Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: SfmtIShA5CPh++ha5pkm5b2GvBz7rS5d62RHA3ZAP7E=
Subject key identifier: 00:3B:50:D3:64:60:62:D7:E8:8C:24:24:BE:8C:B2:EC:73:34:7D:6A
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 0194BABBAE840000787C302486197132469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: bHeJhb1VqoY6FeavIrV5sYIvK3ZsmuqDW90CLv3ZHYw=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ae:84:00:00:78:7c:30:24:86:19:71:32:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=003b50d3646062d7e88c2424be8cb2ec73347d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:4c:2b:5b:95:76:5d:59:4c:9f:d9:ba:9e:
20:9b:81:0e:b9:e9:0b:ac:10:0c:5b:b0:80:c9:c7:
08:0f:68:6b:e7:e1:a6:06:0c:23:c8:c7:b1:ed:66:
62:af:67:28:60:33:39:0b:f6:47:b0:7b:20:f7:ec:
7d:79:a0:80:3a:40:d5:3e:ef:42:31:4d:ba:7e:fb:
27:b9:43:c5:d1:a9:3b:81:c0:9e:28:09:a7:39:7b:
07:a4:ae:8c:12:b2:cb:4c:2f:72:98:f9:3a:a4:8b:
57:65:06:3b:f5:37:23:82:a7:9c:92:a2:6e:34:a1:
74:f7:58:ac:67:29:a7:6a:f1:5c:cd:f0:d5:69:24:
c7:e3:7a:a3:58:f7:00:45:fa:3b:fe:1d:59:2b:94:
fa:f9:57:f8:e3:32:87:73:fb:f6:d2:0c:57:b3:f5:
a1:fa:66:5c:0f:5b:b2:d9:48:c2:55:4d:37:0f:ca:
f4:a3:70:ef:05:e2:20:36:d9:67:04:ae:7f:be:9b:
c0:69:5f:9a:d7:9b:96:0b:1d:3e:5c:2e:49:87:8a:
32:c0:25:e4:da:ee:ee:c1:4b:3d:fc:1f:d3:b1:1a:
74:71:c0:e3:fe:ba:2f:a0:a5:57:3a:39:06:9b:ff:
96:a1:20:e4:07:aa:09:93:f5:90:e8:29:67:82:a9:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:50:D3:64:60:62:D7:E8:8C:24:24:BE:8C:B2:EC:73:34:7D:6A
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:dc:6d:b4:ae:db:ee:10:88:38:a9:10:4b:85:3f:6d:0f:
e0:a0:bc:cf:b2:b3:99:cb:c1:f3:3f:5c:da:50:6f:89:43:79:
7c:62:3d:af:a5:32:e0:97:db:c7:d3:ce:60:b9:c8:0f:b0:f7:
ca:4c:09:dd:81:6e:53:e0:77:89:9a:3f:f3:6b:9b:d0:c7:1d:
22:93:5d:d0:84:d8:93:a7:2d:7d:97:b8:b4:48:8c:a5:84:b2:
bf:47:32:5a:b8:6d:7c:0f:60:26:71:7f:ca:2a:11:2d:13:4a:
19:d5:29:b9:73:b4:e0:39:bf:af:e1:79:90:bf:8e:11:51:ba:
90:b4:38:f8:55:de:b5:02:a9:9a:97:bf:08:80:e7:98:d2:ec:
f8:0d:c0:51:5c:6f:d7:dd:ea:c5:c6:86:01:93:18:63:85:4f:
c7:2d:74:7a:83:7e:b5:04:00:89:75:61:75:b1:43:59:1d:3a:
ae:d3:1b:e2:3c:af:52:dc:30:d3:39:5a:96:18:69:61:de:85:
17:40:36:b5:72:22:59:cd:c2:64:de:d2:d8:32:e8:08:75:6b:
c2:ae:05:8d:0f:a5:e8:21:dc:d7:67:8f:11:ef:ac:6b:6b:6a:
bb:6b:a9:94:8a:6a:06:3c:c2:a1:21:a3:67:28:85:1b:f4:08:
bc:24:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:38 2025 by rpki-client on console-fra.rpki-client.org