Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: /QKd2O5OrMYbmDvdybOuWSPflJXnqZ8tNAk/DhRy24U=
Subject key identifier: 4F:DF:E3:EB:7E:D0:1D:30:0A:B7:DD:A9:24:CA:DE:DB:18:A5:95:F3
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0194BA842C1A4823CC2C5C9C8C9425BF2A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 08D7
Signing time: Fri 31 Jan 2025 04:00:11 +0000
Manifest this update: Fri 31 Jan 2025 04:00:11 +0000
Manifest next update: Sat 01 Feb 2025 04:00:11 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: SB9JFqzjNkCJFpQFlpyYLroKlVjRoWfYpP8Tztx9N+o=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2c:1a:48:23:cc:2c:5c:9c:8c:94:25:bf:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Jan 31 04:00:11 2025 GMT
Not After : Feb 1 04:00:11 2025 GMT
Subject: CN=4fdfe3eb7ed01d300ab7dda924cadedb18a595f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:b2:78:25:fa:59:de:5e:50:3a:1a:1f:f4:
85:a7:32:0c:3c:53:76:b6:35:bc:c3:de:1c:b6:9d:
0f:31:20:c2:1d:dc:d6:1a:d5:d2:41:50:79:7d:df:
c7:7a:b9:ce:cc:00:e0:a0:4a:51:53:ad:d4:99:00:
db:23:36:25:83:31:91:62:a6:7a:6a:03:63:6c:1b:
26:6b:5c:fd:59:71:9f:37:ec:17:80:da:01:0e:79:
8e:ca:4a:89:fc:81:b5:67:29:0d:77:90:1f:6a:23:
31:26:f0:f7:75:03:08:73:47:9e:b5:49:19:53:51:
15:5a:95:f1:e0:a8:36:5a:5a:07:c1:ec:f9:a7:32:
56:8a:8f:9a:eb:fe:a1:0a:b3:c2:5b:92:26:65:c8:
b5:69:d6:7f:60:8c:42:3d:7c:02:6c:5b:e7:b9:3a:
36:5c:28:ed:ab:9c:2b:e9:1d:8d:4c:e6:a1:cf:85:
de:20:24:bf:37:29:7f:f3:eb:bd:13:b9:2d:4c:62:
0e:9a:ca:28:d0:e2:90:72:8f:dc:0d:e5:d5:4a:57:
5d:06:a0:7b:4a:8f:4e:65:fe:d7:70:f2:20:da:65:
d7:ff:60:d2:6c:c2:59:14:c0:1f:92:69:5d:99:8c:
ec:a3:15:fc:14:7e:34:4b:85:23:5a:35:58:38:1f:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:E3:EB:7E:D0:1D:30:0A:B7:DD:A9:24:CA:DE:DB:18:A5:95:F3
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c2:99:d0:10:bf:b4:12:be:80:2b:ce:a4:4e:e6:ff:81:7c:
43:6b:5b:80:c5:ad:0c:d6:dd:7e:2f:4c:d5:19:d6:e3:c2:7d:
9d:85:2a:00:c6:a0:96:10:c2:f7:b6:39:94:6d:91:e6:7a:49:
40:d5:92:eb:9d:f8:11:8d:2e:89:55:73:07:db:fd:d3:b3:66:
fa:73:d2:04:60:b7:19:47:6e:d2:a0:0d:3b:90:d5:37:fc:07:
4d:e4:e1:3c:f7:08:1d:99:5a:9c:f3:96:55:78:a7:4a:5f:28:
7b:08:83:78:c2:b1:b7:52:70:4f:80:2e:2b:05:a8:4f:32:e2:
80:56:f0:73:5b:82:17:cd:9c:0f:ab:43:95:a1:38:52:c0:c1:
47:a9:ae:87:fa:1f:ae:bb:6b:fd:6b:e0:5b:39:a5:9e:2d:25:
0d:69:f1:7f:59:c2:a2:f4:b5:91:ae:f2:6a:3e:c1:0a:37:8d:
7f:41:23:8d:aa:1d:61:cf:92:8b:6c:1a:62:47:22:37:3d:55:
fb:8f:23:1a:b2:47:02:3b:98:83:1b:b4:50:28:0d:d0:01:74:
79:da:70:9d:94:c8:2b:01:98:4f:cc:9c:dd:d4:7a:78:80:ad:
06:35:ad:64:72:b8:f0:fc:03:98:15:f8:05:bc:cb:85:65:4f:
14:ad:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:42 2025 by rpki-client on console-fra.rpki-client.org