Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier: wN7hk3Dfe9jFw+FFYNALEvh+vSUsgnIwCDdW45uHVJo=
Subject key identifier: 7E:89:C9:5C:A0:3D:4F:B6:3C:E0:9B:20:01:1E:5D:AE:E9:3D:E7:8C
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 0195124747E524CC67534DEDAE882CCBA234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number: 013D
Signing time: Mon 17 Feb 2025 05:00:16 +0000
Manifest this update: Mon 17 Feb 2025 05:00:16 +0000
Manifest next update: Tue 18 Feb 2025 05:00:16 +0000
Files and hashes: 1: DPq81yxdoD2U1ZNGuCuMUOScd8s.roa (hash: gHFyGp/GTt9qIfJMs4LIdJd6bOpZsDzt48MpjJHU1l4=)
2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: m6b+Qn0ZFcBLNnGJAOR6Sf97SYun4lhR/6CN3Ukk8VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:47:e5:24:cc:67:53:4d:ed:ae:88:2c:cb:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: Feb 17 05:00:16 2025 GMT
Not After : Feb 18 05:00:16 2025 GMT
Subject: CN=7e89c95ca03d4fb63ce09b20011e5daee93de78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:3f:b1:37:89:5a:6b:6a:85:51:ab:43:b2:
ee:01:a6:0a:b7:b8:45:72:ae:f3:1f:de:aa:db:43:
5a:c3:ea:04:ac:2b:29:18:77:8a:16:90:5b:c4:c5:
50:a9:77:0f:73:9b:15:aa:ca:cc:77:9c:86:e8:c4:
f4:15:2f:4c:c0:e1:f0:a2:97:bc:9f:05:d6:29:30:
97:90:77:1d:91:5c:86:e9:a3:33:90:d1:06:00:90:
b8:b3:cf:0e:c7:e1:70:08:09:47:30:a0:7e:9c:b2:
d7:fa:63:7f:a6:c7:29:44:d2:48:79:8e:11:23:bb:
a3:66:ff:55:60:5b:42:80:43:b0:5d:73:cb:d1:52:
16:c9:e2:a5:0d:bc:e0:8b:d5:09:d4:5e:48:1b:14:
c0:50:79:25:6c:9a:96:f6:eb:8d:5f:2f:92:5a:3d:
87:03:b1:50:09:19:57:bf:89:61:91:1e:d5:0e:1b:
36:10:63:db:c9:77:30:ee:38:c1:a9:89:36:24:91:
7d:cd:b5:94:b9:77:c5:89:68:df:1e:90:26:27:61:
f7:e1:f5:5f:41:07:37:ea:2f:30:ba:a9:41:a4:d6:
52:99:a2:89:34:2b:8c:51:64:a8:14:2d:c5:df:c6:
24:08:62:df:61:16:21:1e:f9:8e:1d:1f:03:5f:05:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:C9:5C:A0:3D:4F:B6:3C:E0:9B:20:01:1E:5D:AE:E9:3D:E7:8C
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8d:07:c9:f6:1b:9a:87:17:7a:11:3a:e4:5d:54:07:a1:36:
5c:84:c1:7b:2c:b2:94:a7:e1:3a:ed:af:ef:fb:28:94:a9:0b:
12:12:73:4d:c1:eb:70:d7:76:e2:56:b7:c0:5e:32:8e:bc:67:
16:51:d9:72:26:0b:28:b5:6d:ae:c0:59:87:dc:61:e3:66:33:
c3:96:67:d8:74:d4:49:6c:55:a5:5a:d4:c7:f5:97:6c:be:60:
80:6b:42:c9:b3:4d:33:44:71:94:3b:00:e0:11:5e:23:10:8d:
65:f6:be:73:e8:28:4c:82:89:0e:ea:6a:58:f2:65:36:e0:e2:
08:a3:f2:d1:63:be:89:b1:55:47:ff:24:95:56:c4:b6:31:29:
ae:78:c9:94:63:1b:ad:b6:58:75:f4:a1:f7:8b:f6:84:8a:78:
6d:12:20:28:1f:ac:16:30:f4:bc:86:05:8d:d4:d7:75:96:d6:
2f:25:8b:e5:ef:20:3b:a8:a7:25:20:5e:d6:70:1d:b0:73:69:
50:9a:0f:e8:d7:e3:c9:fe:fe:c2:00:a4:48:aa:66:e6:3b:15:
67:a0:46:fb:b3:41:4a:9e:4d:fd:b9:69:3f:aa:66:b5:01:6a:
5f:73:ed:e0:80:ab:24:e8:6a:24:85:e3:21:d8:85:77:93:c6:
68:2b:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:58 2025 by rpki-client