Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: IZv+SybVsWjZ/2YInvPoFE4xKjWc879hEmvM/UvnlEQ=
Subject key identifier: 8F:06:ED:00:DC:DD:2F:E4:F8:39:55:E0:17:73:F9:39:32:36:6C:8F
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 0194C3509498526FA42D4558F76397CD0385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:25 +0000
Manifest this update: Sat 01 Feb 2025 21:00:25 +0000
Manifest next update: Sun 02 Feb 2025 21:00:25 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: FoScPVMHQBzuqs2LKuSzAAzGkn/T3GouXCxEuPlJFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:94:98:52:6f:a4:2d:45:58:f7:63:97:cd:03:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Feb 1 21:00:25 2025 GMT
Not After : Feb 2 21:00:25 2025 GMT
Subject: CN=8f06ed00dcdd2fe4f83955e01773f93932366c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:f3:e8:47:49:cd:15:4d:14:f4:b4:25:0e:
2e:5e:0c:ee:b1:70:14:ef:2e:e6:bf:6d:2e:fb:2c:
e2:01:41:84:59:ce:ce:72:c7:1e:51:68:4e:f6:c7:
db:60:30:fc:5c:f8:c1:a4:8c:40:fc:92:d2:8d:af:
46:f2:9d:fe:97:49:ee:da:1f:b9:84:56:7f:54:6b:
3f:ef:b8:6d:41:e9:98:d6:65:9f:75:ed:ff:94:f7:
62:59:8f:de:8a:45:b2:44:e5:82:7d:a1:cc:5c:e7:
48:25:84:e0:12:0a:94:98:8d:87:5a:f6:ef:ba:b2:
ec:69:47:5c:ac:79:1d:5f:48:8c:76:32:cb:ad:dc:
e2:2d:9d:ae:da:6f:0b:d7:91:d5:97:90:e2:0e:66:
fa:2e:4f:b6:ec:c7:3a:e4:e2:c4:cf:11:d3:cb:38:
72:a8:6c:57:c8:34:44:03:9b:e7:fd:85:db:7a:ee:
f0:93:ac:41:3a:6d:89:cd:f6:ce:d9:a1:6b:77:3d:
3c:99:9a:8c:c2:e7:48:b5:78:4c:60:fa:69:c9:e3:
d1:21:3c:54:37:df:07:30:35:6b:34:e5:08:3d:59:
0e:9d:19:a0:e1:f7:fe:13:03:66:29:83:14:f8:0e:
e1:64:07:ef:ee:81:57:79:e3:ad:d5:53:7a:31:7d:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:ED:00:DC:DD:2F:E4:F8:39:55:E0:17:73:F9:39:32:36:6C:8F
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:ce:89:d5:34:d1:97:5a:b5:2b:d8:d3:a5:53:03:e4:21:
c6:de:c1:57:16:61:8d:82:17:a3:54:21:89:d1:65:a7:5d:c2:
bf:64:f5:49:09:6d:47:e0:17:a6:ee:86:ad:48:a2:63:57:84:
5b:7d:50:e5:dc:c1:55:6c:18:03:cf:73:7f:18:b5:8b:19:8f:
13:84:d7:b1:f3:e2:8e:2e:e7:fb:b8:a8:86:ea:ec:2b:62:14:
cf:de:42:15:50:7f:22:5d:70:b8:af:d8:5c:93:19:79:69:25:
ae:e2:c6:cf:f2:ba:30:65:b6:7e:e4:9d:58:82:d2:df:a6:9f:
5a:50:87:8d:3c:48:8a:cc:08:ba:46:f7:f6:94:15:9f:94:a3:
9b:42:ca:31:8c:c6:25:69:33:77:6e:28:46:ce:d7:af:15:7f:
68:43:a3:f9:34:c3:33:a6:2e:06:3f:b3:95:c4:7d:78:f1:ac:
73:23:70:82:0d:bf:aa:01:b4:34:9f:8f:17:2a:e1:8a:34:16:
18:c1:2d:71:4f:70:9f:76:e0:c5:27:0a:63:ea:3c:0d:2e:8a:
e4:71:84:bf:27:b1:61:23:03:f5:f1:8f:1e:a8:26:ca:a9:1c:
af:e0:c1:4c:93:11:e3:15:e0:ee:c9:d4:49:8c:09:cb:ab:fa:
9b:a6:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:09 2025 by rpki-client