Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: V6AJ1dimJF6Ubzxb/MWMWl8akVQzhiEHlpdCx4DICZk=
Subject key identifier: F0:C1:B7:1B:03:D8:46:68:FA:B1:EF:BD:A5:A7:D7:73:00:F2:85:8C
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 0194BB97487BF37684FE48EC1CCD55A65953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: 6HnVh9cMp/A8F0hQ1KYFMAv+lc905rwBicx0tRo3EwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:48:7b:f3:76:84:fe:48:ec:1c:cd:55:a6:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=f0c1b71b03d84668fab1efbda5a7d77300f2858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:9d:76:9c:43:aa:a0:84:ef:78:31:4a:36:
c2:71:50:48:f2:a6:ac:be:cd:62:ac:5c:f3:1f:72:
1d:9b:96:34:e0:f7:fd:e3:48:d7:6f:a2:1f:9d:90:
0b:34:ad:45:3d:ef:aa:ca:c4:b6:8f:58:d2:f3:03:
7f:19:4d:e5:14:cb:05:1a:eb:9e:79:4b:a9:fc:83:
2e:61:42:7e:db:9a:3b:73:68:29:04:05:49:04:e1:
93:97:6d:ce:5d:9f:7a:f8:11:6c:e6:d4:c6:ea:6a:
a4:85:03:0f:e4:9a:3c:cf:25:1f:96:75:48:b3:3a:
ac:1d:6b:14:6c:bc:2a:39:23:61:c6:06:82:2e:7f:
76:17:ec:5c:14:78:9a:22:92:74:84:2c:3d:f7:af:
55:9b:05:1c:5b:f5:e8:14:61:24:92:22:09:32:ce:
f2:12:8d:20:02:7b:ca:71:54:89:43:ef:36:d9:4b:
85:32:c3:06:01:c2:94:2e:3e:9f:63:80:fc:87:51:
86:fc:4c:cc:74:3f:71:41:16:34:7f:2c:ca:4d:bf:
ee:8f:da:d1:00:0a:46:b7:98:52:5e:a1:28:2d:92:
bd:fd:3a:9f:c8:44:fc:83:fc:51:dd:ee:43:46:92:
2b:f8:bf:49:f3:25:8b:65:36:8a:80:be:ed:24:8f:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:B7:1B:03:D8:46:68:FA:B1:EF:BD:A5:A7:D7:73:00:F2:85:8C
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:0f:ef:8e:34:2a:86:1c:7e:60:1d:3f:5e:4b:4d:b2:cd:
07:ba:64:28:0f:d9:54:44:f9:bb:5b:2f:6f:30:d1:20:79:59:
cd:85:b4:e8:e3:79:99:8b:5b:b2:66:cf:1d:f5:e6:57:46:13:
ac:85:c8:7d:64:01:7d:d0:e7:63:8b:82:97:db:87:24:3e:86:
56:ec:25:6b:37:4f:49:e4:58:a4:3d:7d:17:fa:11:47:80:ad:
ee:d4:4a:89:cf:94:93:29:31:89:58:9f:5a:88:a2:cf:0b:42:
77:d9:92:5e:fe:51:ef:fa:18:dc:91:2d:59:f3:51:7b:42:37:
f4:e2:12:79:fe:b7:95:e4:d5:ba:cd:be:de:a5:6b:75:ba:cd:
73:0e:1f:80:fb:09:d9:b4:32:e5:d7:b5:fe:f9:79:f8:63:ae:
6b:51:88:4c:0b:16:d9:c0:56:22:ef:0c:7d:1f:2e:89:c2:e9:
52:ee:2f:2d:80:82:8f:a9:b1:03:e7:bd:01:64:02:03:cd:4a:
ff:3c:e5:de:2e:58:99:54:28:97:e8:d3:08:03:b0:bd:97:40:
e4:8f:59:cb:d0:dd:c2:96:a8:1d:de:e0:15:a9:7c:28:0e:01:
a5:79:f9:f0:06:c6:d3:aa:3b:8b:f4:50:64:df:01:b4:5a:cf:
8c:41:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:50 2025 by rpki-client on console-fra.rpki-client.org