Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: LZfnuI1s6HH3q5YoPqp8aRtCLG45RjQG1k/lFIHdc1E=
Subject key identifier: 3A:2D:60:90:EB:BD:78:14:E9:B2:F6:BA:B8:E5:CC:C5:61:83:80:FB
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 0194BABB1D185525E248ADF2005F022EE447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 0284
Signing time: Fri 31 Jan 2025 05:00:12 +0000
Manifest this update: Fri 31 Jan 2025 05:00:12 +0000
Manifest next update: Sat 01 Feb 2025 05:00:12 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: nWmBuFYxvWOw2b4qqAAzGF+YQaeB9Btv9VmoqCrrIDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:1d:18:55:25:e2:48:ad:f2:00:5f:02:2e:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jan 31 05:00:12 2025 GMT
Not After : Feb 1 05:00:12 2025 GMT
Subject: CN=3a2d6090ebbd7814e9b2f6bab8e5ccc5618380fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:56:d0:a7:d8:0a:19:6d:b9:3c:13:2f:d2:
08:6e:4e:5d:8c:b7:32:74:39:96:b7:2f:45:ed:cc:
ed:09:98:d5:20:f0:f2:19:55:e2:7b:82:7b:58:a6:
48:eb:45:44:5e:9a:3a:ea:4b:99:bd:f2:cd:15:f4:
21:29:9f:d3:7d:89:8d:be:ed:d1:af:63:fd:79:e3:
92:15:26:72:f8:99:a3:db:87:f6:7e:56:6d:0a:62:
8e:ae:c5:ec:03:7c:e4:f4:b6:33:76:27:1c:6f:75:
fb:42:fb:fd:98:9f:59:75:3a:5e:ae:18:c8:63:80:
55:d7:46:92:5d:d8:fe:dc:78:60:fb:44:f7:8e:3d:
b3:07:3c:19:92:66:33:a7:18:cc:b8:7a:8e:7e:3b:
c0:62:2e:8d:7d:d3:30:68:01:91:1e:ba:13:f5:d7:
7e:88:ae:48:54:a9:a3:31:3f:57:63:e4:84:82:58:
68:f9:41:00:30:43:ec:45:b8:8e:61:f2:04:df:34:
89:cb:78:c6:18:c2:ae:c8:47:00:06:60:c4:c5:c2:
04:f3:67:43:8d:47:59:0a:bc:14:59:19:d4:5a:3c:
4e:66:3c:af:0b:8c:51:98:cb:63:85:43:ea:04:38:
11:13:c2:0c:f5:44:59:26:b9:60:e0:68:a0:ee:f3:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:60:90:EB:BD:78:14:E9:B2:F6:BA:B8:E5:CC:C5:61:83:80:FB
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:2e:b6:c1:2d:3d:f0:8f:c1:0d:0d:41:cd:b3:28:0b:04:
f4:b0:66:f6:80:28:32:3f:00:de:cb:27:77:37:8d:fa:cc:24:
56:74:74:59:89:ea:5e:8c:04:14:e3:e6:6d:64:84:a8:45:46:
02:88:15:14:e2:44:ea:da:00:0a:e1:39:0d:be:c3:0b:6e:75:
f2:9c:bf:7f:0b:af:85:31:ee:26:70:fd:6a:c7:25:06:69:6d:
53:97:70:a0:b8:3c:f0:85:57:9d:68:53:54:49:32:de:ea:dd:
73:40:0a:23:9d:45:fa:0a:b3:e4:5c:5c:47:7a:63:6b:33:d2:
33:49:a1:9f:7b:4e:a4:f9:75:0f:41:2d:38:f4:f8:da:5b:f5:
9f:69:df:de:59:28:e2:45:6e:65:85:b8:5a:82:d4:79:6a:dd:
ed:62:9f:a6:51:43:10:46:d4:03:4e:fd:1e:3b:d7:bf:7b:04:
8b:33:de:35:27:b9:7a:40:c0:f0:82:d8:a6:ce:48:73:d9:08:
19:37:8b:80:d5:48:7a:cb:aa:df:d0:34:1f:e9:56:db:5d:ad:
6c:2d:db:e8:e8:c1:ce:52:2f:a0:7e:93:2c:e5:4d:f0:47:42:
9e:8c:c6:8d:8b:ae:ea:d9:ea:c8:d5:19:5d:91:f2:fb:ae:85:
ae:bf:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:38 2025 by rpki-client on console-fra.rpki-client.org