Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: wAnHqbiJ80cEGBWX+c4JdELT734cLabZbxm66K+Z+vM=
Subject key identifier: 44:7B:33:6B:D7:63:F0:04:40:13:CD:7C:EE:1D:8C:1D:1D:C3:C9:62
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 0194BB60576F257C3747C924A807C93E8EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:40 +0000
Manifest this update: Fri 31 Jan 2025 08:00:40 +0000
Manifest next update: Sat 01 Feb 2025 08:00:40 +0000
Files and hashes: 1: 1-REcO5J_sNDHp5QyMHQK9hJs5o0.roa (hash: xwGwct9zoFclxXhr71nd4I0i1zajfbDCLeCO4XmRVU4=)
2: 36xTaZN36e5rc-tObD7qGV8VMjE.roa (hash: wKPGdA5BYZvtaHrrMsjhE8Um1YRHqDiekeeAKB95GHc=)
3: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: Q/fs1bvlZlRp4Z6Xc/FB0/Fjrf/ZabqvY/geCeFUjbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:57:6f:25:7c:37:47:c9:24:a8:07:c9:3e:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Jan 31 08:00:40 2025 GMT
Not After : Feb 1 08:00:40 2025 GMT
Subject: CN=447b336bd763f0044013cd7cee1d8c1d1dc3c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:53:b9:ec:cc:ac:95:63:f4:62:4e:81:5e:
f3:e1:3d:be:55:01:22:6c:d5:06:07:a3:1c:5d:85:
cf:17:b7:a0:46:ee:1a:82:c4:c1:6e:ef:0a:a4:9e:
99:71:11:62:cc:d5:c6:7c:84:ab:f9:a4:73:38:2f:
a1:cd:22:cf:7e:e9:5f:06:0b:8a:35:58:07:10:75:
bc:38:20:7a:15:a4:5d:72:5f:23:ac:fc:8a:c2:fe:
33:8f:d0:1c:5e:e6:c5:7a:92:51:2c:11:41:3b:69:
16:3c:74:b6:0a:39:40:25:f1:4b:11:5c:3b:5f:b6:
4b:8c:9b:d4:f9:9f:3b:d7:aa:ca:98:2d:04:96:43:
41:aa:0a:de:57:db:ae:a8:f3:62:3d:bb:9e:09:2a:
ef:da:29:1a:22:44:c5:ee:28:5f:e9:82:61:0a:2b:
c5:ee:a7:b4:46:46:c6:55:7d:29:a9:60:ad:cd:6f:
86:75:96:17:84:2a:4f:df:e2:04:b3:01:4f:cc:81:
91:51:11:ce:3d:04:37:c4:b0:74:77:7b:5e:66:f3:
2e:21:03:6a:a9:ff:4d:17:a3:0e:4f:84:7b:06:63:
c1:95:d3:16:47:d3:85:6c:18:3b:1d:54:ae:51:dd:
9b:23:9a:fa:5d:eb:68:52:43:4a:07:79:a0:81:d6:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:33:6B:D7:63:F0:04:40:13:CD:7C:EE:1D:8C:1D:1D:C3:C9:62
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:83:af:5d:9d:1b:8a:47:03:a3:29:ca:c3:ab:9c:16:45:
55:6e:8f:8c:a2:55:21:82:90:cc:c8:cf:ce:6e:ad:2e:61:e1:
04:b2:d6:66:e6:f1:52:56:7d:ac:91:ae:e5:56:84:24:bd:f9:
c9:19:e6:6a:e0:cc:3b:56:1c:6a:62:bd:c5:41:e4:2d:0d:bb:
7d:16:fd:6b:6c:a6:02:b9:fb:20:79:f0:58:30:9e:9e:b4:cc:
d3:0c:5f:92:54:db:3e:8e:f6:92:f5:9c:29:ba:37:28:64:45:
92:9a:fa:86:9e:ff:03:60:4d:dd:e2:77:5a:c0:5e:3f:2b:e0:
3c:d7:1b:74:80:d4:d3:95:51:86:a3:cb:4f:d3:47:e7:b2:0a:
2e:ce:ad:7e:a7:c3:90:50:a0:83:8c:3a:47:98:a7:59:09:29:
2c:64:90:b5:e2:d1:1a:c5:6b:ee:27:ed:43:27:5b:2b:e7:84:
71:a9:2e:65:af:ff:ed:b1:bd:8f:73:6d:9d:f4:fc:23:92:1b:
e9:7e:5c:5f:23:95:a7:39:b8:cd:cc:e3:4d:f8:38:b0:b6:63:
11:ab:bc:ea:32:e1:2a:35:fd:6a:56:69:b1:af:d8:90:8c:02:
10:e7:97:bf:a5:84:56:b4:1b:cd:bc:5a:e5:a3:d9:bd:ac:4b:
f3:1a:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:34 2025 by rpki-client on console-fra.rpki-client.org