Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: ZQfxLa355bjRe5d6KBt72elismMO7ICKK3hGU+uIhIA=
Subject key identifier: FB:CF:94:6D:B5:9D:9C:79:D2:61:DF:2A:17:B9:27:97:3E:8F:EF:BA
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0194C508458A2870F3E04FE6FB4A91B5E37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 05:00:41 +0000
Manifest this update: Sun 02 Feb 2025 05:00:41 +0000
Manifest next update: Mon 03 Feb 2025 05:00:41 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: ExNFNAc50rRP7dwaKhQj6uAccmiGi564gtACFCqTEE8=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:45:8a:28:70:f3:e0:4f:e6:fb:4a:91:b5:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Feb 2 05:00:41 2025 GMT
Not After : Feb 3 05:00:41 2025 GMT
Subject: CN=fbcf946db59d9c79d261df2a17b927973e8fefba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:5d:18:2c:79:f5:d8:33:81:c3:3e:f9:a9:
5c:59:92:4b:82:08:f7:ed:70:3a:9c:df:82:60:07:
1e:e2:ae:89:28:69:cf:e8:d7:ea:bb:bb:6d:52:b4:
fb:82:88:0d:2b:e3:01:d5:4f:c3:a6:dc:03:44:98:
c3:ae:bd:f7:c0:e6:34:d0:f0:40:ca:f2:de:75:16:
23:60:78:e7:74:c8:f1:8d:0b:8c:92:dd:e5:9b:4c:
a3:57:50:de:8b:08:a0:7b:ab:2b:c9:c5:50:c8:36:
7e:49:a4:a5:a6:53:6c:38:f7:68:a5:a6:76:0e:96:
b2:e5:b8:f6:71:5e:62:a2:8d:bc:91:46:1b:fc:9c:
ba:c2:ff:dc:cc:33:57:4b:b2:c8:40:da:69:66:57:
cd:59:ee:f2:02:f4:9c:51:4e:7e:60:6d:90:e5:ff:
43:c4:91:dd:f1:4f:91:c9:74:08:a8:c6:25:bb:cf:
19:d8:7a:58:f1:60:e7:81:a0:e2:21:20:5f:c1:d9:
82:74:2c:09:69:dc:77:08:30:9f:39:8f:76:66:6b:
ad:67:ce:f3:6e:e5:cb:eb:e0:d9:5c:c1:dd:26:25:
b5:99:4e:c8:96:c0:6b:46:4f:fd:80:ce:3e:a1:f5:
a6:c5:6a:e5:dd:a7:d9:f2:6f:3c:86:d4:23:26:4b:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:94:6D:B5:9D:9C:79:D2:61:DF:2A:17:B9:27:97:3E:8F:EF:BA
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:d9:a9:28:31:1d:ad:34:33:16:8a:30:5c:c7:b3:4d:68:
45:ec:70:1b:24:aa:5e:cb:89:01:cc:34:49:6c:f5:1e:3f:fb:
73:a9:b4:5c:37:dc:5c:c6:88:ba:12:28:34:42:97:91:11:a8:
2f:24:2f:98:f3:92:64:12:86:a9:4a:96:4f:90:6a:ec:38:b6:
d6:7c:2a:e3:67:e5:2b:22:0c:dd:31:9f:cc:7c:b4:2a:64:42:
32:aa:cc:9d:1c:f9:22:a9:04:77:f0:df:38:3a:33:32:9e:92:
cb:21:97:ae:6e:6f:d8:05:ff:e0:9d:1b:2e:9f:58:20:e2:21:
1d:aa:c7:65:29:73:3f:4b:61:c9:e9:64:eb:b3:25:6b:e7:f4:
27:b6:e7:0c:67:74:0b:1d:80:08:0a:c5:73:f2:f7:43:c1:58:
8d:c3:bb:44:58:21:cf:31:25:49:81:88:e2:aa:da:ce:d6:45:
ca:b4:69:ad:31:a7:b5:08:9c:78:0d:c9:59:9f:fa:72:7e:0b:
32:95:21:c1:7e:ac:e6:25:44:43:ae:44:8b:88:51:38:9d:ee:
ae:f2:36:c5:21:5f:9a:86:d6:ff:b8:ef:09:24:b4:50:18:f4:
32:b5:c1:42:0d:78:82:eb:bf:19:40:7e:46:7a:8c:2a:33:10:
55:64:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:33 2025 by rpki-client