Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: FNOoqfltSvO7ivXdSYsV/Rk9EuDBggyMpZ4Y0l/yals=
Subject key identifier: F4:CD:30:8F:43:F3:1C:A4:7C:15:C7:A1:BB:80:CE:A3:01:26:A4:03
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 0194C387B403BFFAD7046C36AC21C378F78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 12E0
Signing time: Sat 01 Feb 2025 22:00:38 +0000
Manifest this update: Sat 01 Feb 2025 22:00:38 +0000
Manifest next update: Sun 02 Feb 2025 22:00:38 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: xjvIv/QJjWdqJ/cc3havlvFUQU8jnbhTfdCIM/9KoRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:b4:03:bf:fa:d7:04:6c:36:ac:21:c3:78:f7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Feb 1 22:00:38 2025 GMT
Not After : Feb 2 22:00:38 2025 GMT
Subject: CN=f4cd308f43f31ca47c15c7a1bb80cea30126a403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:ca:7b:ad:02:7e:2b:81:01:dd:2c:d3:dd:
56:47:11:e6:4b:79:2a:8a:9c:ed:63:58:13:52:bf:
7d:a3:d0:da:38:6c:e5:5c:c5:c6:45:18:cc:db:20:
31:89:9f:3d:13:ed:4a:d5:8f:8c:aa:76:57:92:90:
0c:cd:1c:21:a4:a8:b0:33:52:89:53:01:3d:ab:5d:
e5:ed:e6:fb:0b:82:f8:40:d6:b8:26:8d:99:c6:c1:
2b:5c:26:4d:5b:36:c4:a2:28:d5:7b:ec:47:0a:52:
ca:63:60:64:98:d5:3d:df:e9:b8:39:16:44:ab:01:
4b:da:a3:17:36:0a:86:a1:6a:49:c0:71:f0:98:bf:
1e:54:d1:ce:4d:79:a6:79:1d:a2:e0:7a:f0:de:1d:
c9:e9:10:a1:2c:78:f3:06:a9:d1:be:7a:0b:b0:04:
84:3d:5c:05:97:9e:29:f7:99:aa:67:06:9f:13:01:
64:f0:10:52:29:d5:59:b3:fb:94:49:ef:cf:f8:43:
15:2f:18:9c:0b:71:08:75:24:af:0e:27:9b:0a:58:
de:14:bb:bd:5d:cb:cb:17:6d:68:89:e2:0f:aa:01:
4d:85:13:e9:83:ce:cc:a4:55:34:15:cd:2e:1e:e4:
27:8f:1f:d2:e5:84:59:13:3b:97:d9:be:d4:02:22:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:30:8F:43:F3:1C:A4:7C:15:C7:A1:BB:80:CE:A3:01:26:A4:03
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:5a:47:7e:f2:c9:a2:4f:9a:9b:a7:00:c1:44:4b:50:b1:
78:05:4e:86:28:16:3f:07:00:9a:08:ff:74:8d:7c:ae:17:ca:
5f:9a:01:2a:7d:5f:51:cb:e8:a5:93:e6:57:53:7c:d1:44:9d:
dd:20:d5:27:1a:6d:4c:be:88:ae:0e:06:a5:2e:03:53:a2:3b:
3a:98:3c:e9:a5:c2:96:95:ca:ef:9e:48:14:0c:5c:16:32:c6:
6d:6f:dd:58:2d:36:c6:ac:2f:fe:b9:16:72:dc:ed:86:41:3e:
1c:a4:3e:7e:65:b8:98:0d:d5:0d:b6:a3:78:38:ed:12:3e:8c:
d2:78:e4:22:32:32:45:7d:b2:19:06:5e:8a:e8:bc:e5:e0:b1:
af:a1:73:26:22:44:4f:f4:ac:91:7a:d1:74:f1:a6:5a:03:13:
30:b4:39:4b:30:7a:4b:6f:3b:00:7c:fb:bd:47:26:30:24:70:
75:bd:ad:db:7f:f2:0a:a7:33:d5:d3:9b:bd:19:5c:ac:e3:c8:
28:63:66:1c:34:bd:ed:d0:af:86:d0:dd:42:03:f7:75:bd:48:
c3:2c:02:0d:d1:ef:16:99:fa:b5:ee:9c:d3:58:f5:78:5a:0a:
c0:f3:87:28:41:38:a0:13:61:b6:d0:f0:ed:23:0c:42:4d:83:
06:e3:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:49 2025 by rpki-client