Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier: 9h1l7alVARtqxusDrGB8rhjNGI1NAQTJUdL/dt4r6MY=
Subject key identifier: 39:9A:13:7B:A3:76:5D:94:C0:3D:B8:01:8E:75:D4:1E:DD:5C:BB:96
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0194BAF291F2A727E85961097C29861DE0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number: 059C
Signing time: Fri 31 Jan 2025 06:00:46 +0000
Manifest this update: Fri 31 Jan 2025 06:00:46 +0000
Manifest next update: Sat 01 Feb 2025 06:00:46 +0000
Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: 4oKjyew4SIcWK5cNDUWcuyr/JkdzXXXdVA+bUSmSLtM=)
2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:91:f2:a7:27:e8:59:61:09:7c:29:86:1d:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Jan 31 06:00:46 2025 GMT
Not After : Feb 1 06:00:46 2025 GMT
Subject: CN=399a137ba3765d94c03db8018e75d41edd5cbb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:af:30:3d:e2:26:f4:dd:5f:15:35:78:69:
8c:a8:87:76:39:51:59:1d:19:55:85:e4:f5:5a:92:
82:eb:e0:92:4e:6e:73:ca:12:0c:72:1e:2c:1e:72:
1d:da:e6:55:99:a9:48:4f:c3:f1:7a:23:75:a1:28:
5f:a3:36:c3:7a:29:34:07:bf:30:ec:f9:54:b0:f7:
27:59:55:44:5f:21:92:1b:85:69:4d:c1:39:50:8a:
33:fc:cd:07:a3:57:3a:2b:b1:8f:09:39:a4:85:1f:
f7:60:6d:e3:82:70:ca:39:4b:ac:bc:11:4f:5b:46:
08:c9:21:9e:20:03:73:f1:6a:e1:09:a6:b1:7b:01:
a4:f9:81:5e:02:0c:79:f6:7e:65:5c:17:ed:51:bc:
b0:0a:2c:b9:11:7b:2d:0d:2b:fa:84:aa:52:03:c7:
89:db:f8:64:ff:90:58:3b:1b:97:d6:4c:c5:a9:65:
ca:8e:aa:79:10:1e:8a:c0:1b:91:66:70:30:d2:c6:
23:67:45:f1:da:78:fd:1d:ac:78:09:c5:85:86:63:
23:2b:d8:3d:9b:7e:be:f1:7d:3d:38:ec:b3:ec:08:
ad:d4:81:f7:2f:ea:98:06:f2:b2:f2:75:ae:f0:5a:
1e:9e:f1:e1:82:d6:93:62:b7:6c:94:f2:a0:9a:29:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:13:7B:A3:76:5D:94:C0:3D:B8:01:8E:75:D4:1E:DD:5C:BB:96
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:03:5a:16:11:be:40:07:71:cf:a3:c7:8a:e0:a2:2b:2b:
47:f2:db:3d:66:6f:13:19:57:18:7b:c5:20:ea:53:11:30:a7:
6d:77:37:30:cb:0b:1f:87:96:6d:d5:43:63:cb:00:65:a0:6f:
c9:3c:3d:88:10:95:15:af:75:75:89:0c:4e:0e:bc:5b:a4:89:
5c:8b:e8:b5:31:56:6b:de:a9:f8:b6:a1:dc:78:2b:77:bd:11:
f1:a9:46:f9:a0:29:38:06:01:1d:5f:d3:c3:81:be:23:5b:92:
9a:4a:4c:40:51:d6:ec:42:26:e5:62:2a:6a:4e:1e:62:8d:72:
80:74:38:c0:45:58:fe:83:25:08:e5:83:bf:ad:7c:95:58:a8:
8e:28:5c:3b:7c:c6:4f:27:39:2b:0e:47:59:a7:51:24:0d:63:
50:b7:ea:33:0e:67:f9:65:05:67:a6:dd:5d:a9:29:00:2a:a4:
1c:c5:66:b5:b8:93:51:49:ae:0d:97:40:41:91:b6:58:74:f5:
76:94:83:88:45:e4:e2:77:42:43:bd:7a:0c:4b:f9:ed:54:b0:
ce:37:7d:14:f0:65:b5:58:e5:b3:88:18:90:7b:ef:c1:15:b0:
59:33:08:b9:94:8a:69:f5:7f:2e:eb:bb:b0:3b:0b:4a:f1:8b:
de:da:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:44 2025 by rpki-client on console-fra.rpki-client.org