Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: waW7kXLwcAt5ETpQWz4fnILqc7af/2iVc2x4U++aHbg=
Subject key identifier: 1C:5B:E5:CE:52:3D:2B:8B:C5:EF:0F:2B:CA:BB:B1:0D:96:8C:90:FE
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01951247A19E8917305DDA31A15F4C017035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 10D1
Signing time: Mon 17 Feb 2025 05:00:38 +0000
Manifest this update: Mon 17 Feb 2025 05:00:38 +0000
Manifest next update: Tue 18 Feb 2025 05:00:38 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: RK9PAyGTGk+K1rF/U8sRMqc+HAGxjJGtYHRWlGobGAE=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:a1:9e:89:17:30:5d:da:31:a1:5f:4c:01:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Feb 17 05:00:38 2025 GMT
Not After : Feb 18 05:00:38 2025 GMT
Subject: CN=1c5be5ce523d2b8bc5ef0f2bcabbb10d968c90fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9d:5c:83:f5:b4:f7:03:34:9f:fd:f7:e5:f0:
f3:0f:4d:d4:81:ba:d4:ed:47:65:14:53:96:23:38:
2a:b0:98:c1:50:18:f8:a8:1a:df:9d:45:47:e6:ec:
90:9a:f8:cc:29:d5:0e:2b:fc:f4:0d:fc:19:61:0b:
55:70:75:ca:0b:ed:f4:49:a7:32:69:a3:c5:b1:9e:
46:0c:d5:7a:ce:33:87:0b:5a:bc:cb:e8:33:3d:10:
7e:b9:66:37:77:ea:13:63:05:c0:e6:38:e4:de:9a:
58:08:f8:32:bc:cc:a8:f5:a7:c5:89:27:b9:cc:bf:
8e:75:df:66:49:83:02:9f:0b:64:35:c9:ea:b5:42:
d6:f8:7c:9d:a6:6a:e4:46:f3:e3:c3:b8:80:68:e3:
e3:d9:a1:ef:b4:47:f2:8d:9d:85:5e:68:3f:2c:01:
6f:a6:80:3f:1d:d9:51:ec:c5:df:d6:bb:ab:c5:72:
6c:55:8c:91:09:16:da:67:e9:93:5e:40:53:22:71:
33:58:4a:ee:91:10:f2:bf:51:17:6c:c4:b7:fc:73:
8e:64:3c:ad:8d:56:b0:85:c7:49:27:da:cb:9b:94:
93:2d:16:46:a3:7d:9f:b6:22:8b:66:55:07:ba:a7:
1b:06:8f:7d:56:71:23:6b:8a:d4:fb:a9:b0:06:3a:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:E5:CE:52:3D:2B:8B:C5:EF:0F:2B:CA:BB:B1:0D:96:8C:90:FE
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:49:b4:93:27:2f:3a:49:ac:42:b4:8f:34:8a:be:c5:0c:
55:ba:3b:61:f4:b8:55:98:ba:46:f7:42:d1:d2:9e:21:93:ac:
1f:13:4b:2c:1a:48:3c:22:25:6e:cb:31:dd:70:af:9e:bc:61:
63:f8:cd:08:8d:12:eb:51:0a:81:1c:f8:53:12:df:8a:98:e6:
24:1c:f1:cc:29:cc:e8:22:e4:b2:af:5d:60:01:37:1c:7a:27:
63:18:cc:77:f5:e5:cf:8e:db:22:fc:c0:57:39:bf:00:bf:69:
79:dc:e4:ff:cd:3f:13:78:8b:44:ae:52:e1:9c:cd:c8:14:cb:
d3:45:62:56:a7:aa:cd:2c:bc:0b:15:8f:50:48:e0:bd:b0:58:
00:f4:20:ac:fc:f7:c8:02:62:ea:98:6d:5a:a0:f3:eb:7a:0b:
76:b6:73:c2:b1:f3:c6:eb:33:3e:50:1d:49:6f:ea:bc:1e:22:
7d:99:93:a3:2a:74:e9:62:da:5e:5e:4c:02:26:53:86:89:42:
a2:78:7c:cf:2e:7a:a0:03:c3:94:85:2f:97:cf:82:20:7f:f5:
35:97:42:10:5e:ec:aa:22:c4:14:e8:40:39:e6:e7:99:d6:c3:
70:52:eb:e7:95:3f:75:e3:6a:c9:2b:0c:94:42:10:3c:57:cc:
74:3d:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:20 2025 by rpki-client