Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: O+6zNRr12RaUvgPigulFpirqqQKQX/E7IHxkyZciKvw=
Subject key identifier: FC:BF:27:ED:47:35:D2:FC:E5:B1:1F:32:05:57:01:E6:14:EC:18:50
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 019511A2C56438F3442A1A4EB86866EA2B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 0789
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: jdx8pAmEQcZK5as+K+kuqsSWju/qDRLxDPqW12UO2AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c5:64:38:f3:44:2a:1a:4e:b8:68:66:ea:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=fcbf27ed4735d2fce5b11f32055701e614ec1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:44:e3:ec:25:c8:17:ac:4b:f9:d1:c1:8b:
0a:b2:4e:b1:5b:03:b6:8c:b1:32:72:39:67:86:8f:
6e:d8:6d:88:79:b5:67:80:67:d4:9c:b9:b3:9f:b9:
3e:fd:b3:76:2d:25:a8:e3:98:98:9e:65:0b:d5:fb:
07:15:22:23:a3:a6:fd:89:4d:97:77:0b:bb:29:4c:
11:92:d5:d0:b7:3d:02:9b:68:9c:73:ae:15:8d:15:
43:bd:3a:55:b4:65:2a:41:62:c3:30:ea:7c:20:40:
f2:a2:f3:fa:17:88:53:a2:fb:0f:d7:f0:ee:0d:ff:
b5:ef:e5:c9:45:80:d5:6c:de:56:8f:27:05:72:13:
8d:8e:17:47:5a:4b:03:90:30:45:59:15:17:b3:f6:
37:4f:3c:5d:74:b4:1a:0f:26:be:3b:fe:2b:5c:13:
53:9f:e1:e4:19:31:04:21:66:d7:7e:bd:78:8b:74:
c2:0e:0c:19:b4:ef:70:f0:92:8b:ed:f9:61:1b:75:
8a:73:41:6d:f7:c0:32:e6:27:59:d9:fe:2d:67:3f:
8f:ef:9e:7a:59:a7:8e:b4:8c:f2:36:31:bb:46:bd:
7a:39:5e:dd:c9:8e:95:39:05:46:25:17:b6:66:61:
85:a1:74:54:38:09:ee:ff:f4:30:31:29:89:08:f7:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:27:ED:47:35:D2:FC:E5:B1:1F:32:05:57:01:E6:14:EC:18:50
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:76:0c:5c:9c:48:65:f2:95:11:3e:81:d4:ed:53:5d:b3:62:
34:2a:c3:71:ec:aa:d8:db:83:dc:d1:ce:f7:cd:d1:a3:f3:b6:
84:03:b6:68:d5:18:4c:8d:4b:6e:b9:c8:0e:21:f8:c0:91:aa:
6a:1d:50:bb:d2:94:9e:a5:6b:8f:b2:77:dc:14:fa:8b:2a:19:
ad:d4:93:8e:f6:2c:36:9d:58:0f:34:f8:27:c2:68:4a:9a:8b:
3c:bd:a1:74:d8:5a:d2:13:d2:00:49:7e:d8:84:3c:4d:b3:0a:
c9:35:1d:99:95:0f:bc:f3:8a:bd:8f:41:61:2e:8a:45:d6:5d:
ee:76:e7:62:8c:54:5c:0a:48:1d:cd:1f:b9:b1:02:79:3b:8f:
5f:ed:e1:6c:25:37:f3:d5:f6:8e:0a:b0:b6:05:f6:d9:80:81:
e8:9e:3f:b0:27:f8:d6:f6:1c:f8:6c:ae:aa:96:16:3c:d3:ff:
ed:ae:78:f3:d2:8d:5b:8b:76:c6:0a:10:4e:2c:44:c9:c6:8d:
23:9a:24:03:60:88:c3:de:db:6b:2e:eb:11:31:8e:a1:a0:72:
2f:16:3e:7b:8c:34:9d:8d:86:0e:d5:31:2b:79:f7:bc:5f:c0:
da:90:0e:e2:6a:80:b2:47:93:be:a8:77:3b:57:2b:53:10:ae:
d9:0d:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:44 2025 by rpki-client