Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: c7hiY0AWZ78r496o3NC0WJxrHropeVbq3mB3C0Xjle0=
Subject key identifier: 23:E9:83:4E:9B:2C:F8:72:D0:3B:76:C7:3F:A2:25:D8:72:E7:D1:CA
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 0194BB296C89BA43804FBC9600B8512BC29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0D3B
Signing time: Fri 31 Jan 2025 07:00:41 +0000
Manifest this update: Fri 31 Jan 2025 07:00:41 +0000
Manifest next update: Sat 01 Feb 2025 07:00:41 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: 2hJhWOxAhmGx5XJJ025q5zbvohwX82Y68ZaZeagDa8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6c:89:ba:43:80:4f:bc:96:00:b8:51:2b:c2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Jan 31 07:00:41 2025 GMT
Not After : Feb 1 07:00:41 2025 GMT
Subject: CN=23e9834e9b2cf872d03b76c73fa225d872e7d1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:40:74:b0:56:b2:cc:a0:79:f8:72:5a:5e:
2c:cb:af:b5:ed:11:d1:81:9e:1e:f1:fe:76:54:6c:
fc:2b:18:1d:ca:a6:ae:a1:e9:c7:2c:68:2a:31:2b:
31:1b:15:e6:60:49:b9:21:ad:5e:4d:95:fa:12:01:
12:bb:a6:e0:20:82:2d:8a:a3:d2:36:78:f7:8e:9f:
07:00:20:a4:13:83:1b:39:fb:a9:b3:84:ed:d3:fc:
c8:7d:93:45:4d:55:c2:b2:46:df:ab:6b:34:25:e6:
cb:57:a6:93:6b:7a:fe:a7:da:0d:19:a9:82:86:18:
b7:5f:bd:a9:0a:5a:a3:e3:f0:3c:60:22:9e:5f:42:
e5:0c:31:e6:68:6a:e8:50:70:2b:43:7e:b5:17:84:
5a:40:7e:04:f2:cb:5a:5a:45:38:48:36:f6:6c:f5:
83:6a:c9:43:59:7b:42:ee:3f:6a:aa:20:04:ac:35:
83:12:9c:8b:2e:a1:4b:25:7b:a7:cb:c8:fe:28:2c:
78:ce:00:8f:59:6e:ee:75:2a:88:16:a6:d4:07:34:
f4:89:8a:bf:80:2f:77:35:2a:1e:87:a7:8d:03:67:
af:6c:41:1d:be:a7:01:e7:77:cb:86:22:e8:bf:4f:
ee:ee:8f:8c:10:2a:f1:f4:17:b1:62:81:39:8d:1f:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:83:4E:9B:2C:F8:72:D0:3B:76:C7:3F:A2:25:D8:72:E7:D1:CA
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:66:87:f5:93:38:f3:99:06:ba:5d:f7:cc:27:8c:46:28:40:
08:d4:36:b5:da:04:b6:7b:2b:20:fb:7b:77:0e:6f:06:13:98:
9e:ce:e7:ce:c2:2b:78:19:f3:ef:f4:15:70:a7:2a:41:e6:51:
97:f9:21:dc:b8:d1:7f:63:5e:ce:1e:35:55:11:a2:7d:50:01:
43:72:37:af:37:e8:de:82:77:28:f4:73:ad:3f:f3:f4:13:58:
08:f3:13:26:d8:b9:15:3f:a2:0c:51:81:76:06:46:51:47:da:
1e:d6:b0:d9:12:77:5e:54:18:2b:c4:e2:2f:58:2f:5e:9d:d5:
d8:92:8d:bf:b4:c2:a6:64:68:39:a3:53:d0:56:ce:16:0e:06:
aa:3e:2b:65:3e:ae:de:23:4b:49:25:bf:65:ae:d8:62:c5:c8:
e2:45:65:86:34:20:81:10:db:aa:78:56:17:90:35:dc:0b:96:
7c:a8:e7:9e:35:db:0b:cb:c3:2f:b5:dd:c5:b9:eb:f7:fe:8d:
cb:92:90:02:ca:65:39:49:5c:1d:04:50:a3:4e:f0:cd:df:0d:
9c:01:60:ae:3e:b0:b7:7a:1a:2c:6a:87:94:f7:47:16:17:5f:
ba:4e:79:99:5a:d3:48:3e:86:1e:8b:31:0f:0c:a0:e2:d7:7f:
3d:be:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:26 2025 by rpki-client on console-fra.rpki-client.org