Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: HvyPbNEZsYTPRVDiTUL2zxcYXgnOHGcxm2aPR++O4AU=
Subject key identifier: FA:6B:81:31:AC:67:77:D9:A7:49:77:7F:F0:30:16:91:D9:66:A9:87
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 0194BAF26D26BCFB6C19D45EB323879FF106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1448
Signing time: Fri 31 Jan 2025 06:00:37 +0000
Manifest this update: Fri 31 Jan 2025 06:00:37 +0000
Manifest next update: Sat 01 Feb 2025 06:00:37 +0000
Files and hashes: 1: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: kaDU4zlq7/pGEXRXdPDOquKWymJXCwvchmT+SQpWOrM=)
2: iyAReQYZi6annFwTzxnNMi_NX88.roa (hash: RA8Tw9Fc/DRqwFBqIp5rQULzzVh8lGYGH4fnEdfI7zE=)
3: onQc6RXgIQfb3aGGII4Ouo46uLk.roa (hash: YBoMTfa2KP4rZrIUbdsss9ucz/bO7zkPPOfx3KzpJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6d:26:bc:fb:6c:19:d4:5e:b3:23:87:9f:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Jan 31 06:00:37 2025 GMT
Not After : Feb 1 06:00:37 2025 GMT
Subject: CN=fa6b8131ac6777d9a749777ff0301691d966a987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:aa:90:88:7f:76:31:20:f0:01:91:3e:1b:
83:cb:16:66:a2:8e:97:c0:77:a0:ab:d7:f7:ce:48:
a6:3a:51:49:08:ef:e3:b9:ab:24:f4:d5:4e:e2:f0:
bd:87:12:28:94:37:8b:b5:04:bc:55:d9:de:00:55:
a9:43:34:3f:f8:6d:dd:ac:3b:fd:78:03:52:f4:3f:
8c:20:61:94:e3:c8:0f:01:e9:60:0c:30:fb:cc:db:
db:3d:37:c2:f3:08:6b:89:31:43:99:c1:39:05:64:
92:0b:7a:f1:92:da:0f:94:b0:cc:6f:00:1f:9f:41:
68:04:d4:ba:9c:6b:20:68:6c:71:d7:e3:3b:59:d5:
fa:0e:ef:57:f2:40:e8:26:a5:06:4e:0b:f1:7f:8c:
be:8c:05:2e:da:21:4f:be:66:2d:44:cc:87:44:32:
dd:45:24:c7:50:5e:df:df:6d:ad:f9:8c:bc:83:d3:
35:49:bf:36:9e:f8:96:fc:0e:1a:4e:1a:8c:b6:36:
c2:a9:3b:dc:79:af:f9:b2:99:86:6c:e9:0a:54:79:
78:3a:12:4c:19:c1:fa:04:71:b5:ae:28:5a:a4:21:
ad:83:a1:43:43:0d:88:0d:ba:81:8d:69:7e:4a:7b:
af:f4:99:24:0b:3e:73:e4:d0:2f:df:83:13:46:8f:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:81:31:AC:67:77:D9:A7:49:77:7F:F0:30:16:91:D9:66:A9:87
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6a:5b:5e:1d:d2:bf:8c:52:22:3e:87:20:b8:8b:be:22:79:
92:6b:8e:6e:ab:a8:46:57:e8:94:a5:cf:08:dd:35:bd:38:f2:
0c:67:4a:ec:76:9a:bd:f8:23:2f:1c:83:33:92:66:c7:78:53:
b1:37:a3:3f:d6:cc:53:f2:10:4e:d7:aa:40:cb:d7:ac:8e:39:
b9:12:bf:d6:56:45:ad:24:23:47:ce:28:d2:3c:e3:95:e0:1e:
80:ab:29:76:2f:35:9a:e6:48:43:d8:0e:2e:27:f1:d7:fd:b3:
ba:1e:f9:b8:3a:9d:fb:3d:5f:39:f1:7a:d2:ca:8f:13:69:ae:
fb:64:8f:f2:1e:b1:e6:74:8f:27:9a:96:41:11:3e:09:e6:f0:
4c:57:6b:0f:66:50:85:bd:90:ee:1f:21:5b:4a:f4:4e:0b:b4:
74:05:88:ab:1c:12:46:7f:34:0e:27:0a:a5:4f:21:dc:6d:9c:
46:5b:41:74:bf:9d:78:94:17:f3:ba:bc:c0:2d:29:ef:fd:e1:
75:eb:26:92:84:59:9d:3e:9b:a5:6e:5d:d4:35:b8:ab:5b:64:
21:6b:8e:39:bf:88:24:ba:dc:61:86:66:9a:f4:74:da:e9:a3:
46:cf:39:1e:57:3c:5b:67:76:99:34:d7:52:40:45:bb:23:ee:
5f:94:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:07 2025 by rpki-client on console-fra.rpki-client.org