Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: fuz4Fj/UTJRq6lhgpbX4RQqNuNWHF9EN5aap2WGFpVw=
Subject key identifier: 20:5C:58:B3:CC:26:4D:4E:5E:72:B2:54:80:20:44:D5:8E:58:9F:B1
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 019510C79AF7FEB658E4ABDA07C3498DAA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0C95
Signing time: Sun 16 Feb 2025 22:01:11 +0000
Manifest this update: Sun 16 Feb 2025 22:01:11 +0000
Manifest next update: Mon 17 Feb 2025 22:01:11 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: xNwvMzjvPlE2eEJ/uD7kF+RhxYCcoRk4Lr+2g15STf4=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:9a:f7:fe:b6:58:e4:ab:da:07:c3:49:8d:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Feb 16 22:01:11 2025 GMT
Not After : Feb 17 22:01:11 2025 GMT
Subject: CN=205c58b3cc264d4e5e72b254802044d58e589fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:e0:65:4a:67:1a:c4:7a:90:e7:24:83:fd:
46:65:0e:c4:90:fa:a2:00:56:41:44:1b:00:91:e0:
bf:8f:23:9e:31:63:c5:d7:52:51:3e:99:ef:95:f8:
26:77:34:07:94:20:87:dc:42:f1:d5:3a:af:c7:3d:
a3:de:a8:64:f6:08:f4:01:e1:26:02:d4:bb:a5:24:
cd:a1:fd:bb:e7:6e:8c:c5:8f:95:9c:17:b7:e3:d7:
fe:9f:db:d5:95:11:88:e0:bd:76:c6:3a:b8:6a:95:
91:d6:40:26:b5:c4:96:90:df:a0:43:70:a8:0a:af:
54:b2:d9:84:77:2f:09:8d:be:58:57:c8:dd:a7:d3:
89:bb:10:d5:02:1e:53:f3:8b:47:5c:8f:a1:49:ce:
2a:09:3e:61:cf:df:29:56:63:a1:01:db:48:dd:78:
9b:f7:06:0d:7b:f4:5f:4b:99:87:f4:7d:52:83:f5:
a2:1a:5f:13:fe:de:c6:c8:82:c4:c9:ad:b5:bd:17:
47:2d:c0:d0:a7:56:c7:25:7d:03:85:e8:a1:b3:37:
1e:98:01:0a:6d:72:a8:fd:52:02:39:e6:8e:ef:ea:
09:53:ff:b6:c6:a7:84:2e:5b:da:bb:ba:79:62:bf:
a5:c7:85:55:08:2c:6a:ae:b1:33:f4:46:b5:17:47:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:58:B3:CC:26:4D:4E:5E:72:B2:54:80:20:44:D5:8E:58:9F:B1
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:47:5f:cd:83:f1:9c:ab:d1:7d:55:51:78:2f:b0:79:1a:
e8:6a:87:46:5f:27:81:2f:ea:aa:b3:a8:de:c4:da:0c:44:91:
5b:a4:6b:cf:c3:d5:db:c0:f9:8e:6f:34:97:3a:65:19:d2:c5:
c2:cc:36:d8:c6:9b:53:40:c5:dc:ef:88:e0:7c:08:26:3c:53:
ab:30:0d:89:52:26:b5:0b:17:77:7d:75:b1:7d:76:bc:f2:bd:
98:1e:02:3a:30:fe:94:49:04:db:e2:83:8b:27:12:c4:2a:f2:
52:53:f2:f7:4f:3c:cf:f9:11:80:0c:aa:ed:ae:49:33:d7:30:
b8:14:1b:8d:65:77:f7:37:15:58:d8:4c:dd:08:ea:df:20:8c:
a5:1e:f3:a7:89:2f:81:e4:c6:0f:20:3b:84:5e:63:a0:e9:a8:
a2:60:67:7f:06:7e:b5:56:e7:1e:8d:b5:05:4f:86:45:af:6b:
2b:42:7f:af:6c:df:b2:e7:c1:0f:da:22:27:20:04:c7:78:5b:
6b:d5:4b:ba:1e:53:98:4b:ba:7a:a8:3e:74:f3:92:cf:87:bb:
a6:f6:ed:09:8a:7b:c4:ad:68:20:1b:02:77:0a:8b:0e:22:28:
61:f2:57:6a:cf:44:ab:65:35:b3:cb:f6:28:92:20:17:89:0a:
eb:77:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:39 2025 by rpki-client