Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: F/HZY0Pc/zKj9vWvcWx/6cVFgte84TYron+CUzTlBD0=
Subject key identifier: 5C:3B:BF:65:16:D4:EF:FE:07:EC:27:E4:F5:BB:DF:E8:1C:0F:D5:9D
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 0194C3F621C686723861BD1E4479FDE93BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 2E
Signing time: Sun 02 Feb 2025 00:01:15 +0000
Manifest this update: Sun 02 Feb 2025 00:01:15 +0000
Manifest next update: Mon 03 Feb 2025 00:01:15 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: gvxClXqbh7YKnS6kZvO7cLZzqrLtCKmN34wrc+qOFUA=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:21:c6:86:72:38:61:bd:1e:44:79:fd:e9:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Feb 2 00:01:15 2025 GMT
Not After : Feb 3 00:01:15 2025 GMT
Subject: CN=5c3bbf6516d4effe07ec27e4f5bbdfe81c0fd59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:c2:64:b5:ce:1c:ae:10:c7:47:f0:87:bb:
f3:67:dd:59:09:67:74:ff:0e:e3:33:d9:60:fc:15:
3b:7e:0d:6d:11:c9:02:46:65:aa:b1:7b:9c:bd:96:
6b:0e:37:50:81:0e:1e:55:f9:3c:38:f5:5e:f2:5a:
88:42:21:c7:96:35:59:74:7c:2b:79:21:d4:66:77:
8f:e0:fa:24:c9:e1:c9:5a:a0:57:5e:ff:b7:ff:02:
c3:c1:28:93:c5:2c:9c:a6:af:f9:eb:4e:cd:86:da:
b5:e5:8d:e6:86:c7:98:05:1f:c3:31:2d:94:9c:e0:
37:a0:a7:2c:27:7a:2a:1a:29:7c:34:36:71:8d:7c:
f6:fc:ad:b7:12:b0:66:85:8a:3c:02:81:32:f8:70:
77:e0:41:c8:62:10:d2:ef:b3:22:91:80:78:fc:21:
1d:86:8a:b1:89:38:cd:15:e5:cf:8a:3b:b8:de:94:
5b:eb:0f:6c:d4:9d:2a:2f:14:4c:5e:6e:7a:bb:36:
4a:f5:4e:e1:4c:47:17:c1:75:09:8d:0e:73:8e:ec:
2b:0c:85:d0:c0:9b:ab:18:0d:12:86:3a:49:21:57:
5b:c7:98:48:92:2f:f4:46:97:01:57:26:21:c4:1e:
62:9c:6f:c8:59:16:63:64:13:cc:e1:4a:18:1e:b5:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:BF:65:16:D4:EF:FE:07:EC:27:E4:F5:BB:DF:E8:1C:0F:D5:9D
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:27:cc:bc:1b:41:c6:39:8c:24:7c:bf:c2:a0:b5:72:37:3d:
7a:bc:56:7f:17:23:10:ea:7e:6c:80:d9:1f:38:27:0b:19:a9:
f2:32:1d:a2:76:fe:c2:f8:a4:54:64:85:16:16:47:28:f6:b6:
5f:a5:4d:a3:a2:98:27:59:40:99:75:e3:17:8a:0b:9a:4c:44:
97:5c:a8:12:9a:c7:ff:72:0b:3b:0a:4e:1e:7d:77:a4:93:5e:
8a:34:a1:43:77:e1:88:27:19:fb:98:31:f2:8c:36:8b:86:66:
bc:b1:6b:f8:2e:39:b7:f5:e9:28:26:55:c8:48:f3:6e:50:e2:
ce:06:76:fd:e5:27:5a:5e:cf:4a:bd:5c:b0:07:e5:da:a8:49:
c6:3a:ee:d8:a4:78:c0:92:4f:c9:b6:fc:74:0e:52:b1:b9:07:
09:70:7f:23:9d:39:33:08:5e:17:d0:4c:08:8e:57:1f:95:e6:
4a:29:e0:28:47:61:49:ae:a6:9d:2f:40:ca:7c:6d:5c:2b:e7:
03:8a:0c:3a:4f:8a:79:93:70:c0:ac:0e:86:b4:6e:a9:b9:2e:
fa:c6:bc:ad:3d:35:2f:ff:54:f8:40:97:8d:6e:64:7f:f8:fd:
74:50:dc:b5:f6:cd:92:5a:3f:a6:7a:52:03:fe:70:c7:ca:e5:
25:d6:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:10 2025 by rpki-client