Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: +curPxSVC1yCNtxCT8+ZYiWGxJURAvSM/Vgtwud4bMk=
Subject key identifier: 3C:BD:50:90:31:B5:47:73:F1:1C:12:59:A3:96:4D:2D:A6:95:25:B3
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 0194BABB45984BEAEDE9995ED9F1C26623ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 07A8
Signing time: Fri 31 Jan 2025 05:00:22 +0000
Manifest this update: Fri 31 Jan 2025 05:00:22 +0000
Manifest next update: Sat 01 Feb 2025 05:00:22 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 2dnEw/uNyQ9hn67Vbdyr5J+f8tYYUS+WxK4TkOA3DCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:45:98:4b:ea:ed:e9:99:5e:d9:f1:c2:66:23:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Jan 31 05:00:22 2025 GMT
Not After : Feb 1 05:00:22 2025 GMT
Subject: CN=3cbd509031b54773f11c1259a3964d2da69525b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:dc:49:41:04:ca:e8:b5:2b:85:ea:af:8a:
2c:d7:9e:06:74:45:a4:55:5e:7b:d9:9c:14:78:0a:
ae:4d:51:05:65:94:d2:5e:b2:7f:ba:c0:d7:91:e8:
2c:cb:ad:3e:f0:98:8e:19:44:03:e5:77:b4:e3:6c:
f9:3c:8e:18:f1:65:0d:6a:2f:e5:12:20:2b:ed:b5:
30:74:03:09:a4:ec:82:aa:0c:ae:35:7f:24:bc:64:
36:15:78:a4:06:c1:a6:29:cd:88:48:49:3e:e6:cc:
20:c1:0e:c0:bc:01:6c:39:37:3a:5c:1f:2b:77:e9:
c5:5a:85:b2:67:34:59:7c:f6:8e:d5:fd:5a:e4:ae:
72:80:aa:68:e1:9d:05:c2:05:34:4a:56:a3:db:a9:
9e:da:5b:e5:cd:a6:13:49:26:6f:24:29:cc:54:f4:
7a:fc:9f:b9:56:64:5a:d5:90:8f:1b:7e:f7:f5:91:
ff:9c:24:ab:cd:18:c6:89:8a:5d:f5:93:af:91:02:
e2:11:77:58:74:7e:a5:43:9f:e7:6e:02:e2:9d:91:
4c:75:e8:36:41:9a:7f:fe:43:a4:e6:9f:75:c6:80:
d2:e8:5a:46:0a:4b:d0:03:fe:6e:ad:e9:19:81:eb:
a1:f2:65:80:ff:4a:35:02:34:f5:58:28:1a:7f:e8:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:50:90:31:B5:47:73:F1:1C:12:59:A3:96:4D:2D:A6:95:25:B3
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:f8:29:98:46:20:2c:d9:3f:2d:97:be:79:ea:11:ba:c9:
98:c1:58:ec:fa:fe:4e:59:55:d8:85:53:38:02:a8:1b:9e:bb:
c0:bc:e8:ca:4c:98:f7:c9:82:8b:57:07:71:4e:0c:d7:eb:24:
d9:7b:b4:86:c7:da:2b:42:60:fd:d9:05:0b:cb:d0:d4:95:b9:
09:4e:01:a4:e9:a9:fa:05:e0:c6:93:50:f3:38:36:e5:53:a9:
1b:fb:5f:fe:1a:4b:fa:32:5b:a5:93:cf:49:57:6f:85:42:19:
d6:8a:6d:1c:d5:29:67:62:0a:e3:f8:88:00:ef:5c:3c:a4:a3:
49:81:3b:3b:6a:c9:dd:5f:e1:4a:0b:4d:a9:ce:59:ff:bf:92:
5f:98:f5:12:b7:14:5e:d5:60:c5:ad:d6:db:50:15:40:5e:fc:
d8:db:cd:ca:f1:65:d1:ae:09:97:49:cb:67:49:c1:c5:7e:f6:
6b:9c:ae:47:fa:81:07:78:a4:fb:da:0e:12:0b:e6:ae:56:3e:
fe:cf:a2:bf:0d:a5:1c:7c:2e:73:13:fd:60:c1:36:0a:68:4d:
b4:1e:7e:0e:f7:c5:95:d3:5f:d1:00:03:7c:6c:7e:43:3a:8c:
ce:04:d5:2a:60:ff:f9:81:30:65:31:a3:2a:cb:23:c6:ed:2b:
31:e3:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:21 2025 by rpki-client on console-fra.rpki-client.org