Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: 27WfIUJTJdQtBuYCmYR/FnZvt62C66Au4bevLraUe+s=
Subject key identifier: 90:E5:87:31:7B:A5:B3:2C:A1:A8:62:7F:85:50:08:65:8B:58:26:2B
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019512477E1D7BD5F805C8AF3313944D269B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0576
Signing time: Mon 17 Feb 2025 05:00:30 +0000
Manifest this update: Mon 17 Feb 2025 05:00:30 +0000
Manifest next update: Tue 18 Feb 2025 05:00:30 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: KcQUPSTQtPoYHML0M+vUEH3YuFKjGtfxDDViCxFwur4=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:7e:1d:7b:d5:f8:05:c8:af:33:13:94:4d:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Feb 17 05:00:30 2025 GMT
Not After : Feb 18 05:00:30 2025 GMT
Subject: CN=90e587317ba5b32ca1a8627f855008658b58262b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:e2:aa:e7:9b:52:91:74:00:00:89:6c:2f:
8e:b5:91:19:f0:4d:78:8e:5b:41:aa:2d:b3:eb:1d:
d6:04:fe:05:1f:3f:75:53:8f:e3:fe:f2:f1:18:d7:
08:4d:89:70:e2:27:eb:d3:95:88:9c:3d:f0:8e:14:
b4:0c:5c:71:22:43:cf:4a:2c:ed:24:0b:df:e5:8a:
c5:e2:ad:f8:ff:74:f4:14:5c:e8:8f:08:2e:3f:05:
24:da:83:23:4c:22:40:26:8b:74:2c:24:69:03:9a:
25:23:f4:a5:d3:4f:a7:01:ba:87:ef:bb:c9:5c:f8:
41:d4:73:d9:c5:97:11:5c:10:fe:66:9f:80:b7:1b:
2a:9d:c3:8e:5f:d7:70:42:43:da:30:27:e4:fe:c8:
8e:b0:5e:3a:34:3c:6f:5f:55:77:3f:5f:cf:a5:82:
b0:34:c8:37:21:bf:c5:a3:f5:14:13:2c:d6:a1:5f:
d4:01:5c:53:dd:51:2a:da:15:5c:93:2b:14:21:7d:
8b:8a:0e:2b:b4:b9:c7:8f:d7:25:61:21:d7:9e:89:
0b:b9:dc:c4:df:a2:22:1f:b6:36:b7:99:f1:69:85:
fe:a8:b2:a0:82:3c:2f:af:bf:2d:b4:d4:ab:ed:87:
87:48:96:bd:bf:38:11:84:74:30:ab:8b:7a:21:36:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:87:31:7B:A5:B3:2C:A1:A8:62:7F:85:50:08:65:8B:58:26:2B
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:eb:f5:d6:46:26:e5:d9:a6:a0:4c:a1:16:0a:3c:8d:4e:50:
73:83:0c:93:b7:b5:27:98:d6:f5:2a:b1:8b:c8:7e:8b:22:1a:
33:63:4a:31:2d:b1:e1:c3:27:28:56:e5:d2:e1:0d:c1:b5:19:
af:cb:0e:3d:53:52:8f:85:9f:58:ad:d3:00:f4:d3:f0:97:1a:
41:c5:dd:d5:1a:3d:13:ec:e1:b4:ad:85:0c:73:6a:41:a0:48:
3c:b2:e4:8f:68:dd:e0:90:9c:05:0d:4c:6e:b3:c3:95:cf:94:
93:af:78:99:1c:26:91:a2:b5:97:cc:9a:35:bd:b6:ef:94:b4:
50:fe:85:05:f3:ba:79:dc:70:16:d9:ea:3f:44:60:8d:33:c5:
c8:13:06:96:a7:30:0a:7b:56:21:ce:4e:bb:95:aa:19:00:e0:
75:d7:e0:ed:f9:e8:fb:18:ad:e1:d6:04:d3:35:97:d5:81:5d:
1a:a9:35:02:a3:51:43:1f:5b:55:fd:bc:d0:b7:a1:96:d4:57:
c8:cc:1a:56:85:d6:7d:77:3d:bf:b2:b9:ca:c8:86:bd:8b:a8:
ab:f5:71:0a:40:c6:e5:bb:8e:57:85:15:ae:08:6b:7b:31:7b:
ee:10:a6:a2:1a:ad:a7:28:a4:b5:c8:ce:fb:3b:d5:04:4c:fb:
00:75:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:49 2025 by rpki-client