Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File: FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier: a7vauR1SkZlrknzYyfZSyhPiVctta6R65DhRp3+VrwM=
Subject key identifier: 5A:EA:82:87:30:A8:BE:E6:D5:71:23:5E:37:BA:49:DD:1A:76:39:74
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 0195109018B8D7860367B9A830939177B5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number: 0B4B
Signing time: Sun 16 Feb 2025 21:00:33 +0000
Manifest this update: Sun 16 Feb 2025 21:00:33 +0000
Manifest next update: Mon 17 Feb 2025 21:00:33 +0000
Files and hashes: 1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: LZ3e4owgLbhkTcElhxMN9xNBc7dzgpBXAjcDV2AHXeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:18:b8:d7:86:03:67:b9:a8:30:93:91:77:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Feb 16 21:00:33 2025 GMT
Not After : Feb 17 21:00:33 2025 GMT
Subject: CN=5aea828730a8bee6d571235e37ba49dd1a763974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:5c:26:ed:b0:dc:0e:38:72:4f:76:88:f0:
c1:00:64:f6:16:fb:a9:28:65:3f:48:0e:ab:30:18:
47:10:f0:aa:b2:85:c4:7e:c8:75:44:4c:1a:cf:51:
41:6f:35:2c:d5:c4:ce:4f:b8:99:61:91:ad:31:b0:
10:5a:c7:57:e7:1c:ee:a7:bc:25:ed:13:5f:c2:2d:
94:76:a7:ea:cc:2b:38:85:d8:2a:6e:a3:78:ed:05:
3b:9a:60:57:18:e4:d1:ea:03:7f:77:69:5b:02:3d:
b8:2a:8b:76:1e:15:ca:50:41:e5:74:86:65:a5:ae:
66:22:79:09:5c:4d:5a:76:40:97:5e:77:86:ba:de:
ae:74:43:35:5e:1b:b5:8e:28:88:e3:3f:28:dd:1e:
d2:bf:c1:79:5d:db:dc:f1:f1:9c:6c:b3:ab:6b:96:
94:aa:ca:60:0e:31:56:35:a6:68:6a:cd:7f:56:bb:
a6:84:9c:9d:dd:3d:e1:fd:ff:f0:b7:91:fb:67:aa:
f7:78:84:ed:2b:e2:a7:0f:9d:73:03:10:fc:57:3d:
73:67:3d:67:d0:88:4a:8c:bc:70:88:ae:b2:79:83:
8e:8b:c9:e7:e7:6a:d0:94:66:0f:e1:83:da:1e:7d:
ad:c0:25:47:bc:cb:7a:68:9c:01:14:6c:2f:c5:d1:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:82:87:30:A8:BE:E6:D5:71:23:5E:37:BA:49:DD:1A:76:39:74
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:c1:59:27:e0:94:f9:ee:86:9c:15:d5:d2:8a:d3:1d:55:
a6:4e:65:68:26:9f:f6:fc:9a:c7:11:e3:70:10:87:aa:33:7d:
3a:43:8d:5c:90:0f:bb:9a:d2:11:a2:82:91:60:4e:45:12:d3:
02:9e:74:c9:fe:7f:13:e7:8c:89:d2:6f:69:17:1d:13:4c:9b:
22:66:a3:ce:c8:5e:70:fe:4d:59:a8:b4:3a:78:f2:a8:48:64:
7a:2d:7b:7c:1b:a1:41:77:2c:53:13:f0:4a:96:29:1a:4f:a0:
a0:19:67:74:6b:a5:e9:14:a0:8c:80:80:7f:6c:87:39:ef:64:
63:3e:ca:d9:99:2e:92:93:17:17:70:f7:a8:93:40:16:76:fb:
e2:b7:d8:f6:88:18:d5:55:64:f0:56:f6:2f:98:c5:fe:e7:95:
8c:c3:7b:db:ca:74:e6:e9:33:97:ff:e1:1a:3e:6b:0d:b5:08:
05:b4:dc:0a:65:48:9b:25:b9:9c:ea:e4:31:f6:7f:b8:ba:14:
97:f5:7a:20:3a:cd:7e:f1:b7:1a:d9:19:de:83:cd:a2:06:9d:
a1:6b:84:14:32:94:62:ab:12:32:ac:c9:44:76:a8:3d:fc:67:
1f:ec:52:f0:38:b7:e2:28:4d:59:88:67:40:cd:10:ff:dd:8f:
a9:33:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:15 2025 by rpki-client