Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: qnKs30ZmZSO/haHBTwB2BElTSsg+9/KnarqKPJ2D6mU=
Subject key identifier: E5:2A:C7:2E:76:7F:9B:7B:F6:B7:10:06:9D:18:B2:86:9B:0E:94:BC
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 01951134F58B7387EB8A3EDA6ADF9A51A311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 1372
Signing time: Mon 17 Feb 2025 00:00:38 +0000
Manifest this update: Mon 17 Feb 2025 00:00:38 +0000
Manifest next update: Tue 18 Feb 2025 00:00:38 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: EPIqh3HDMcFhq0J4TgUHHjTqxKUiuWoyY9reDbDRfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:f5:8b:73:87:eb:8a:3e:da:6a:df:9a:51:a3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Feb 17 00:00:38 2025 GMT
Not After : Feb 18 00:00:38 2025 GMT
Subject: CN=e52ac72e767f9b7bf6b710069d18b2869b0e94bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:c9:bc:79:74:8f:5c:63:00:f9:28:33:4f:
95:d6:a2:b8:6a:34:92:d4:f3:d3:20:a8:1c:82:ff:
fa:00:b4:66:79:03:f2:4a:0d:41:ea:19:5d:cf:32:
25:50:0b:0b:08:2d:7b:f4:b1:cc:26:73:c3:12:44:
69:9e:6f:cf:a1:70:ab:f7:de:7c:3c:08:53:92:80:
09:7c:e9:8c:4d:eb:a7:49:53:27:4e:ff:96:4a:fd:
e5:34:5a:10:e3:f7:ab:36:f9:8b:f9:99:26:08:69:
3f:c6:56:3d:86:07:d4:ed:4a:a0:58:9f:d4:7a:d4:
46:25:f1:a7:26:66:57:92:ad:65:76:67:0a:9c:c9:
18:de:4a:34:4c:6f:95:d1:6e:d1:6c:5e:71:35:1c:
9b:69:3b:63:f0:45:a6:c2:1a:20:b6:73:4d:22:83:
32:1a:0f:21:e5:97:32:ab:f7:d9:67:09:e5:bb:19:
cb:53:d7:62:2a:bb:67:3f:f9:64:7e:56:91:a8:84:
27:9c:90:27:77:ea:4e:0f:a2:65:ad:19:69:a8:42:
bd:b5:cb:83:58:07:86:b5:72:67:de:9d:3f:07:ee:
90:2b:12:d5:68:b2:b4:25:3d:99:b0:48:0b:1e:6d:
88:cd:70:92:6f:f1:a3:25:0b:31:c8:a1:46:9a:52:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:C7:2E:76:7F:9B:7B:F6:B7:10:06:9D:18:B2:86:9B:0E:94:BC
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:76:13:b7:14:f8:39:9f:59:c2:1c:b9:a1:c0:de:d3:b4:e3:
c0:ac:d5:10:1e:7e:5f:ee:9a:ba:bc:8f:54:ee:dc:e1:a4:14:
0e:cf:aa:ad:0e:0e:4f:4f:13:bd:0b:bb:7f:35:15:99:7a:ac:
2a:b6:f2:f6:8a:bf:16:14:1e:ed:22:c4:44:8a:ab:a8:e7:d7:
b1:4b:59:73:36:ad:3a:ee:e3:db:47:17:5e:08:8b:7e:f9:4f:
29:c9:dc:98:f7:54:5e:77:c6:a5:69:44:ac:8d:57:3e:11:23:
3c:6b:71:ba:1a:ca:f9:27:19:88:f6:d9:29:44:84:79:53:4f:
31:58:4c:1b:af:6e:94:86:5a:3b:ce:17:f3:26:4f:d5:26:f7:
1b:a8:71:bd:cc:1e:8e:ef:a1:72:5a:88:5e:8a:96:be:99:6f:
79:05:d6:27:82:e1:df:da:51:86:a0:fb:ed:ef:5d:be:d2:fa:
31:3f:36:17:5a:04:58:4b:b7:b7:e9:00:3d:86:03:46:66:91:
17:75:77:e2:f1:04:32:44:fd:dc:16:00:2a:00:16:c5:63:4e:
27:38:84:b1:b7:5a:0e:91:45:3f:ff:bc:f1:11:8d:06:07:c3:
9b:71:d6:10:0a:c6:64:88:1c:2e:b0:a0:57:90:5c:8c:ce:22:
c3:72:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:34 2025 by rpki-client