Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier: JE+330Ru1daoXFi5Ssr2RvSDrNay+BAZwnnNGNgMM9o=
Subject key identifier: 20:D3:2A:64:2E:22:EF:21:2C:B6:E9:A4:9A:77:89:06:BB:DD:93:BA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019511A32036B89C4DA7BE1A0F4C7238DF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number: 01BD
Signing time: Mon 17 Feb 2025 02:00:58 +0000
Manifest this update: Mon 17 Feb 2025 02:00:58 +0000
Manifest next update: Tue 18 Feb 2025 02:00:58 +0000
Files and hashes: 1: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=)
2: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: Sf20t+ac/GT1cA3aida4wKa9fUE2DFSC199aHkFKtsU=)
3: VhykJr3iGtJe14xyVuqvvCapaNo.roa (hash: kzFiZWS6t+iaz12TBNlwLt+jTollGPfCjhtGoJB0BAA=)
4: sJiPnePKfJHI0k89ebLGPEkC7Ko.roa (hash: 3idiGD6n0HkdLPukcftrxd1Ei9k/RArpt4tStz3qqC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:20:36:b8:9c:4d:a7:be:1a:0f:4c:72:38:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Feb 17 02:00:58 2025 GMT
Not After : Feb 18 02:00:58 2025 GMT
Subject: CN=20d32a642e22ef212cb6e9a49a778906bbdd93ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:56:cd:19:f9:bf:0c:bb:a2:d0:eb:f0:3e:
55:57:3d:93:3a:43:1b:c1:69:5b:47:1d:96:65:6b:
40:24:0d:99:44:78:68:88:bd:b6:8f:f3:55:4b:87:
d2:f9:46:b8:0e:6d:7d:aa:ea:e5:4a:dc:0a:3c:6f:
6d:8b:ea:51:36:04:a2:2a:96:b8:21:fb:7c:6c:3d:
be:a2:e0:b2:b4:a3:23:57:31:39:54:d7:5a:71:b2:
4d:47:72:96:8e:65:61:54:ae:1b:65:3f:5f:95:16:
e8:51:54:d6:b8:05:65:38:f7:05:db:9e:1a:c2:16:
74:0e:8e:ff:7c:dd:44:a5:2f:cb:33:a0:4f:ed:e3:
94:ee:45:c4:58:39:ed:0e:2a:d2:f1:21:d5:c1:67:
78:fb:ae:13:90:01:d7:2f:f9:db:63:6d:15:74:74:
df:e5:89:0c:7c:c5:f7:01:36:db:82:64:51:86:6c:
95:1f:15:2f:83:c2:62:ed:bc:16:b5:e5:69:0b:5a:
7e:2a:04:68:8e:7e:c0:a6:dc:af:5d:4a:a6:96:98:
c5:32:fb:07:05:9c:c3:3a:2b:a2:b6:a1:36:eb:7e:
09:f9:37:53:98:17:7b:d6:d6:a2:a8:92:ea:b8:7f:
a0:2e:90:1e:e8:a6:4b:fc:3b:76:65:76:e7:23:63:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:2A:64:2E:22:EF:21:2C:B6:E9:A4:9A:77:89:06:BB:DD:93:BA
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:da:20:de:2d:34:ef:40:f4:6c:ae:23:64:33:e4:6e:fb:
66:9d:6e:7b:2d:74:6d:82:67:35:71:41:8f:a1:7d:2e:18:f5:
46:c1:ef:07:1d:63:39:06:47:50:dc:ea:56:cd:f5:74:08:c9:
82:78:9a:0f:62:7c:ac:63:18:9e:42:3f:65:48:96:e1:a4:4c:
be:a3:58:9b:1e:04:32:69:92:e4:f0:96:d3:04:4b:40:4b:f4:
85:6f:7f:5c:1e:8a:df:d1:01:c2:f1:94:1c:0d:b7:9a:80:2c:
bd:6e:d4:e1:f3:8e:85:c8:fb:4d:aa:cd:ce:91:dc:b6:63:e5:
f0:d1:d4:54:e0:23:42:a5:51:26:0a:a3:af:ff:7b:98:4f:fa:
65:e5:e6:8a:bb:3e:da:c0:4d:cf:47:1e:b0:22:10:07:e5:ec:
93:9a:3c:0e:c3:1b:2b:a1:b5:e7:eb:20:55:19:2b:a9:7c:8c:
7f:ed:28:96:14:19:11:3d:bb:4b:cb:25:06:04:17:17:3e:69:
e5:ad:df:33:e4:ac:3c:52:a5:2f:cc:bf:ba:fb:cc:0b:bc:8d:
01:fa:4d:0d:6d:e5:c4:91:93:40:ac:b3:75:da:11:d6:3f:f3:
1a:2b:89:ff:fa:ef:01:d0:30:8a:ab:3f:35:d6:66:e4:90:8f:
47:c1:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:07 2025 by rpki-client