Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: YMK80kQyUAe07+JzrsbIlbkNteQM1uroPZJ+DiG5LMg=
Subject key identifier: D6:43:E5:FA:1D:55:D5:3A:B0:57:05:07:BB:2E:10:9C:0C:2F:58:E1
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 0194BA84536178D11DBBB048378F06AE6DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 076A
Signing time: Fri 31 Jan 2025 04:00:21 +0000
Manifest this update: Fri 31 Jan 2025 04:00:21 +0000
Manifest next update: Sat 01 Feb 2025 04:00:21 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: OEySFACI5uQpReHtVGAzg1/Id/PrIj8hKfWuzwDKUVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:53:61:78:d1:1d:bb:b0:48:37:8f:06:ae:6d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jan 31 04:00:21 2025 GMT
Not After : Feb 1 04:00:21 2025 GMT
Subject: CN=d643e5fa1d55d53ab0570507bb2e109c0c2f58e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:c0:04:f1:3f:c6:4d:d8:d5:52:2c:2f:22:
e4:c0:de:38:f5:fb:88:3a:78:0c:64:36:b2:cc:0e:
64:79:ac:55:7c:b8:9a:c0:f9:b0:44:cb:a1:a6:ff:
79:c5:1b:94:df:82:77:d6:cb:52:5b:d1:7c:9a:9a:
5c:00:d5:84:c8:2a:6a:d5:f1:f9:9e:2a:60:f7:0c:
d4:bc:f5:38:9e:0e:83:d7:7c:77:84:18:94:8c:e0:
a5:26:98:9f:d4:a9:7e:fc:e4:8a:3b:89:11:9e:91:
48:a6:56:13:55:fe:d4:0b:94:dc:50:fe:64:32:c6:
9c:e4:98:1c:ec:29:7e:1f:85:1f:ef:7d:52:a8:02:
b9:2d:0b:18:48:48:ee:63:4e:4f:52:a6:38:94:fa:
04:b4:27:91:2e:ab:3c:6f:76:22:3d:00:cd:84:31:
ee:fc:f0:61:12:8f:38:f3:43:a7:4a:70:f4:b0:73:
bb:e7:b3:c1:67:62:c0:ae:37:47:fa:65:e1:36:69:
8e:23:61:ee:23:f1:8b:02:b1:d8:99:ce:49:a4:d5:
0a:01:a7:cc:e2:99:19:df:39:34:99:cf:0e:13:3f:
9c:87:d3:41:fd:b3:83:de:3e:f3:07:bd:d9:a7:76:
f0:89:c7:08:0d:85:75:41:d6:73:be:9d:13:1c:f9:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:E5:FA:1D:55:D5:3A:B0:57:05:07:BB:2E:10:9C:0C:2F:58:E1
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:be:67:14:85:ca:b8:03:ac:4f:47:f6:57:fb:5a:f3:c2:58:
4b:cb:79:23:e4:c6:8e:0c:dd:e7:d6:d5:e2:ba:3f:35:f5:5f:
30:3a:34:b3:19:03:06:be:f6:3b:fc:ac:a0:3f:ee:73:89:e7:
ec:83:fc:a4:7e:fe:e7:7b:33:2f:95:4f:ed:f6:9b:9d:a1:5c:
98:d7:e0:31:50:44:0c:6b:15:26:04:db:29:e5:1c:f0:4a:cf:
47:19:62:2c:b9:eb:15:7e:52:8c:42:04:2e:35:ba:22:61:37:
4c:14:dc:1e:eb:1a:76:08:2b:27:61:04:7c:4c:d3:fb:52:14:
57:e6:08:cf:77:c5:af:d9:70:be:65:30:fa:61:0d:68:7c:6c:
f6:51:f7:3f:06:9a:a7:67:92:f7:56:e8:7c:c8:9c:c1:c1:52:
28:96:72:50:ef:76:6c:ac:fb:f8:b7:e2:e6:42:18:16:46:fa:
8a:e0:88:47:d4:0f:3b:c4:0c:e2:80:0a:97:1a:2a:1a:e9:c3:
59:fb:53:78:48:34:db:d9:e6:35:d5:2f:49:1a:bd:9c:97:a4:
cb:05:48:21:e7:c4:d9:66:43:71:19:2c:f0:73:1e:c6:d3:14:
11:5d:e5:d9:f6:f0:d0:f3:1d:5f:8b:5f:7e:a3:73:ff:b3:8d:
52:bb:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:56 2025 by rpki-client on console-fra.rpki-client.org