
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: FMXIJ9vL24uspLW8z9hSbVv38VdJcILYdIh0U9k+1ZU=
Subject key identifier: FF:7F:D6:C5:EA:1A:B8:2D:7B:F3:42:CD:31:B3:BD:5B:F7:BE:06:74
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 0194BABBAD231388415D45975166C892A95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 0EF9
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: rv3TkkShqmZWN/zMPxox3mqXGpg5fGMruQHCEzqBbkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ad:23:13:88:41:5d:45:97:51:66:c8:92:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=ff7fd6c5ea1ab82d7bf342cd31b3bd5bf7be0674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:71:0e:3e:bb:c9:5d:25:91:7f:0f:3a:ba:
08:fd:dc:5b:ac:d6:4e:17:d3:c3:87:d7:b3:4b:b0:
a7:c3:e2:0c:32:3c:4c:12:77:d1:ee:79:b3:19:d4:
42:75:62:1c:e5:5d:b3:4d:53:f0:1d:df:ce:ff:57:
62:cd:59:88:79:fd:db:ab:4b:6c:f9:67:83:54:65:
40:8d:29:85:a2:91:3f:b5:bd:f2:f8:d9:c9:14:68:
7d:45:0a:1d:ee:4f:fd:4d:8d:c5:f3:1c:7a:f5:16:
2a:77:c8:f0:89:be:f1:07:bb:48:d2:09:47:e0:60:
22:e5:04:19:1a:6c:d1:cd:01:e5:1d:d3:94:48:dd:
a5:61:a5:78:b7:5f:b4:56:30:ec:d0:3e:fb:ec:99:
60:44:71:70:de:38:e5:1e:af:84:f9:ce:9c:ef:fa:
5e:14:f4:66:c7:6d:bd:45:73:92:14:4c:99:07:fd:
b5:1b:24:97:e9:d6:c8:d0:b3:ea:44:47:75:53:65:
61:22:9c:96:4b:ca:2d:50:fa:24:1a:89:dc:38:06:
fa:62:98:b1:8c:fc:da:29:c6:df:90:7d:7b:b1:47:
67:eb:06:f5:2c:70:b3:1b:92:21:36:29:29:a9:ca:
ab:ba:dc:4c:9b:e1:4f:c7:a3:20:a1:0f:88:0e:dd:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:D6:C5:EA:1A:B8:2D:7B:F3:42:CD:31:B3:BD:5B:F7:BE:06:74
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:01:d4:cd:d2:91:26:ae:ab:2f:27:3e:09:e9:3a:6b:6e:
27:61:8f:79:9d:40:2c:94:da:5e:24:a4:23:9e:9f:44:67:ca:
0e:e8:8c:9c:b6:3f:b6:be:1b:7a:68:ad:65:64:40:13:12:e5:
8d:03:9d:c1:82:16:f5:d3:ba:f6:36:d0:3b:3e:6f:0e:44:f6:
e7:2d:0b:cc:12:66:89:49:de:fb:63:59:b0:e5:bd:61:59:68:
05:bc:af:3d:20:26:29:29:c0:d4:f4:af:b1:71:00:7c:ce:35:
ab:06:a1:ff:f1:63:7d:5e:8d:1e:71:bc:ed:df:0f:89:7c:e0:
50:49:c2:94:cb:ad:91:b0:db:31:5f:5a:8d:17:3a:ea:0b:8c:
13:e2:51:2d:6e:6c:06:b8:09:51:ad:91:63:37:6b:ba:82:40:
c9:43:8e:da:f5:cf:02:d5:ca:aa:22:62:a4:26:c2:c4:ce:be:
7f:13:32:0b:0a:8b:f3:2b:fd:ee:a5:ff:0c:f1:39:12:08:eb:
61:83:2f:94:40:5d:5c:0d:9c:eb:71:8a:bc:a5:7d:91:4f:11:
21:07:fc:e7:44:cc:e9:b1:1f:17:06:5b:65:08:64:2c:98:af:
a5:ac:20:37:30:69:d3:31:4c:c1:67:9c:29:e6:61:3d:94:9b:
7f:45:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:05 2025 by rpki-client on console-fra.rpki-client.org