Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: uHFDv6aiXSAEvlitec+ViBEumwBDvfWNvLif6wEJcZg=
Subject key identifier: 17:96:FB:35:5D:A1:56:0D:85:9E:6F:3F:0F:AD:69:DC:ED:FE:EF:1A
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 0194C42C1D1F8B1A60C76C2498D92075656B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 01FC
Signing time: Sun 02 Feb 2025 01:00:12 +0000
Manifest this update: Sun 02 Feb 2025 01:00:12 +0000
Manifest next update: Mon 03 Feb 2025 01:00:12 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: gRyVYXBbjMeF2AFEbj33Nzd+prl/aLdVLzHo6MVwn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1d:1f:8b:1a:60:c7:6c:24:98:d9:20:75:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Feb 2 01:00:12 2025 GMT
Not After : Feb 3 01:00:12 2025 GMT
Subject: CN=1796fb355da1560d859e6f3f0fad69dcedfeef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:9a:92:1b:a9:7d:4a:c3:a8:ed:32:64:07:
0b:a1:93:34:8e:ad:28:87:64:11:29:ea:10:10:1a:
c9:ea:5c:1b:c7:f6:3f:e3:68:15:bd:77:cc:a4:81:
59:8a:eb:e9:1b:43:19:db:17:b1:34:cf:25:b2:c3:
e0:f6:19:16:11:8e:0f:8e:e0:11:50:1e:20:a7:46:
73:0b:09:75:e3:ce:2a:05:29:6b:83:89:1a:ec:1b:
21:00:97:15:3a:36:66:0a:2a:b6:61:c1:09:b5:89:
d9:94:4f:cf:ca:73:45:c7:bf:71:29:2e:4f:51:35:
f9:7a:0c:c5:30:9c:55:5d:e1:62:e2:68:33:d3:6f:
7d:41:e0:f8:b3:f3:5f:22:d7:56:c2:74:cd:50:5a:
b3:1b:1b:99:33:0a:08:dc:e3:3a:a0:2a:62:86:8f:
c1:05:2f:df:66:97:6e:32:67:5f:65:f9:41:67:55:
e6:1d:1d:e6:3e:3b:b6:8b:d4:82:82:8e:ed:8d:9c:
eb:c4:c7:d9:7c:06:dd:ca:f5:66:c1:00:0a:e6:47:
51:c7:fb:d8:84:27:fe:77:ca:e3:ad:b6:11:fc:0a:
18:6a:f7:df:56:dd:02:dc:34:cb:01:f2:63:f4:1b:
59:ed:b5:a9:2b:37:0a:81:46:9c:78:c4:3f:fb:2e:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:FB:35:5D:A1:56:0D:85:9E:6F:3F:0F:AD:69:DC:ED:FE:EF:1A
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:26:9a:2c:d9:4c:f9:eb:ac:d3:f5:23:33:cc:68:78:31:
7c:0a:90:68:22:0b:c3:de:fd:75:bc:3b:f4:ca:de:c9:30:e8:
de:61:ff:38:43:8a:c2:53:97:33:16:63:5b:50:8b:26:03:03:
76:d1:37:39:f9:3f:9d:88:17:9c:0f:ba:a6:85:4e:6e:d7:69:
7d:1a:c8:ef:20:92:f0:9f:6d:24:19:a4:ce:d3:aa:c9:c0:25:
b2:b0:8f:08:69:00:41:63:4d:f8:6c:c9:da:5b:35:bf:3e:23:
e2:75:40:65:ec:ea:fc:9e:47:0b:31:05:00:b5:d4:56:47:1b:
a0:0b:09:29:cd:e8:31:fa:42:ae:be:c8:b5:ee:2c:86:c2:d5:
9d:b4:81:1c:f4:8a:41:97:dd:f6:92:bd:45:68:fb:18:c7:31:
c2:8b:ee:1a:32:ca:5c:7d:5a:63:a9:f1:06:4e:90:d1:f8:bd:
8a:e8:8b:c2:7a:03:99:a5:93:c8:06:75:90:74:6f:b9:c5:79:
62:9f:65:ce:dc:91:7b:48:7f:ae:49:2d:04:36:53:22:ec:3b:
1f:ec:78:74:dc:81:aa:99:12:5b:6f:ae:38:ed:a0:7f:c4:a7:
84:ed:58:92:da:d4:9d:af:99:2b:80:15:8c:8b:85:2e:a4:11:
70:7a:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:54 2025 by rpki-client