Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: PmGkc+cX+3mj7ZEZT1EujQtLggHErrFAqXdvTHJGTAo=
Subject key identifier: BD:07:57:2E:97:49:3F:0A:DF:9D:3F:B6:53:00:2B:79:1C:34:9E:34
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 0194BAF1F64A7DC248AFC724DA9EAC971BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 06:00:06 +0000
Manifest this update: Fri 31 Jan 2025 06:00:06 +0000
Manifest next update: Sat 01 Feb 2025 06:00:06 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: YXRDikeSpmrQByhQfzIvbEfrDdP1W6i6rSjUdImsHXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:f6:4a:7d:c2:48:af:c7:24:da:9e:ac:97:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jan 31 06:00:06 2025 GMT
Not After : Feb 1 06:00:06 2025 GMT
Subject: CN=bd07572e97493f0adf9d3fb653002b791c349e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:38:68:32:60:34:86:8e:12:fe:1d:59:1e:
7c:3c:db:31:05:71:4a:68:3a:6f:1a:cd:78:cb:4d:
01:28:cc:42:cc:b2:49:9c:d6:db:e8:5a:da:93:30:
3c:aa:19:33:26:75:ea:96:64:99:fd:12:43:da:8f:
6d:ed:53:a2:10:94:99:53:5b:7c:8a:dc:7b:c8:1f:
53:fa:31:93:ce:bd:74:a5:39:c0:18:32:da:ed:ba:
9d:97:0f:8f:8f:a7:23:20:aa:da:c7:4f:bc:9e:8d:
73:db:a8:b0:f6:59:94:79:4a:72:d5:f1:5c:53:85:
23:4f:7f:22:e1:d3:c4:9b:8c:5a:58:5e:d6:92:f8:
d0:80:55:07:61:5b:79:2d:d2:eb:1f:e0:08:fe:1f:
80:b7:df:1b:b3:07:b5:9b:dc:72:57:60:be:ba:2c:
c5:6b:4d:a2:30:23:60:ad:bf:37:23:96:8b:de:c4:
14:be:f7:52:a3:52:2b:d6:34:27:16:65:e1:5e:7f:
9c:e1:5e:bc:9a:f8:c8:31:59:a1:3d:0a:34:a4:fb:
c8:9c:0a:d7:3d:c2:ff:2e:79:e5:a3:87:a1:8f:8a:
65:21:b1:97:8f:c5:8b:0c:0a:fd:05:b1:38:ae:b3:
ea:fd:1b:e6:f8:6a:a5:a0:1c:cb:ef:a5:fd:0c:8b:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:57:2E:97:49:3F:0A:DF:9D:3F:B6:53:00:2B:79:1C:34:9E:34
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:ed:f8:ab:51:17:dc:6b:95:bc:d2:3d:a6:eb:42:bc:43:
71:80:36:a8:c9:09:60:1e:cb:b2:81:46:c8:76:2b:f2:53:4a:
21:4b:cc:b3:dd:79:78:f1:62:3d:e1:30:b6:70:a4:0b:b4:d9:
0e:79:0c:b6:13:7c:74:83:ca:e1:70:75:a3:ca:0a:ee:ff:07:
ef:25:dd:9e:d8:c2:90:db:1f:19:7b:09:7c:11:8f:14:b8:02:
4d:3c:b8:b6:4e:52:84:c8:b8:e3:83:2d:d9:c4:0a:2f:9e:50:
04:1c:c4:43:6d:a0:1f:bd:76:46:a4:72:8d:0b:4e:30:90:6b:
35:65:af:43:2b:a7:5e:50:74:b5:8f:8d:6f:c2:27:49:9a:62:
d2:ce:84:52:b8:ce:17:fa:c3:ea:12:d4:b0:ff:3b:53:20:ea:
6f:bd:b1:56:cf:04:a2:00:ac:77:d5:35:95:9f:84:d8:1d:7f:
1e:84:33:1b:b3:b5:07:9a:92:fe:1d:af:22:74:aa:7f:5e:73:
ed:37:d9:96:d4:df:5d:d1:37:c8:b3:e5:f0:c5:d3:03:dc:6b:
7a:63:6b:03:2b:38:e5:2e:40:0d:ea:b4:10:7f:ef:64:83:17:
93:08:37:ea:c9:38:9e:c0:c6:7a:9f:24:df:84:69:99:e4:ca:
7b:d7:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:24 2025 by rpki-client on console-fra.rpki-client.org