Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: Vjty9LBrszGkx6VBmzxQrXYlfrCXaJkGPW0pL1YqU1A=
Subject key identifier: 77:84:EF:3B:F9:76:E8:B4:99:23:C7:85:8A:FB:A8:09:7E:33:AD:4A
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019511A2ECC2E2975610071A91A61CC05E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 132D
Signing time: Mon 17 Feb 2025 02:00:44 +0000
Manifest this update: Mon 17 Feb 2025 02:00:44 +0000
Manifest next update: Tue 18 Feb 2025 02:00:44 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: hl7OqUKP9mK6cXrx/efKdBqqhlCvIJY5fXy5D5lBo80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ec:c2:e2:97:56:10:07:1a:91:a6:1c:c0:5e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Feb 17 02:00:44 2025 GMT
Not After : Feb 18 02:00:44 2025 GMT
Subject: CN=7784ef3bf976e8b49923c7858afba8097e33ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:e2:6a:24:8a:36:fc:5a:b7:13:8b:e2:f7:
2d:5c:75:83:3d:1b:02:33:f0:5c:7b:db:d2:bf:55:
19:6e:43:28:0d:9b:d5:a4:f9:fc:67:cb:75:01:ef:
b8:05:0c:ad:3d:07:ee:3c:60:c4:88:a6:98:f0:70:
59:9d:98:ac:af:e6:52:ca:72:25:2b:11:e0:89:ac:
71:1e:77:e5:78:dd:7b:39:fc:9b:c5:17:87:d1:6d:
8e:34:61:ff:43:cc:d1:af:67:15:a1:e5:2c:86:92:
ed:ae:53:8c:1f:90:7a:6c:92:87:8e:e2:38:44:c5:
06:60:e2:66:41:1b:a0:82:ed:78:e1:04:16:f9:f6:
d2:f3:28:49:63:9f:97:39:ff:c5:27:d2:50:8a:92:
fe:53:42:63:b6:82:1c:35:60:5b:95:23:1a:80:94:
a3:2a:db:a3:9d:76:91:28:76:13:b1:0c:45:a6:30:
71:a4:6b:6f:05:1a:a9:08:b2:16:f1:e2:5d:e9:bd:
0d:52:17:94:99:cd:1a:ef:5e:71:cb:68:f8:44:ab:
71:00:3d:87:80:d3:fe:da:59:6d:88:38:62:3a:a5:
57:87:aa:08:cc:e6:1c:f3:e1:7b:aa:4c:c9:33:64:
ad:14:c9:6a:cd:a4:b4:7d:2d:f4:a4:00:a6:14:80:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:EF:3B:F9:76:E8:B4:99:23:C7:85:8A:FB:A8:09:7E:33:AD:4A
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:ff:6a:ab:d5:32:0a:4f:11:f5:6f:1f:69:85:dd:22:70:
27:62:4e:c1:6f:1f:16:85:73:19:d5:f9:50:9a:3f:3e:44:4f:
6f:1e:10:39:cd:99:95:76:71:7c:4c:82:0f:b8:9f:6d:82:82:
fc:81:b7:27:a6:c4:2c:96:ad:0b:eb:46:77:27:2b:7f:af:bc:
1a:dd:80:92:fb:cf:36:fa:4d:ea:89:7f:d4:49:ac:5f:53:ee:
6f:98:3e:6d:9a:ab:b7:83:ba:c3:6d:ff:02:24:57:21:f5:7b:
2b:ad:81:3a:c2:38:27:6f:24:8e:39:fb:7b:e0:d3:77:d9:3f:
62:57:27:f2:ef:22:78:04:eb:e5:a8:82:57:87:fb:8d:5f:e3:
1e:91:98:3b:dd:08:f7:3a:ef:7a:64:25:f3:8f:d7:a5:f0:d2:
19:82:1f:80:3a:dc:e1:b2:9c:a9:87:8a:54:2b:3f:56:34:86:
5d:76:a5:38:e5:bd:5d:c1:54:ff:aa:25:a9:a3:66:26:f0:d0:
23:1f:10:0a:62:3a:42:25:2f:2f:f1:6f:9b:dc:2c:5a:b2:e9:
5a:0c:e9:c1:53:60:4b:9c:c9:c6:9c:44:e1:a2:2c:84:99:e0:
6b:85:a1:34:00:df:46:58:e1:1a:dd:3c:7b:ed:b3:69:5d:3a:
f4:c6:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:39 2025 by rpki-client