Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: inMcyhi6eUO3vKcifMrf/Z8ddRRzeH2bYYvt1tVlM3E=
Subject key identifier: F6:B5:20:9D:4D:AB:12:82:A5:94:FD:C1:F7:92:80:0F:03:AF:AD:77
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0194BAF22D3F16AB12330FA5B436E4E4AF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0A95
Signing time: Fri 31 Jan 2025 06:00:20 +0000
Manifest this update: Fri 31 Jan 2025 06:00:20 +0000
Manifest next update: Sat 01 Feb 2025 06:00:20 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: OzuJ5wck+zAJbvpM8RKFRh1GS22pMpo+sKcHfsUR14I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:2d:3f:16:ab:12:33:0f:a5:b4:36:e4:e4:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jan 31 06:00:20 2025 GMT
Not After : Feb 1 06:00:20 2025 GMT
Subject: CN=f6b5209d4dab1282a594fdc1f792800f03afad77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:63:c1:53:26:32:d4:86:ba:00:01:4a:6e:
37:70:6c:78:f1:09:1a:a8:06:00:92:6d:1d:15:03:
2f:26:a9:02:ea:35:79:3c:85:58:63:c6:2a:9f:d9:
1b:92:83:f7:aa:45:cd:56:7c:ec:47:50:dd:45:63:
8b:79:20:70:91:db:a2:6c:ed:58:05:7a:64:6a:71:
1d:72:31:ce:2a:41:2d:3f:e4:91:73:b8:da:eb:bb:
f7:c2:e2:f1:f4:f8:4a:09:28:ca:c8:e6:08:85:c9:
fe:76:33:d2:25:e8:67:94:9e:45:ea:e0:1d:e3:7c:
b3:76:3f:65:77:5e:0b:08:4b:72:49:4a:76:61:12:
38:f7:54:61:d4:15:e4:f9:be:49:7a:a5:d6:01:39:
09:1d:ad:e7:16:67:f7:02:97:03:87:06:dc:9f:c3:
a4:d0:f4:0c:aa:3b:ee:fa:c8:2a:2b:d2:c7:24:6e:
b6:93:b4:44:bd:b6:5f:c5:68:67:b9:11:70:89:0c:
4d:da:ff:80:f4:d7:91:e3:2f:b5:89:43:cc:55:5f:
88:0d:b7:5a:35:79:04:80:93:13:21:14:02:78:a8:
6f:f0:df:e4:fb:35:65:b8:1d:db:c1:44:21:1b:b4:
dc:3c:a9:83:7f:83:b5:a2:77:82:d2:99:fe:d2:64:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:20:9D:4D:AB:12:82:A5:94:FD:C1:F7:92:80:0F:03:AF:AD:77
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:d8:e5:0b:44:0e:12:89:57:3e:9c:b7:72:53:f6:c3:a9:
49:e6:5d:89:f6:82:36:e2:9b:ff:96:f8:cd:75:3e:ae:03:8e:
57:cd:fa:87:c9:45:5a:06:46:35:3b:f5:cd:11:92:70:2c:9c:
61:a9:75:16:40:44:ad:bd:5e:48:65:b1:34:c6:d5:d2:37:7a:
e7:f0:ef:1a:5f:56:07:c9:5c:f3:f6:74:6e:df:fc:50:68:a6:
c8:a8:0d:24:82:13:ee:4f:b4:ae:fa:62:88:8a:11:0e:22:fa:
d1:35:fb:1e:2a:8d:87:e1:b2:d0:20:73:e8:76:45:0b:63:79:
9c:0d:d0:6a:a1:6a:f6:3d:e1:08:89:5e:d7:02:81:78:ae:15:
98:a5:11:df:9b:b7:cf:d1:6b:b1:77:9f:02:48:5f:68:6d:df:
dc:52:31:d0:d8:93:85:6c:4c:c4:e1:1a:9c:e9:8a:cd:b9:e8:
09:d4:4e:93:5a:f2:3e:e9:20:50:0d:29:e6:ae:74:38:ce:40:
a0:fd:87:d3:ec:29:ad:e4:23:ad:b0:7f:ce:18:89:a7:20:1b:
a0:e2:15:c0:37:c2:c8:16:d1:c7:ca:92:f9:dd:d8:1c:83:24:
c1:bd:4f:4e:e5:ab:76:17:0f:dc:82:ca:98:10:61:9d:40:1b:
50:ac:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:17 2025 by rpki-client on console-fra.rpki-client.org