Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: AXJN3CW4mnfwm/WKwC7nFCyKjnAR6/ZJpDtYkoRP+js=
Subject key identifier: C1:C3:30:5D:33:2E:D5:98:1C:88:A3:2C:DC:4D:87:17:E5:91:D6:16
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 0194BB2939C9D2690671B95DC0A3F344059B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 0E56
Signing time: Fri 31 Jan 2025 07:00:28 +0000
Manifest this update: Fri 31 Jan 2025 07:00:28 +0000
Manifest next update: Sat 01 Feb 2025 07:00:28 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: Wmobj69Xqp/qAeOultxKvj8iiEr/i9cLMt0F3JVA41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:39:c9:d2:69:06:71:b9:5d:c0:a3:f3:44:05:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Jan 31 07:00:28 2025 GMT
Not After : Feb 1 07:00:28 2025 GMT
Subject: CN=c1c3305d332ed5981c88a32cdc4d8717e591d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:92:17:06:79:98:21:18:83:59:ed:12:cc:
a7:f2:21:46:3d:72:fb:05:60:57:dc:22:6c:b8:d0:
ff:9e:ca:96:06:d5:e9:a8:f8:2b:50:63:91:01:aa:
0e:97:d7:90:05:27:21:33:27:b6:34:8c:f7:4c:1c:
a2:0a:5b:b0:71:02:8b:d0:53:1a:de:87:1b:25:2c:
2e:b2:15:4c:2d:8c:a8:1d:2b:08:56:22:27:c6:09:
46:64:da:50:8e:6c:e3:bd:ae:99:41:c5:3c:19:e8:
e2:00:7c:26:a7:c1:c4:33:49:0a:7d:50:b5:b6:00:
a9:2f:3a:95:bd:fe:1f:b5:01:a8:e9:cf:a0:58:58:
bc:4c:5a:35:0f:2f:1d:30:d0:b2:21:08:2b:13:cf:
42:96:43:98:29:c4:7d:a8:39:81:54:0b:ba:5e:9d:
75:8f:7b:c1:1e:25:91:4c:1d:e9:59:50:a0:58:eb:
5b:9c:9f:62:7c:b3:c0:c1:b2:5c:d1:db:0f:77:0b:
12:63:55:75:4d:a5:ed:2c:43:f3:35:a9:ab:16:06:
8f:4a:d9:92:79:30:f4:3a:34:71:71:67:6c:8d:6c:
9e:7d:1d:3e:15:85:77:f6:a3:25:4f:c4:fe:07:cc:
28:b7:ff:e4:63:73:78:5b:3b:ee:b0:a0:21:49:56:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:30:5D:33:2E:D5:98:1C:88:A3:2C:DC:4D:87:17:E5:91:D6:16
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ba:e5:81:d3:f5:4f:57:63:1e:a6:86:6e:6b:43:e9:6c:7e:
76:bd:88:b8:3d:4c:20:6a:29:e0:e8:ff:e7:e7:d2:25:e6:0b:
e9:4c:f9:bb:c7:da:c2:c9:bb:a8:91:db:37:32:c0:e7:9d:35:
11:51:d8:74:1f:bf:3c:82:8d:a8:4e:b8:ec:5e:9c:1b:fc:4d:
13:31:94:0c:28:f5:d9:dd:f3:fd:96:be:fa:37:8c:2c:00:9a:
3e:33:d5:cf:f7:f4:98:5c:af:26:b6:45:ef:84:da:23:6e:cd:
e4:7c:14:79:33:15:24:60:51:df:08:4c:81:a0:fc:7d:88:9b:
e6:39:de:08:70:83:ba:48:98:dd:37:1b:10:68:6a:08:ca:e9:
46:a8:70:c6:20:dd:14:eb:52:c2:f6:39:ec:f0:fe:c5:ea:e6:
41:24:d2:25:69:5c:6b:cb:5a:3e:ed:38:aa:79:45:05:31:80:
33:a8:20:b8:f8:89:e0:e6:44:73:8c:4a:c7:e6:eb:33:5b:a2:
fa:8c:e1:ef:dc:cf:e2:e2:87:67:8d:6b:63:84:8a:a0:7f:9a:
a1:09:8f:71:3d:e7:f8:ea:43:3a:ff:8f:51:2e:a3:88:70:bc:
c1:9f:a8:c7:bb:73:a8:0e:5b:a9:58:17:8e:70:6a:f7:a2:89:
e4:7d:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:54 2025 by rpki-client on console-fra.rpki-client.org