Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: YNW2hKBbsZmBkbel42WqxnTUZ7zFRCP1dUQcr0DYXg0=
Subject key identifier: 34:C1:18:66:D2:5A:DB:5E:DC:92:FB:49:30:33:C3:D7:63:FB:FE:E1
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 0194BB96E3EE5973A14E640FB01FCEFCE2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:15 +0000
Manifest this update: Fri 31 Jan 2025 09:00:15 +0000
Manifest next update: Sat 01 Feb 2025 09:00:15 +0000
Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: gbLPOXyShFnRTtbh6yOl2CX6nSmMVmIfVhIch1Ta8Gk=)
2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e3:ee:59:73:a1:4e:64:0f:b0:1f:ce:fc:e2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Jan 31 09:00:15 2025 GMT
Not After : Feb 1 09:00:15 2025 GMT
Subject: CN=34c11866d25adb5edc92fb493033c3d763fbfee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:70:42:5c:ba:8d:7b:91:04:2b:65:56:f9:
f1:1b:82:16:7a:9e:40:5e:99:06:bd:b7:d5:dc:06:
04:93:e4:c4:28:27:e2:41:2d:1b:ab:38:2a:7f:73:
3a:31:cd:cd:79:06:49:2d:ec:aa:93:de:a6:e7:56:
d1:3f:6c:b6:e7:95:06:4d:3a:ef:97:70:40:ec:83:
b9:06:37:ad:70:95:43:90:ad:ac:06:2c:2d:5e:d8:
22:01:b5:08:ae:83:39:43:80:f3:1a:17:fd:1f:07:
cc:97:15:7b:cd:a6:1e:c5:08:20:e9:4e:3a:1f:2c:
97:fc:ca:a4:55:10:ee:a3:92:c8:ba:3a:e5:a7:21:
59:49:94:4e:de:3d:b0:f1:8b:b3:56:5b:35:f8:f5:
ac:e3:dc:66:b4:8a:20:19:2d:43:3d:34:71:4f:9b:
85:36:39:5e:41:d9:b3:b3:7b:79:bf:20:96:68:47:
22:92:02:61:a8:d3:98:d6:08:a3:61:78:18:c2:89:
2a:e6:75:f1:83:56:40:fe:33:96:a7:67:72:3e:dc:
ff:cb:a0:a9:aa:2d:ef:44:a2:5f:4f:2d:40:b0:14:
79:ad:54:0a:c6:c7:07:ee:bc:b9:49:5a:a5:85:8d:
39:47:74:ad:99:5e:63:f2:4d:97:67:16:05:0b:04:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:18:66:D2:5A:DB:5E:DC:92:FB:49:30:33:C3:D7:63:FB:FE:E1
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:5f:78:e9:52:fe:55:e4:c1:04:46:ac:4b:dc:0d:3d:2d:
12:dd:4a:bd:3f:d0:a4:5a:21:5e:e7:0b:09:27:63:6e:2e:75:
90:62:9e:2b:9c:1d:23:da:30:6c:05:0c:03:b0:51:6d:0e:5b:
23:d3:db:94:5c:9c:06:16:74:2e:7a:fa:06:52:da:96:e1:9b:
8c:53:59:b2:ec:7d:af:35:70:68:9d:40:34:50:0c:e6:a8:54:
75:3c:9d:c7:40:1c:f5:1f:8b:15:17:bf:42:3e:0b:75:5c:ef:
07:b5:87:13:de:00:c8:50:44:7d:8a:8a:85:a6:ec:a8:53:c1:
98:4a:b4:83:49:92:ee:83:2e:9f:a8:23:06:ef:2e:18:df:18:
33:b1:1f:38:72:f0:4f:57:b8:3f:bc:7f:0a:12:f7:88:1d:14:
82:5d:b7:2d:16:fa:b5:ef:39:49:34:9d:88:78:08:38:7f:3c:
11:a0:15:28:f1:79:89:ca:a7:95:e8:10:1e:13:7c:33:2e:c6:
97:32:9d:5b:a3:51:b3:78:5e:23:7e:23:cf:ec:a1:54:01:1c:
0f:33:6b:3f:46:54:f1:b8:14:cc:0e:7e:02:5c:54:10:47:54:
91:6f:8d:b4:55:7d:57:06:c6:8f:65:96:a3:02:5d:bb:fb:52:
71:99:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:44 2025 by rpki-client on console-fra.rpki-client.org