Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: V45JVpisVdR8CRMc2i8J0yIPPTQNaOpfCCUSoumTX+U=
Subject key identifier: 35:77:2A:11:62:2B:4B:53:81:14:7E:80:56:95:C2:7A:90:4B:DD:4F
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0194BB9708C1727C663A845555A23201702B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 09:00:25 +0000
Manifest this update: Fri 31 Jan 2025 09:00:25 +0000
Manifest next update: Sat 01 Feb 2025 09:00:25 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: pjCAUFi0E/lHEgvWXiuKKfhadtmkRKm/rwtCPRKZA2U=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:08:c1:72:7c:66:3a:84:55:55:a2:32:01:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jan 31 09:00:25 2025 GMT
Not After : Feb 1 09:00:25 2025 GMT
Subject: CN=35772a11622b4b5381147e805695c27a904bdd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:d9:ce:70:6c:37:0d:c0:c2:fb:38:61:38:
8f:a9:d4:35:d1:46:0a:36:b3:ec:5b:50:85:4f:56:
f1:2e:51:75:d7:0e:55:73:3a:27:53:28:e4:83:67:
f3:06:40:24:e5:7a:41:63:c2:60:77:b9:10:63:72:
a9:40:e8:d5:54:53:3f:e4:ef:96:33:d6:b7:44:f0:
bf:80:0d:a6:64:6a:9a:7b:96:ec:22:50:36:5c:2e:
5e:ed:09:03:c2:2a:90:59:7c:07:46:dc:a8:d0:56:
d1:6a:b5:4d:4b:11:73:a4:72:1f:73:36:a8:bd:05:
be:5f:f8:e5:8f:b8:80:41:4a:7b:8b:40:4f:9c:f6:
9a:ff:79:22:03:9b:71:88:da:72:81:9b:2e:df:e9:
1a:26:6f:af:a6:51:0a:2f:e1:0a:16:63:eb:b6:b9:
51:88:6a:80:f6:e6:fc:0e:77:87:cb:da:e9:60:69:
c8:9d:8c:e3:ea:95:5c:48:78:b5:2f:e6:73:6b:66:
d1:9a:53:53:c2:74:79:6e:96:c2:49:2d:b6:10:19:
1c:ad:ae:6c:16:8a:82:5e:02:4d:08:3c:60:bb:d6:
a6:f2:2a:a5:7e:b0:e4:71:d3:0a:81:a0:b3:68:58:
9f:a2:95:b2:f8:62:ac:4a:63:7d:85:0d:95:e5:c3:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:2A:11:62:2B:4B:53:81:14:7E:80:56:95:C2:7A:90:4B:DD:4F
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:55:ac:35:31:f1:1e:7b:07:b9:a7:7f:16:80:70:c2:7b:f8:
56:71:57:4e:ec:f9:96:c3:9d:e7:a0:e3:f8:bc:e6:85:dc:31:
8a:68:da:b6:e0:d6:53:0b:95:d5:9c:bc:7a:d9:5a:df:12:11:
ed:9f:53:6d:d5:ca:1b:67:00:bf:27:79:2f:77:93:72:1d:94:
86:e5:7a:e8:70:cc:4a:5e:86:5b:e6:13:0d:6e:87:ec:be:4f:
9b:ef:63:50:18:db:1e:3b:8e:51:8e:82:73:e8:36:07:de:64:
a9:b7:e7:4e:87:1e:f0:1a:ce:c9:bc:53:bb:75:85:1e:69:6c:
50:bf:2a:f7:6b:74:3a:24:24:85:b9:7c:9f:73:5a:49:ec:1c:
11:ec:32:a9:c6:76:9e:e9:af:3a:47:28:53:0b:cd:91:e8:02:
7b:c9:c3:48:54:8b:95:45:a2:72:a0:37:2b:95:36:42:35:96:
ef:4b:17:4f:89:9b:d7:59:e8:6e:8d:88:23:c1:ea:09:c8:df:
42:b7:a3:4b:8b:92:3f:bf:63:87:47:bc:a9:13:cb:33:84:b1:
f0:e4:f4:73:a9:5e:94:9c:3c:86:ce:19:6c:00:49:ac:96:6c:
ad:c4:dd:cd:1e:55:a8:0d:f2:ec:3e:bd:49:7a:f1:8c:a2:7c:
17:10:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:29 2025 by rpki-client on console-fra.rpki-client.org