnEZ+4qQem/2Uhx1LM56smUweaGk8i6DnMc=
Subject key identifier: 65:16:1C:1A:22:B0:5D:FC:D9:4D:0E:73:B5:F6:76:11:C0:1A:5B:9C
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 0194BB602BFF51E7A848965ED31B2BAF3882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: T//MHBN84HzCblrXDJlcox13O/VqnOM+gcZ+6s17160=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2b:ff:51:e7:a8:48:96:5e:d3:1b:2b:af:38:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=65161c1a22b05dfcd94d0e73b5f67611c01a5b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:79:6a:02:dd:e9:b5:f3:35:9f:c6:3a:8a:
e4:04:4d:d8:de:ce:9b:07:d0:a5:d0:90:d7:af:2f:
00:ac:d3:5a:d9:ef:b0:0a:9f:0c:7f:e1:16:2a:91:
ac:9d:e9:93:08:5c:64:95:f0:17:35:16:16:33:ef:
c3:fb:e5:b2:3b:8d:bb:ee:5b:27:e2:87:71:a2:c4:
a5:37:c1:de:8d:b0:c8:a6:eb:38:dd:8b:f8:f9:43:
ea:da:f3:f3:71:1f:de:a8:d4:8a:e7:56:8e:f4:7c:
e6:49:55:2d:b6:da:52:f5:9c:55:31:70:25:c1:0f:
13:83:02:49:a1:2a:e5:5a:4c:21:f5:6c:53:26:a8:
9f:c9:f1:12:3e:e1:89:57:aa:e6:65:0a:9d:4b:56:
b8:1c:e1:90:49:dc:56:ab:90:80:a3:02:20:66:1c:
cc:05:d4:fd:26:70:5b:fd:04:b8:dc:1e:f5:a8:9a:
ee:28:fb:af:76:c5:84:19:c1:b2:d0:17:be:b4:02:
0b:1f:d2:23:00:21:90:57:d9:f3:95:c1:a8:fc:e7:
b2:28:fa:59:18:0a:c9:cc:25:ea:25:c1:bb:e7:dc:
e3:c1:ea:93:33:d1:93:bd:58:df:1d:f5:0c:70:06:
31:21:f7:c1:7d:6c:99:19:38:97:9f:4a:c3:f1:96:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:1C:1A:22:B0:5D:FC:D9:4D:0E:73:B5:F6:76:11:C0:1A:5B:9C
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:73:e3:2b:b9:c2:65:a2:5d:8d:29:85:fe:e2:91:14:e7:
94:f1:65:36:3d:d3:fe:da:50:42:70:6c:5e:8e:fa:bb:2c:59:
66:1a:1f:07:47:71:35:d8:c4:5d:59:5a:b4:08:88:da:bb:2d:
12:17:ce:93:ab:dd:4b:f4:5a:0e:87:2a:e9:4a:af:59:74:ae:
07:ff:2c:3d:73:47:1d:a1:01:ac:b9:d8:ad:cb:59:18:f5:54:
16:aa:22:fb:fc:cb:9c:61:c5:32:ec:39:a5:e6:b9:96:87:64:
8b:08:bf:3e:52:5a:7c:f3:e3:41:92:dd:8f:f6:ba:8f:27:48:
fa:05:65:1a:3b:2a:47:1a:12:27:a8:02:b8:49:a4:c6:b0:62:
81:43:1f:a8:f2:c7:3e:22:36:11:3f:da:74:c2:6b:30:27:d4:
1a:7e:6e:2f:09:f6:25:34:ba:bf:23:2f:93:93:be:75:8c:13:
4c:ac:b6:14:a6:0b:81:60:c7:f2:34:a3:ab:02:98:1f:b0:a4:
ea:45:47:fc:1a:b5:04:16:29:1e:ec:97:51:fb:c0:97:06:76:
8f:a2:10:f7:a2:e1:46:ed:a9:59:3a:c1:bf:d9:ec:43:89:4a:
70:bc:c0:86:86:a9:84:21:5f:41:06:56:1b:78:34:65:16:60:
59:4b:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:53 2025 by rpki-client on console-fra.rpki-client.org