Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: mD7J0ThlGDT5aODZjHxbYqKCaUHmjuiBpgUR8+/JqAw=
Subject key identifier: 7B:CC:3A:C5:81:77:67:FC:CE:37:D5:1C:B2:6A:72:40:6D:FD:B9:9D
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0194C3F575BF49C47C3F2098F31FAFD33D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 00:00:31 +0000
Manifest this update: Sun 02 Feb 2025 00:00:31 +0000
Manifest next update: Mon 03 Feb 2025 00:00:31 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: 2Q5yTlv02ENxuIPJTI4C+VrtZxNBGTGIUAh4zN/xsUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:75:bf:49:c4:7c:3f:20:98:f3:1f:af:d3:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Feb 2 00:00:31 2025 GMT
Not After : Feb 3 00:00:31 2025 GMT
Subject: CN=7bcc3ac5817767fcce37d51cb26a72406dfdb99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:f6:cd:41:a7:86:db:47:d3:b4:5c:2e:ba:
d0:b8:d3:01:ad:f0:5c:bb:cb:ad:89:7c:a7:75:4d:
91:97:a8:0b:9c:b7:18:65:6a:12:48:95:b2:06:6a:
52:fe:7b:e3:56:1f:cb:61:7a:66:a1:fc:d8:69:b3:
45:e2:f3:45:88:73:0b:29:56:d3:d3:7f:82:ea:a3:
c1:1a:e1:b4:af:38:17:7e:79:22:51:1e:8f:09:75:
16:2b:07:dd:9e:c7:8d:ca:7e:93:d6:ba:4e:5f:9d:
a9:c6:fb:56:b2:c0:d0:66:d6:7b:71:c0:08:e4:2f:
53:84:89:af:97:74:69:1b:47:83:39:5e:9d:f9:10:
e8:3a:3c:71:56:4c:a0:f7:fc:84:3e:66:24:28:e3:
76:00:a3:17:24:d2:0e:71:55:0d:ab:25:cc:51:54:
a8:d0:1e:de:28:39:70:61:36:eb:77:2c:7c:5e:24:
28:18:02:89:cd:fd:e5:80:98:76:d9:42:eb:e9:bd:
84:c2:fe:13:ac:03:cc:3e:6c:3a:72:63:5f:19:36:
f2:4a:4c:2b:9b:12:f0:7e:1e:e0:9e:0a:6b:b9:c7:
54:a7:a3:e8:c2:f2:d8:ea:b0:b4:a4:12:80:42:8b:
2f:7c:cf:e7:42:35:2b:6c:13:f3:ac:44:ed:e5:cc:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:3A:C5:81:77:67:FC:CE:37:D5:1C:B2:6A:72:40:6D:FD:B9:9D
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3a:77:b5:89:db:95:fd:58:6a:91:c7:49:13:01:a7:47:a3:
56:81:b7:8e:ed:ac:78:d8:56:e3:68:f4:2c:52:c1:06:f3:a2:
d8:77:fa:31:a3:1f:e3:a3:11:1a:98:d4:60:99:4b:b3:e7:0d:
4d:a3:e5:3f:af:3b:00:3b:da:96:d9:7b:b6:de:09:0f:c1:3f:
9a:7c:ed:f7:33:9a:30:1e:7a:3e:80:7f:41:b8:24:91:34:00:
88:27:33:84:f7:5a:0b:84:bd:d8:1e:69:da:86:ec:9b:c5:bd:
13:c3:b8:fb:67:43:54:c6:cf:fe:47:8e:55:87:60:2d:77:4d:
c6:5e:5b:15:53:eb:fb:9e:a1:4f:dd:ef:2a:7c:2f:40:11:08:
29:88:0f:48:b4:01:21:37:8b:aa:96:9c:60:3b:f3:3b:a1:23:
0a:31:14:c6:72:aa:e9:6e:20:98:b8:6b:a7:0c:b5:5b:29:a5:
82:9c:34:4c:09:8f:0c:54:ec:0a:72:ba:5f:93:46:9c:55:7e:
12:aa:2d:49:0b:d8:d3:0f:99:d0:8a:4e:be:95:8a:6d:06:51:
6e:85:85:16:92:66:61:d8:b2:c4:8b:6c:8f:2f:aa:b4:f5:86:
21:23:a4:5e:99:92:03:d2:9f:2e:7b:bc:d9:d9:3b:38:b6:6d:
41:58:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:27 2025 by rpki-client