Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: m9maEzl9mF+qTOU3uxzSsMzVtXHrHByD3nU8NkQOcZ8=
Subject key identifier: 81:CE:5F:B9:46:AE:53:BF:21:19:E8:3A:F7:7A:A2:0C:33:56:7B:82
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019511D9A7247DD4B2920838EAB764C3D30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 099C
Signing time: Mon 17 Feb 2025 03:00:31 +0000
Manifest this update: Mon 17 Feb 2025 03:00:31 +0000
Manifest next update: Tue 18 Feb 2025 03:00:31 +0000
Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: rCzWK0I+9pZ0zAdtOJuYg5QbyEpJThRib4374kugfp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a7:24:7d:d4:b2:92:08:38:ea:b7:64:c3:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Feb 17 03:00:31 2025 GMT
Not After : Feb 18 03:00:31 2025 GMT
Subject: CN=81ce5fb946ae53bf2119e83af77aa20c33567b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:34:27:4f:02:76:8b:5e:af:35:cc:47:ba:
50:27:aa:46:83:13:0e:c9:4d:ae:04:54:ad:b5:f1:
e3:30:4b:e4:f1:64:33:1e:90:42:96:8f:3a:e4:9f:
64:39:35:16:83:7d:c2:66:69:ee:7b:b1:6b:e5:b2:
64:fe:9b:78:2e:1f:c3:0a:e0:05:ac:30:1c:b4:48:
8f:1a:d0:1f:6e:9f:c4:f2:06:91:5f:17:e1:2f:4a:
6d:85:b0:ce:63:08:e2:6a:72:a7:bd:83:b6:05:0a:
e6:f7:7b:23:a2:b3:bf:ef:8e:23:e4:13:2d:87:8e:
fa:61:15:97:75:b0:ed:3f:e6:f3:2a:4b:d1:73:7b:
1e:b2:50:bf:2e:2c:f1:eb:02:5c:f3:e0:37:70:de:
24:f4:7c:a6:4c:94:44:11:6b:a6:11:b3:e4:1b:0b:
88:97:1e:d3:e6:4d:fe:94:ac:d5:43:69:a4:5a:df:
33:fd:e6:52:53:a3:bb:00:df:94:3c:54:91:b6:77:
5a:0f:e8:1c:0f:1c:68:ca:69:9f:cf:e6:64:4c:b2:
5d:bc:69:b1:ec:56:f0:b4:72:a8:3a:dc:3f:e8:c3:
79:74:f2:e3:46:42:5e:c3:19:00:ec:e3:5a:2c:4f:
a4:a5:2e:bf:4c:66:2a:68:79:6f:32:9a:e8:95:7e:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:5F:B9:46:AE:53:BF:21:19:E8:3A:F7:7A:A2:0C:33:56:7B:82
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:35:00:0c:6c:92:83:bf:e3:42:45:a9:73:4c:0c:53:f9:
ae:8a:0b:f2:61:fc:8e:44:e5:85:91:48:65:90:55:6d:7b:61:
da:1b:a3:06:8f:3f:ec:36:10:c2:38:ba:f0:3e:45:b0:2b:0d:
c1:e7:ed:36:cb:1e:6d:e7:55:22:ae:82:35:8d:3e:b8:fd:2e:
d1:9a:39:1b:75:a5:7c:6d:4d:26:26:49:15:99:48:40:ce:56:
c6:d0:7d:6d:c0:0f:b9:a6:6a:4b:a4:e7:f8:22:33:1b:8f:40:
d4:08:6d:24:d4:93:b9:53:c9:4d:66:61:4a:62:8c:9f:04:ca:
0a:43:31:e3:40:df:49:7e:01:7a:2d:32:c5:c9:a3:fe:9d:0d:
d2:86:4f:c3:40:0f:00:70:98:c3:57:cf:38:15:92:df:8a:fd:
e8:55:04:db:b8:60:48:16:32:1d:a5:11:dd:a1:b7:8a:4b:cc:
e6:33:bc:3a:85:be:a9:33:3a:f5:5d:2b:c7:e0:84:4d:a2:d5:
17:ab:e2:f4:b5:54:41:eb:e1:d8:e2:14:b7:77:5e:c3:a5:0f:
a9:9c:39:52:06:ea:0e:e1:6a:e9:1c:f3:e3:a6:9f:ce:26:cf:
39:81:f5:a9:9f:71:b3:ba:aa:bb:e2:17:93:1b:27:b8:13:05:
3f:ce:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:13 2025 by rpki-client