Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier: pAJApZBsFJNtpqUE21KEaHqUuiv+RGyIOusT9+VCDYw=
Subject key identifier: F2:90:9B:3E:F1:6E:C0:5C:2B:6C:CE:C6:0F:B4:38:63:47:F3:D9:0C
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial: 0195116BFB9038196D1BEB92C8DEC1D46A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number: 0393
Signing time: Mon 17 Feb 2025 01:00:44 +0000
Manifest this update: Mon 17 Feb 2025 01:00:44 +0000
Manifest next update: Tue 18 Feb 2025 01:00:44 +0000
Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: qjBu3z9MQg7kT+V1o49nNu31KWIULWW8SziGuvhKWug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:fb:90:38:19:6d:1b:eb:92:c8:de:c1:d4:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Validity
Not Before: Feb 17 01:00:44 2025 GMT
Not After : Feb 18 01:00:44 2025 GMT
Subject: CN=f2909b3ef16ec05c2b6ccec60fb4386347f3d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:8c:58:9f:d6:ec:f3:bb:95:13:a3:a9:14:
04:35:61:4f:90:49:a5:94:d6:2a:29:aa:87:4c:d4:
15:8d:ac:40:e6:6d:83:48:b0:0f:b3:d8:50:f9:33:
54:a9:53:f1:8d:dc:bf:62:d9:1c:0b:62:25:9a:c9:
2d:08:7c:16:19:c2:90:9c:5f:e8:62:51:e1:0a:ea:
d6:53:53:74:71:b1:ca:05:cd:3e:66:b1:d6:7a:69:
35:5c:fb:03:f7:5c:26:84:a4:48:5b:4b:d3:0c:2c:
fb:96:a5:51:c5:89:49:a9:f5:fe:f3:bf:06:50:cb:
07:cc:ee:7a:06:07:4e:4a:65:d9:26:7e:c9:8e:f4:
e9:ac:88:7e:dc:53:83:9f:0c:aa:8d:19:22:86:c6:
4d:02:30:13:64:13:e3:39:0a:18:fc:c9:33:03:63:
86:e0:a6:bf:e9:6e:ae:8a:b7:db:9e:28:bc:0e:4a:
ec:e8:1a:99:43:48:0c:e5:ef:b6:f3:fc:c7:45:8f:
36:09:45:6e:78:9b:3f:91:36:70:73:14:ac:a4:4f:
d6:af:e1:ba:fd:ce:95:8d:4b:69:63:a7:38:20:52:
38:af:3c:c7:1a:5b:7f:6a:15:ed:46:e7:af:71:7c:
2b:e2:50:09:de:96:57:31:01:a1:95:e6:5e:9e:1a:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:9B:3E:F1:6E:C0:5C:2B:6C:CE:C6:0F:B4:38:63:47:F3:D9:0C
X509v3 Authority Key Identifier:
keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1b:2a:55:e4:b3:c6:59:99:88:16:ba:a6:60:41:d0:dd:fc:
b6:75:bb:f9:07:cb:95:34:4d:ea:60:32:5c:8e:9b:92:03:fe:
80:29:c1:50:e3:e7:3a:1e:d6:3c:40:0d:22:73:66:69:5f:46:
bb:ca:39:a5:e6:a2:51:d3:ee:c7:41:70:94:27:01:c8:93:ae:
4b:f6:65:5a:55:bd:5e:cc:8d:22:8d:35:d6:71:37:8b:19:a2:
14:4b:30:cd:c4:cb:7d:67:83:50:f5:f8:24:17:c7:ea:f3:e6:
b7:e5:1b:60:b6:77:d5:80:f9:b6:46:30:28:53:48:5f:4b:5b:
2c:cc:1d:00:89:25:36:0d:14:a6:30:0f:55:c9:7c:3e:09:c3:
44:93:3e:e6:cb:de:c3:85:86:6a:0d:ef:10:2a:22:b3:9d:ef:
e0:9e:a5:48:a2:ee:93:82:9d:6f:1e:7d:33:7f:3c:2a:ff:2d:
58:92:47:2d:a9:a1:e8:8f:0a:f3:9c:c8:68:38:d2:cc:8d:e6:
a7:99:06:59:d6:59:d5:8c:be:d4:df:49:ea:cc:e0:d4:7c:ed:
20:33:27:f1:79:81:f2:de:5a:23:8c:b0:fd:9c:77:11:d9:b8:
02:35:be:a4:6d:ce:db:f6:7b:9b:63:6d:7a:c8:e1:92:a8:8f:
d4:98:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:18 2025 by rpki-client