Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: XklGU1avxu31gOCU7u1VK8O5yX+eQAt+n3KjK1bMp68=
Subject key identifier: 91:0A:9F:29:95:C1:2C:C4:D8:7A:A4:71:EB:78:B6:F6:41:EB:B7:9C
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0194BAF23C19BA3B4BAAAC36C38AC61BB31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: tZqT6JChuEfwjqmtPdk1e+aETWzf3LAsQvLb5rFWSIU=)
2: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3c:19:ba:3b:4b:aa:ac:36:c3:8a:c6:1b:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=910a9f2995c12cc4d87aa471eb78b6f641ebb79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:20:3e:10:1c:ff:4f:0c:43:4f:09:6d:2d:
59:cd:9c:b9:e7:80:2a:46:85:18:32:a9:06:96:a6:
b2:0a:3b:e5:03:11:64:af:e0:23:d5:a5:0a:10:00:
5f:98:c5:dc:15:e0:1b:eb:6d:1b:41:12:7e:aa:67:
67:d1:02:85:b8:b5:0f:e2:fb:39:6f:f2:5d:43:40:
49:07:12:b5:4a:57:c0:bb:ae:c3:fb:39:72:e9:ed:
a5:4e:0b:c6:8a:03:a3:e9:bb:b1:42:a3:63:60:9b:
b7:e1:4d:59:84:8e:33:e5:9e:b9:26:ea:83:b7:f6:
9d:55:10:cb:0d:0d:25:a2:82:f8:cf:8c:6d:fa:3e:
3f:96:62:7d:51:df:3c:01:41:c9:56:10:6a:1f:13:
9a:41:9e:14:42:22:b0:15:89:96:0f:22:15:7c:1e:
55:d9:c9:b6:15:38:b3:cf:e7:f0:2f:07:1c:49:b4:
ef:81:e1:5e:64:be:4c:42:ce:e4:09:2e:b8:d5:52:
60:4f:54:c3:61:2d:87:57:70:45:1a:67:b6:f9:fd:
27:9c:f1:35:b4:0e:20:c0:0c:65:e9:3b:6b:8c:b6:
2c:15:4c:ef:89:b9:24:a9:03:8e:fd:e9:fd:d9:49:
c8:87:3d:12:3d:cd:78:37:28:1c:a3:6b:bc:73:19:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0A:9F:29:95:C1:2C:C4:D8:7A:A4:71:EB:78:B6:F6:41:EB:B7:9C
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0f:12:d4:82:5b:78:d0:77:cb:3c:b3:82:05:4e:99:9d:a2:
28:c5:55:d9:0c:2b:46:18:cb:45:ae:c5:d6:0b:d1:f1:bc:4e:
05:7a:9e:ef:da:66:2a:ac:9b:4a:45:3e:86:50:5a:bc:da:fb:
a4:2e:9c:05:3b:02:f9:de:df:63:82:b1:26:dd:e0:6c:e2:e3:
5b:94:22:99:12:c6:c3:e4:86:ef:14:4b:80:92:4b:af:a5:34:
8b:6e:16:7b:49:33:d0:53:d7:9d:ac:d5:b6:27:08:7d:dc:a1:
ca:72:45:4e:45:2d:0a:5d:36:f0:c4:29:d9:68:ea:c2:87:cb:
55:d7:90:3a:72:d2:99:44:fe:2f:3d:66:0c:d0:ad:e1:0b:e3:
c5:bc:30:6c:62:0e:48:d8:c3:1e:55:ba:83:45:87:70:df:e1:
90:5c:7d:9b:15:eb:1e:6d:9f:a0:fe:e5:48:d9:e0:f3:ab:62:
1f:4e:34:ef:5a:96:46:60:e6:9c:21:d9:3f:ad:c1:2c:e8:a4:
be:ea:89:f6:c2:88:77:82:96:1d:c4:e3:e8:ef:72:5f:e6:2e:
c5:a0:4e:40:8d:e0:eb:56:b8:e1:84:de:11:c8:9b:7a:90:00:
ce:1c:2f:c3:bb:90:1e:c8:74:dc:d3:6d:2d:04:65:17:4c:6a:
d9:9c:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:40 2025 by rpki-client on console-fra.rpki-client.org