Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: ki4ag88/PeIyUwxWy4XxHTQWiE6tHx4X4Y9+yEx13E8=
Subject key identifier: 96:E2:81:24:E6:7E:A4:FE:75:4F:39:6B:E9:DB:72:BA:6B:3A:49:D5
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0194BABB697E5B08E81FA3AEEE5E71EC4DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: qwApFPnz+B7OIuW1viq7KS7timguweYKlnWA3+ggeLE=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:69:7e:5b:08:e8:1f:a3:ae:ee:5e:71:ec:4d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=96e28124e67ea4fe754f396be9db72ba6b3a49d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:f3:63:1a:9d:13:fe:68:cc:d7:37:71:55:
b1:01:5a:e5:0e:d0:6a:cd:1e:c3:81:ed:50:e3:37:
fb:58:21:4b:d6:80:b7:ae:05:44:9e:af:30:f2:da:
d9:6b:2a:15:1b:3f:05:99:d8:07:bd:a7:ff:3b:38:
e9:42:2a:c5:54:3a:c1:1d:c7:65:d0:f3:cb:fa:9e:
6d:e8:70:b5:b3:d8:4f:bb:9f:e1:ce:12:b6:68:25:
95:96:78:32:85:86:96:5f:31:30:f1:d1:1b:3b:7e:
b8:e4:d5:a3:4e:9f:6c:0f:2b:ce:c4:01:f5:08:e5:
db:92:25:9a:76:b4:6c:09:1b:ba:85:5c:21:ec:ca:
ee:2c:ed:a8:75:21:66:5d:47:6b:00:f0:0d:fc:9e:
fb:de:fa:df:b1:10:b0:00:9f:ba:96:87:3f:80:c1:
4b:ad:b3:81:51:0a:31:b2:f6:a2:39:b4:31:60:3e:
c2:cc:b2:14:e9:e3:f5:ab:45:41:b4:da:2c:34:31:
1e:14:a7:d4:ad:95:7c:a9:1e:9e:f4:bb:ef:96:17:
09:53:12:e8:b5:4c:ad:48:e7:75:5d:01:1b:0c:36:
91:73:14:02:f4:76:1b:0d:f6:9d:5b:60:10:7c:2d:
d9:95:55:44:18:67:dd:cd:02:1f:cf:3d:0b:8b:e0:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:81:24:E6:7E:A4:FE:75:4F:39:6B:E9:DB:72:BA:6B:3A:49:D5
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:45:cf:6f:db:7c:14:b1:74:23:75:ac:80:e3:0c:78:94:6f:
cf:81:01:54:17:fc:f5:a1:37:71:2a:bb:d4:44:f1:82:03:b1:
03:70:3f:bc:79:7c:00:e7:e2:da:5d:dc:0c:d2:94:2a:be:ec:
4a:76:4a:d0:2a:e8:df:20:c9:6e:10:df:4f:96:1a:c9:7b:96:
75:2b:a5:1c:c6:2a:93:9f:c2:91:57:1a:25:48:80:26:0a:05:
dd:63:75:7d:03:b3:94:a1:4f:af:1c:de:63:89:4d:4a:84:98:
d1:13:c6:09:65:a9:5d:17:4d:fb:7d:28:a4:6f:e9:ad:bd:89:
4f:c7:f6:9c:92:1a:31:7f:26:8e:d5:52:b6:2b:19:7b:f2:94:
7e:f9:1f:c2:67:16:1f:43:fe:71:f5:6b:ab:2f:70:1a:26:5d:
18:f0:bd:06:71:5d:0d:da:4c:da:e2:cb:db:37:97:ed:a0:10:
c5:98:be:30:0e:b6:41:a2:07:dc:c8:40:04:58:41:f8:62:92:
04:f5:f8:de:54:ea:e8:a5:4d:26:4e:3d:66:85:93:45:78:7d:
08:c7:31:22:17:9a:fa:f9:d4:80:81:6b:e1:ce:1c:28:99:e9:
53:be:f5:f0:12:7c:4c:e5:99:bd:c2:3e:99:b8:f7:54:7c:de:
ed:c1:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:49 2025 by rpki-client on console-fra.rpki-client.org