Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: nSRlm6r/ND+suLLYaMRlUVHfiuGFoLlv/ox59z+mvTE=
Subject key identifier: 2C:2F:B0:43:C8:2B:DC:59:8D:AC:BE:C4:7A:6E:BB:8F:0B:67:B2:5B
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 019510C6E490568DFCAFFA48BB60C590F526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 0CE5
Signing time: Sun 16 Feb 2025 22:00:24 +0000
Manifest this update: Sun 16 Feb 2025 22:00:24 +0000
Manifest next update: Mon 17 Feb 2025 22:00:24 +0000
Files and hashes: 1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: 1mQN+wWKJx9TFGLRQ1YpnmKQv693ufR8oUHgTPfiSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e4:90:56:8d:fc:af:fa:48:bb:60:c5:90:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Feb 16 22:00:24 2025 GMT
Not After : Feb 17 22:00:24 2025 GMT
Subject: CN=2c2fb043c82bdc598dacbec47a6ebb8f0b67b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:7f:49:a1:15:fa:b3:60:c6:5e:68:2c:93:
8b:99:43:60:79:ff:fd:9d:1e:98:fe:0d:61:77:cf:
5c:35:c2:81:75:4f:2e:41:99:6c:35:11:c1:47:d2:
a0:f5:d4:48:89:6c:c0:7d:20:52:cb:b9:29:3d:c0:
7d:c0:1e:c2:3e:27:4d:a8:50:e6:b9:6a:c2:5d:42:
f4:e7:56:cb:e1:4d:9e:95:08:4e:87:99:6f:fb:87:
02:eb:b7:59:d4:97:14:28:d0:1d:ca:be:32:74:5e:
f7:f6:ab:fd:99:86:fd:4b:c3:30:ce:f0:b9:98:4b:
33:32:8d:ee:c9:9f:ca:02:68:c9:74:cf:65:4a:30:
30:2d:03:af:58:0a:f3:1a:39:94:0c:ed:8d:f7:7c:
d8:e5:1b:d7:c3:c7:b5:7b:f7:98:53:d0:89:34:07:
03:73:cb:25:24:75:99:c2:23:ec:b8:4a:d8:05:48:
91:a2:6b:ba:cb:f6:96:ca:96:30:41:4e:27:24:30:
7e:c0:2d:9b:22:f9:cc:e9:0d:d6:53:14:93:bc:62:
fd:2d:dc:c6:ef:5d:22:29:03:08:d0:ce:b3:83:30:
00:96:c9:78:01:87:84:9b:bf:d4:0c:6d:6e:60:79:
f9:50:a1:b7:53:a0:6e:8c:4b:15:97:e7:6d:b7:bd:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:B0:43:C8:2B:DC:59:8D:AC:BE:C4:7A:6E:BB:8F:0B:67:B2:5B
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:e1:09:86:c1:6d:7b:4a:e3:87:a4:cf:d8:7f:27:0b:b3:
dd:dd:b4:95:c1:85:59:63:90:46:bf:39:cb:31:98:be:fc:92:
de:79:c9:02:94:d4:77:cc:2d:62:30:57:c5:41:4b:a5:b3:8e:
2a:a0:be:42:3b:2e:7e:43:df:00:f3:b6:15:ed:6f:5b:18:08:
aa:c4:37:4b:46:63:32:e3:a2:df:c5:64:b6:bb:a8:66:8e:1a:
52:3e:7a:7d:0d:44:9b:36:7b:85:07:75:c7:85:33:c9:9e:27:
9d:b3:25:e5:dd:c5:d3:cc:9e:29:76:5b:8f:09:0b:92:a7:16:
16:e1:5f:15:79:42:bf:a5:c2:81:de:1d:ed:78:98:e3:66:5c:
da:e8:d4:a8:db:64:90:2c:cb:d4:3d:d2:2d:d8:0c:8a:70:00:
91:e0:46:76:81:52:8d:ee:cb:fe:b8:c4:e8:23:79:36:45:85:
1b:fe:d7:fd:51:71:63:c3:ed:ac:4d:7f:9f:05:d1:4e:0f:21:
9e:82:6f:95:fc:f9:9c:81:ec:c8:28:ec:52:79:e9:77:cf:bd:
ce:da:61:66:36:51:b6:6d:e8:0c:52:69:8c:db:03:ab:71:a2:
66:2a:1c:f5:1d:df:56:6b:31:99:d3:7f:77:be:d4:89:15:62:
5e:9f:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:13 2025 by rpki-client