Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: BnNOAkERIAUYFBqHVn+B4ZN4nuMDrb7KeG4x79ziXes=
Subject key identifier: 31:AC:B4:54:87:DC:E5:DF:65:6C:77:E2:66:D4:4B:EC:5A:DB:39:C1
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 0194BABB339EA46DC2D6F56F549CED91ACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:18 +0000
Manifest this update: Fri 31 Jan 2025 05:00:18 +0000
Manifest next update: Sat 01 Feb 2025 05:00:18 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: zikSWQDMFMYKU3YOBQ0xBKcnCkmpoJX3RYfriYc/eWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:33:9e:a4:6d:c2:d6:f5:6f:54:9c:ed:91:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Jan 31 05:00:18 2025 GMT
Not After : Feb 1 05:00:18 2025 GMT
Subject: CN=31acb45487dce5df656c77e266d44bec5adb39c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:35:05:eb:53:55:27:96:ed:a4:dc:52:45:
ab:20:8b:d2:c6:3f:12:d7:13:63:34:60:0b:41:3b:
83:63:32:25:dd:d0:7d:cb:72:ea:f5:d4:45:37:fc:
ad:6c:24:7b:e5:4f:25:a4:21:16:c2:5c:c6:b4:1c:
02:b2:ff:0c:22:17:02:86:ac:b3:96:f6:f6:6d:fb:
1d:3a:60:6a:51:85:ff:ea:80:5a:a4:38:5b:92:f8:
6a:be:d5:df:a0:97:26:1b:44:27:3d:1d:cd:2f:09:
f9:96:50:45:51:be:68:02:67:2a:91:e4:95:64:5a:
9f:cd:58:d4:ff:ff:90:6f:35:69:27:d7:13:c7:91:
74:0d:6c:8a:f0:58:bd:7f:11:21:cf:37:40:9f:a7:
b8:cf:2a:c5:d4:01:70:26:da:0f:12:ef:fd:26:a7:
98:fc:3b:52:ab:f9:79:28:8d:61:11:1e:7f:8d:2d:
03:d2:17:d7:22:b5:ef:0a:e8:81:dd:78:17:f7:e9:
34:90:7c:de:d2:81:c8:2e:5c:5d:c6:fa:5e:d4:61:
9a:a0:47:81:32:08:f7:1f:4b:37:eb:e7:60:35:73:
2c:19:b1:21:6e:ce:df:bf:b8:92:0b:16:7b:e8:e0:
d4:4e:c6:a0:9f:d9:cc:91:dc:29:a5:72:36:ae:9d:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:B4:54:87:DC:E5:DF:65:6C:77:E2:66:D4:4B:EC:5A:DB:39:C1
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9d:35:35:e6:6f:c4:68:29:4b:2f:4f:99:c5:e1:6d:47:41:
dc:c3:2e:9f:5c:04:e9:b4:d6:1d:87:d8:3d:d7:fd:c3:e2:bc:
0e:60:15:2d:f9:75:7e:01:c6:4f:9f:c3:39:86:5c:9c:aa:0b:
14:dd:fd:d6:59:9c:9d:5f:14:47:64:3e:11:5c:35:97:02:b8:
7b:3f:a4:df:b3:29:35:8e:10:bb:07:0f:02:50:f9:83:a7:92:
e4:5c:94:08:fd:d5:eb:be:8c:ea:3a:ae:d1:ad:b0:95:bf:2c:
5f:4c:98:1c:82:7b:78:a3:4b:e3:9c:ad:aa:3e:14:3a:43:5b:
81:8c:00:7a:6b:7d:cc:4d:99:89:77:dc:f8:e5:07:e4:4c:ec:
9f:84:fa:c3:bf:67:60:dd:05:45:d3:02:44:29:37:13:7f:01:
17:e5:5a:80:ca:f6:ee:cd:b2:99:cf:1b:e4:d6:41:7f:e5:a0:
40:36:d2:f8:5b:af:0f:35:20:29:ca:26:f0:75:85:79:0e:57:
f1:19:4b:3e:5f:2b:25:82:51:69:04:34:ac:26:7b:23:df:5d:
7d:9c:8a:9d:f8:0b:d1:5b:da:e6:94:c0:2b:8d:13:90:80:9c:
d3:36:72:4a:f4:16:ed:b1:43:35:ca:90:02:58:52:06:4e:34:
21:61:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:23 2025 by rpki-client on console-fra.rpki-client.org