Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: xrk9ibECZhcXGOsdLsEi2phW9qFT2uiBab+3WUjUyKo=
Subject key identifier: F0:42:12:96:78:0E:63:80:E4:11:AE:5B:17:66:E2:C7:A0:01:FD:0F
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 0195116BA6A4A7B4820EF568CD8BFE22D86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 142E
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: UZFdCoWC+0H0tje3FfeJdx3g6WshMSE1645eKBIS5HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a6:a4:a7:b4:82:0e:f5:68:cd:8b:fe:22:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=f0421296780e6380e411ae5b1766e2c7a001fd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:7e:84:b9:36:93:ec:6f:d6:86:30:01:2e:
cc:17:12:fe:09:f2:41:89:8c:dc:a9:44:4f:93:85:
2b:e1:39:0a:f8:3d:7f:8c:75:2d:62:d5:67:8e:3f:
79:bf:8c:67:59:30:82:b1:cc:d9:76:49:69:3c:42:
f1:0a:dc:c2:cc:bc:32:96:93:05:7c:4a:8c:41:e9:
f2:87:f4:88:3e:a8:36:5d:a5:3b:77:71:00:4c:eb:
79:7c:51:16:c0:40:7d:02:c8:12:5b:64:f2:b6:8c:
d8:de:a7:94:cf:45:1b:95:33:db:1f:0e:f9:f2:1e:
e7:76:a4:63:b1:9e:0a:e3:fa:24:11:4b:ec:e3:4e:
26:d1:36:6a:cb:ab:c8:00:79:0a:0a:e7:e4:39:ea:
e3:56:b3:06:f5:12:c0:6a:47:a9:c0:92:dd:62:8d:
2d:fb:32:36:22:ba:df:e3:ca:67:8a:9c:2b:a2:1f:
cd:5f:2a:a1:08:08:95:5a:b0:9f:58:d4:09:c5:2b:
bd:32:90:d5:f8:99:30:d3:4d:43:f8:28:e3:90:e0:
f0:9c:f7:cc:44:ed:25:1e:7c:e6:33:76:eb:11:c7:
32:f2:d7:2a:1d:44:11:40:a4:23:f5:f1:18:a5:b2:
8c:45:b7:02:14:d4:b0:ab:b3:0b:19:19:75:94:e6:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:12:96:78:0E:63:80:E4:11:AE:5B:17:66:E2:C7:A0:01:FD:0F
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:89:d1:6b:3a:8c:cf:2a:0a:ee:d2:61:cd:4e:fe:97:0c:79:
10:fd:30:e5:9a:2d:b9:77:70:b4:7a:99:e1:9d:19:b8:1c:de:
19:78:3e:c3:a6:dc:50:0f:cb:e3:86:a2:cc:b2:b5:51:54:3c:
fa:7b:f3:42:ba:d7:e4:2c:ec:7b:5f:0b:de:40:56:c9:80:f8:
f8:5f:46:1d:37:4f:2b:c5:99:ee:84:0a:69:6b:bf:69:de:bf:
38:ab:21:f6:5d:fa:d0:4b:db:43:61:cf:a0:e0:8f:8e:53:c0:
40:91:56:1d:3d:3d:5d:92:52:0f:87:07:73:f2:be:b4:3f:fc:
dd:8c:be:5d:71:c5:b6:ff:92:bb:d5:ae:a8:aa:68:60:ae:39:
6d:62:f6:fa:e9:a6:0c:88:5e:8a:30:76:3a:98:84:80:89:cd:
46:24:05:9a:30:42:f2:94:6d:a8:fb:18:bb:ca:19:14:78:84:
dd:a0:f6:e3:56:99:c9:c3:fa:e8:2b:80:83:f7:a4:06:25:66:
bd:b7:a8:30:22:58:0b:82:d9:d1:5b:6c:cc:94:56:9f:a4:c6:
67:ef:41:ed:9f:9a:79:7e:39:e1:e1:4d:ef:32:7b:56:61:95:
a8:0e:13:59:d6:16:ee:94:27:78:64:62:3f:11:fb:d7:02:bd:
99:53:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:00 2025 by rpki-client