Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: 5sqjXLzTrnS/oePAt9FzZZ3du/PPht/HdAYyMsMm7zs=
Subject key identifier: 25:6C:AA:6A:E5:61:0B:65:C5:7E:C5:6A:37:D9:42:96:00:6B:E6:47
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 0194BB28FEB682B0C2D05A611528A295F43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 0732
Signing time: Fri 31 Jan 2025 07:00:13 +0000
Manifest this update: Fri 31 Jan 2025 07:00:13 +0000
Manifest next update: Sat 01 Feb 2025 07:00:13 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: 7sh++kCgkTmew9QXDJpl5Vd6zjRZ+AV045SJPuPpdCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:fe:b6:82:b0:c2:d0:5a:61:15:28:a2:95:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Jan 31 07:00:13 2025 GMT
Not After : Feb 1 07:00:13 2025 GMT
Subject: CN=256caa6ae5610b65c57ec56a37d94296006be647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:d0:c5:23:e2:8e:c6:ae:71:5f:8a:41:b8:
1b:5b:49:52:11:7d:ac:39:d6:05:14:dd:ba:20:8b:
0c:32:a4:da:6f:cb:c7:d8:28:17:93:b1:ba:26:4e:
93:b6:74:c0:fa:3b:14:36:dc:62:38:98:06:e9:6b:
c0:bf:32:44:82:a4:8f:0b:1a:ad:60:fc:1c:3e:94:
8f:25:b8:27:e4:85:4d:b3:04:ab:ff:d8:00:83:23:
1c:b0:13:1b:65:5c:d3:91:f0:4a:c4:ed:62:e8:fd:
0f:b6:5a:b9:7a:61:ca:98:07:a4:c5:11:04:ee:ff:
37:7c:c5:8c:00:2c:1e:e2:b7:05:3c:8e:b8:65:12:
91:40:31:c6:c1:fa:31:20:c6:a8:94:23:f4:c4:86:
cd:48:d3:0e:e9:8d:e8:24:42:91:77:d7:36:1d:62:
c8:17:68:75:45:21:dd:e1:bf:2b:5f:eb:8e:a1:06:
f6:9f:06:22:41:19:37:60:7a:b6:7f:c5:91:23:ad:
14:b3:25:c6:aa:4f:0b:33:14:66:03:a5:b5:a1:b1:
d4:d5:36:40:03:d2:dc:2b:cf:3d:0a:dc:89:39:c8:
1a:fa:f5:16:47:a9:97:7b:81:61:92:b8:e4:e0:63:
d3:e6:c5:7d:ce:c3:0a:b2:43:dd:31:da:61:3b:92:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:AA:6A:E5:61:0B:65:C5:7E:C5:6A:37:D9:42:96:00:6B:E6:47
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:a1:3c:e2:20:9d:a6:13:5c:76:57:6f:a3:08:38:6b:12:
e3:39:4a:16:6a:3a:18:81:63:54:42:71:68:70:a4:07:71:ea:
2a:17:bb:35:78:e7:77:d7:65:3a:24:3b:1e:23:43:c2:0a:b3:
83:dc:2e:11:ad:9c:9e:2e:86:9c:85:fc:3e:df:f9:f6:39:02:
b9:72:fb:32:c0:a0:eb:fa:6e:e4:ec:79:59:62:0f:8c:d0:d9:
01:5b:47:8b:e0:72:9c:4b:9f:ff:92:0e:01:29:19:6d:77:d0:
56:57:16:34:34:a5:d6:74:df:0b:6f:1b:61:2a:69:1c:f5:47:
ae:5a:8d:46:d5:2b:20:6f:43:94:de:bd:a1:2f:5b:02:b5:dc:
70:37:ff:06:df:dd:a4:1c:e9:19:8b:9a:61:f7:d9:ad:93:5a:
31:22:be:3b:eb:d5:8f:82:53:92:c7:f7:2f:90:ca:2c:89:13:
4d:10:3e:05:b0:7f:16:a5:c1:e2:a7:00:54:a6:f2:08:e6:13:
72:96:11:d5:36:4c:c9:d2:bd:28:f3:04:b5:ba:fc:02:d8:00:
9a:14:29:70:0c:b2:1b:98:51:5a:ae:74:1d:f8:a5:6b:84:bd:
37:3d:a3:3f:51:c2:bf:fc:6e:0c:56:b6:f3:df:78:23:a5:d3:
f9:35:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:17 2025 by rpki-client on console-fra.rpki-client.org