Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: 2qoa5VNUHTrluLHrLRrCNlX4zPGXG+5lKt2yqBr52U0=
Subject key identifier: 31:A0:DA:B1:A3:08:26:F8:99:68:FA:D8:18:9D:6F:BC:C9:3D:7A:B5
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019511A2D68CEAAD1DBAB70C3C314D64E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0134
Signing time: Mon 17 Feb 2025 02:00:39 +0000
Manifest this update: Mon 17 Feb 2025 02:00:39 +0000
Manifest next update: Tue 18 Feb 2025 02:00:39 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: YldGSWKSDZ5KITVDMQPR8jthAZLVVAxc3zbdbub4Ua8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d6:8c:ea:ad:1d:ba:b7:0c:3c:31:4d:64:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Feb 17 02:00:39 2025 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=31a0dab1a30826f89968fad8189d6fbcc93d7ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:6e:1e:36:ee:75:2d:1c:49:83:58:b4:ae:
4f:60:66:9d:ed:86:be:29:33:af:2b:8d:31:d6:71:
48:93:e3:a9:84:f7:9c:af:76:91:8b:52:bf:bc:d7:
b9:6b:86:94:76:da:5e:96:6a:3f:57:5b:d6:d9:d5:
e7:9a:f8:06:a5:23:5c:54:28:6d:d3:9d:91:1f:92:
63:0e:6a:ec:df:23:5f:00:93:50:13:b6:a1:34:64:
40:7f:ee:5f:b9:49:5c:eb:3b:4f:03:5d:40:90:da:
83:26:ad:99:17:91:1c:06:47:36:23:79:54:4e:e1:
71:00:7b:f3:fe:a9:60:50:80:ea:fa:b9:5f:1b:0a:
77:8f:55:81:b1:34:7b:a0:b2:ef:bb:76:7d:3a:fc:
66:9c:d4:aa:59:14:97:75:6b:3c:1f:78:de:26:47:
ac:7b:87:1d:35:2a:3b:45:41:d0:7f:73:d2:1e:98:
c2:20:19:fd:57:91:24:b2:f3:ad:c3:b0:5b:ee:79:
cc:2f:0e:43:15:8a:41:35:c9:34:f3:e5:ad:88:64:
e5:7f:1f:67:ab:bf:4e:d1:f8:f3:21:e8:97:35:28:
b6:85:ee:9c:31:27:6e:34:90:c6:ca:21:da:db:0c:
92:01:df:0d:21:5d:95:05:01:f7:d1:e1:b4:a5:fb:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:DA:B1:A3:08:26:F8:99:68:FA:D8:18:9D:6F:BC:C9:3D:7A:B5
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:e3:e2:bd:43:4f:55:c8:88:ed:79:6e:4a:ff:88:31:87:
a0:92:e2:aa:fb:81:90:76:34:30:22:08:76:1a:e9:2b:e7:01:
6b:23:22:c7:67:74:d6:61:eb:7f:98:d3:8a:36:c3:76:bc:9d:
1e:63:6a:07:ca:55:45:db:e7:fe:f5:a5:1f:d2:21:5d:04:64:
a1:8e:8e:49:42:e5:b7:48:a4:aa:c2:cd:56:6d:b1:59:47:d0:
33:01:2d:e7:12:73:43:06:2d:1b:f1:31:56:82:52:f5:bb:d5:
d2:00:4e:68:3b:ff:33:a7:17:3e:43:45:8b:43:02:70:9d:ba:
22:8f:67:e3:e6:bd:60:70:8c:73:b3:50:db:60:f4:cc:bc:3c:
94:13:dc:a2:ec:cf:fe:54:af:2e:b4:81:a4:bd:37:22:20:bc:
43:c6:17:e3:54:71:73:ae:94:6a:66:24:fb:05:ab:3d:37:5c:
b4:cd:fb:c0:be:ac:4c:b3:4f:d2:20:2c:97:b6:12:d8:da:05:
9c:d3:c0:0a:34:1d:c2:01:20:f2:f2:b6:87:29:3b:1b:82:23:
80:71:6a:85:ef:7b:2a:61:16:4a:3f:18:86:aa:e9:e5:f3:92:
63:d4:88:c0:41:79:9b:c4:16:f5:79:81:e7:f6:f8:61:f2:87:
43:7b:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:29 2025 by rpki-client