Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 8009wUDuhhD1VrxIFw6BD4FBrI2lEMZ657L0Gl74rhU=
Subject key identifier: 8E:D4:F9:0F:36:07:EE:50:C5:FF:50:91:4F:92:D3:54:B8:20:31:AB
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 0194BB5FD8EB04106A0A91095D7902FA232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 08:00:08 +0000
Manifest this update: Fri 31 Jan 2025 08:00:08 +0000
Manifest next update: Sat 01 Feb 2025 08:00:08 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: mrUqi5sGvEw3yyoqOtZPg4yA2t4mePKWjNOShHX/jhk=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d8:eb:04:10:6a:0a:91:09:5d:79:02:fa:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Jan 31 08:00:08 2025 GMT
Not After : Feb 1 08:00:08 2025 GMT
Subject: CN=8ed4f90f3607ee50c5ff50914f92d354b82031ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:e7:f1:b1:07:28:67:2e:f4:2a:0b:6b:84:
87:37:cb:ff:85:8b:ee:8b:fd:72:7f:3c:93:49:e6:
fa:cb:60:ea:6b:fe:fb:7d:e4:9f:39:c9:10:a5:d3:
48:8e:27:70:47:66:0f:0a:39:3f:8a:1c:ba:fe:0d:
2a:c7:c6:ea:48:32:1f:0f:5e:14:1f:37:cb:2f:18:
6a:7e:95:41:64:99:28:fb:2d:1e:45:44:01:76:17:
29:a1:64:66:6d:7f:a0:1f:df:75:4f:ee:f5:ce:81:
a0:7b:cb:19:7f:7d:af:c1:03:d4:83:87:d1:75:44:
5d:a2:8d:36:65:fc:55:ec:2f:d1:0f:f8:b4:f7:44:
d0:14:a9:63:04:80:06:97:37:fd:cc:e3:36:09:4d:
9d:07:09:d0:6b:63:a1:cb:ee:dd:83:60:38:4d:f1:
61:4d:a9:e1:5d:2a:10:52:c5:25:83:97:2a:21:3f:
86:f7:3a:0d:67:ed:32:ad:29:42:e1:a2:19:db:e4:
2b:7a:df:9e:19:32:6b:af:8a:b3:19:a8:21:e7:6d:
1d:de:b6:81:45:a7:45:19:f4:98:b0:8b:07:eb:65:
ad:76:17:e1:53:b1:cc:b7:43:02:32:18:36:76:72:
a7:22:78:32:80:54:f7:6f:02:06:3e:3e:a1:09:a2:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:F9:0F:36:07:EE:50:C5:FF:50:91:4F:92:D3:54:B8:20:31:AB
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:cb:c1:8a:f0:8d:76:fb:b7:3b:59:e1:f5:bf:66:d6:56:
57:d4:e7:03:57:bd:a4:b5:c1:83:fb:ef:a7:df:70:14:b9:75:
ad:41:a4:43:23:bb:38:7c:20:6e:ba:1f:29:e6:df:9f:bb:da:
25:4a:e7:57:31:61:1b:29:16:3e:16:e5:7e:e0:41:d9:43:37:
c9:de:36:78:0f:50:74:a6:aa:2f:e0:67:fe:8d:79:aa:3a:be:
d5:c6:b0:81:7e:a4:a4:9b:9c:3e:7b:58:e5:30:71:c2:a8:48:
1b:9a:93:f9:f3:a0:e9:c0:3d:fd:3d:fa:5e:fe:0a:40:70:a7:
7c:91:96:76:12:4a:a6:5c:5e:f3:94:e1:d0:26:54:fb:ff:87:
67:5c:60:f1:97:8e:e8:05:fa:61:8e:aa:d9:57:f8:bf:8c:b7:
65:0c:6f:ec:4c:73:13:ef:ce:17:29:cb:93:bd:96:af:15:e4:
05:02:09:75:09:58:87:ed:cb:e7:57:58:45:44:2d:df:ad:b3:
1e:c6:05:81:1e:0c:b8:3e:6e:22:7e:47:1c:3b:de:f2:52:d5:
39:25:d9:63:56:88:ad:b4:a3:b7:b4:cb:d1:c0:2b:2e:3f:08:
fd:51:18:f6:d6:04:0f:7e:8e:3c:76:79:62:b0:a5:77:e3:cb:
a9:65:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:15 2025 by rpki-client on console-fra.rpki-client.org