Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier: OsfF1v6eMdBo8A/9gu1taZFUtOm7iHocytouOx5ztsE=
Subject key identifier: 1E:BA:81:78:C3:7F:07:CA:90:3B:9E:41:0F:27:9B:D1:4D:B0:3E:2F
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial: 0194BABBCECF1A140FF2C34B6F0DD9F62743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number: 0366
Signing time: Fri 31 Jan 2025 05:00:57 +0000
Manifest this update: Fri 31 Jan 2025 05:00:57 +0000
Manifest next update: Sat 01 Feb 2025 05:00:57 +0000
Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: KkMh1ec75WcNpf1WAfBalzDhBa1+qRAg09p5OxlCNH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ce:cf:1a:14:0f:f2:c3:4b:6f:0d:d9:f6:27:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Validity
Not Before: Jan 31 05:00:57 2025 GMT
Not After : Feb 1 05:00:57 2025 GMT
Subject: CN=1eba8178c37f07ca903b9e410f279bd14db03e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:31:ec:0d:ba:27:21:50:37:56:f8:57:82:
a6:b1:27:b5:3f:68:3f:1e:1e:8d:35:ca:2e:a5:33:
52:d3:3e:bd:af:43:50:04:e6:b4:66:be:ec:61:f9:
92:7e:29:8d:07:af:bb:6a:d0:56:10:fa:61:f7:1d:
9c:bd:a2:92:5e:75:96:e5:62:f9:15:aa:e2:e1:dd:
31:99:55:20:c5:d7:31:55:51:da:2a:5f:05:96:34:
5d:b1:02:9a:d9:22:a0:d8:38:ff:63:1a:0a:22:0b:
86:f2:5b:b8:e9:47:5a:a0:e3:28:07:61:c3:99:70:
a5:47:bc:d2:b1:c2:35:2f:ea:a3:fa:bd:4b:9a:2c:
c1:d5:94:6e:5d:e6:06:bd:ea:5d:d1:9c:cf:f0:d2:
b0:bc:e8:a1:8d:df:c0:c1:41:31:81:ff:31:b2:f5:
99:cb:68:81:a9:4f:49:0d:1d:90:f4:48:1b:0b:06:
33:66:49:29:4e:a1:f7:4a:dd:e7:a8:42:1b:d5:bf:
20:04:dd:30:6d:0d:eb:86:95:4a:9d:e5:14:0b:70:
67:6e:07:0f:78:a5:9a:4b:90:32:f1:bb:77:76:e9:
44:c6:79:1d:bf:8a:b3:9c:8c:2f:90:22:7e:46:a6:
a0:a8:31:d4:b5:63:db:20:7f:00:77:59:cc:b8:79:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:81:78:C3:7F:07:CA:90:3B:9E:41:0F:27:9B:D1:4D:B0:3E:2F
X509v3 Authority Key Identifier:
keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:2e:01:34:2f:f9:fa:9e:3a:55:ad:79:b6:78:23:7f:e9:
fd:91:03:7f:8d:48:65:eb:59:cd:c3:16:05:97:e9:d6:b5:06:
84:d2:9a:38:bd:34:3b:72:a2:65:72:5f:68:47:90:a2:72:ff:
83:4c:5e:0a:f8:ae:e0:b9:e2:f9:ef:f5:6b:02:1b:60:74:5d:
c7:47:e8:dd:a6:ce:11:75:47:b7:7f:5f:cf:8f:2b:ab:25:f7:
41:4d:ac:31:b5:19:18:81:46:a4:99:e1:ac:d0:5f:44:51:3b:
37:b8:46:d6:96:bf:0f:7a:40:f1:f9:0d:82:8c:e6:3c:c3:af:
96:12:d7:ec:53:0b:1f:21:4b:46:da:5c:f9:49:02:c8:79:6b:
14:4d:c9:7b:9d:1f:1f:ed:a7:d2:ab:bf:85:0d:92:21:1c:49:
b0:85:d3:14:1c:d7:ab:b7:4b:c6:4f:7a:72:3d:e1:ee:75:a6:
41:00:49:76:01:ef:91:31:48:b1:08:ca:43:10:ea:d9:21:35:
1b:67:0e:34:89:21:a0:92:44:a0:37:0c:44:fe:f2:2c:cb:29:
5e:74:fe:9e:b3:c1:cf:d0:d7:f3:ae:d8:f0:af:3f:58:1e:34:
99:b7:f2:fe:0a:31:7d:02:35:c3:6c:b7:d9:8f:3a:23:54:31:
d7:7b:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:17 2025 by rpki-client on console-fra.rpki-client.org