Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: 72yhvB/qKqcPnZ77ODA2h4SR7m75qrhtZga/g3uhTjc=
Subject key identifier: DF:26:D1:71:37:F4:C0:51:14:A9:CF:CD:3A:A5:CA:DC:80:B2:BE:1A
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 0194BBCED2B97154687CE42DB74A3C1FD56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 0EEB
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: ZfYNJD67pNSBUjF2if7L/kiiUQwXF2W8NebbNekA8qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d2:b9:71:54:68:7c:e4:2d:b7:4a:3c:1f:d5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=df26d17137f4c05114a9cfcd3aa5cadc80b2be1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:1b:25:1b:0d:15:fc:7b:8e:28:bb:d0:0a:
77:52:bc:15:ab:9c:ae:df:a1:1f:7a:da:ef:7c:d6:
8b:a2:f6:06:8b:10:58:29:8d:7b:57:53:15:4d:82:
ff:94:dd:3d:2b:75:75:e4:bf:cd:ad:c4:d1:91:04:
18:e9:ee:dd:47:3d:83:44:87:71:a2:f7:0d:97:d6:
eb:10:43:a1:1d:4c:ad:c4:64:5c:45:50:e9:e1:cf:
98:32:15:68:a1:ee:e0:73:30:46:1b:6f:2c:c6:24:
d8:6b:94:94:06:ac:53:02:ab:49:f6:da:98:20:fa:
76:58:49:6f:85:aa:f3:91:2d:5d:27:ad:55:b8:d0:
fc:7f:4e:d1:40:fb:ba:dd:31:99:ba:21:87:93:54:
1e:26:05:cc:e2:1f:9f:34:19:bc:1b:85:e1:b0:ce:
47:7e:b4:e4:5c:ae:18:2a:d4:db:1d:67:db:dc:ab:
d6:8f:2a:f1:e2:c8:1a:ef:0a:2d:f9:eb:6a:8a:f8:
3a:10:45:8b:ea:8b:d4:d5:6f:12:0a:8d:6c:f2:a9:
38:b9:f3:bb:ba:25:5b:a3:b0:34:d1:26:1d:4d:74:
e7:95:ee:50:f3:f1:45:11:f2:13:03:2a:39:c6:33:
7c:7a:75:90:78:ca:75:c4:d0:54:e3:4c:38:5d:54:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:D1:71:37:F4:C0:51:14:A9:CF:CD:3A:A5:CA:DC:80:B2:BE:1A
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:15:bd:67:14:3f:db:fa:1e:cd:3c:9d:f0:fe:ed:57:8e:4a:
7e:e7:fe:5b:ae:2e:93:94:29:5a:0a:52:bf:4c:da:26:53:14:
2a:d4:5a:ad:38:d1:0b:a2:6e:30:e4:1d:59:f3:61:f0:49:83:
54:4e:14:cc:88:98:bc:90:b5:51:70:da:1a:2c:dd:83:ec:5a:
f0:d3:0a:04:8f:30:35:b9:1b:02:a1:1c:66:7c:97:e3:96:40:
ea:66:0d:c3:9e:56:1d:e0:c1:e2:a6:77:b1:a9:9a:51:6d:db:
30:58:3c:3b:0e:80:5c:5e:82:d3:ac:31:19:fb:72:70:ff:67:
0d:0d:a2:5e:92:19:4a:82:b2:cb:82:32:0f:8e:3d:d3:43:fc:
e0:6b:cb:9b:a6:a8:aa:d9:d1:5b:18:5c:9f:d1:95:8a:5c:b8:
de:e6:c8:d1:5e:85:4e:28:30:be:f6:3a:b6:e1:23:e1:40:c6:
72:b2:41:aa:6d:71:fa:32:5e:97:a3:57:73:56:49:3f:6e:b8:
73:08:e2:35:19:99:e6:3a:bc:de:f1:e9:34:b1:b8:8f:d4:d4:
b1:e1:88:2e:94:6a:d8:70:74:6e:ee:07:c4:9c:be:f7:df:dc:
b6:b9:4f:56:c2:49:49:69:6a:05:fb:3b:49:50:ec:7f:a4:e9:
c3:a6:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:45 2025 by rpki-client on console-fra.rpki-client.org