Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: koz22XveH5ab+4L7u3c2UJNHXOK5HdKBMTF/JIE6Fu4=
Subject key identifier: FC:3E:EC:71:CD:7D:68:12:0A:E4:DE:4F:FA:38:7B:46:B0:0B:92:AD
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 0195121044D45F547AA34BE9FB4A68CAE6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:10 +0000
Manifest this update: Mon 17 Feb 2025 04:00:10 +0000
Manifest next update: Tue 18 Feb 2025 04:00:10 +0000
Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: MrCVJtfI+qjMZuijWG4h3H/Gz42pdefuDaNow9rLMhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:44:d4:5f:54:7a:a3:4b:e9:fb:4a:68:ca:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Feb 17 04:00:10 2025 GMT
Not After : Feb 18 04:00:10 2025 GMT
Subject: CN=fc3eec71cd7d68120ae4de4ffa387b46b00b92ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:20:70:ed:bd:16:5c:e0:15:19:09:6f:45:
7b:ec:6b:3c:cb:40:bc:ef:34:36:58:ac:c2:06:26:
9b:48:b5:38:19:9b:55:e7:4c:d2:a3:ae:64:c5:02:
bf:82:0e:05:71:f2:fc:36:06:5a:3f:95:28:c0:6f:
2f:e0:77:7d:e5:5a:a7:81:cc:16:a6:06:ba:77:4d:
7a:c9:82:6b:ac:0d:ed:8c:49:34:fb:7a:c2:6e:bf:
21:9a:74:fd:40:98:e5:0b:00:9e:c3:39:5b:da:82:
e6:32:be:17:6a:0b:d3:d1:9a:07:97:a5:dd:03:c5:
7b:e8:91:9b:f8:39:c9:a7:c2:30:d9:87:3a:c5:f8:
5f:de:dc:5b:43:08:61:b4:1d:0c:ee:5c:0b:76:7d:
2b:7f:a6:69:dc:be:ad:ce:68:02:81:8e:5b:ef:19:
33:40:21:cb:22:ec:99:b1:60:9b:d4:0d:1f:d0:07:
7c:d7:2a:1e:41:68:37:5d:e2:31:cc:5d:37:1e:b9:
5c:47:3e:7b:43:fc:b9:5e:65:9d:83:25:d7:3a:42:
6b:a6:1e:50:b4:93:93:a9:d1:d8:b7:a3:4c:eb:ea:
ad:0c:c0:2a:0c:b8:6b:75:0a:74:7e:80:4c:2d:f7:
87:09:61:8d:53:c3:f2:9a:d0:ba:a4:ee:40:af:03:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:EC:71:CD:7D:68:12:0A:E4:DE:4F:FA:38:7B:46:B0:0B:92:AD
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:ec:15:df:d5:6f:98:15:b8:92:57:d9:af:f0:82:1b:91:
33:55:3f:9e:0a:9c:6d:b3:9b:6f:29:04:7f:d5:67:26:33:9c:
ea:74:25:f6:ea:b5:ac:76:e2:c8:23:6a:e7:4f:a3:86:76:88:
25:55:54:79:d8:82:d8:69:43:a9:e4:58:e1:71:f4:bb:9d:f3:
b2:be:cf:8a:5b:f9:18:a2:be:f6:1a:45:14:04:22:9e:35:78:
01:5a:3c:4c:4d:dc:06:a2:7f:74:7e:01:08:9e:49:4f:af:ef:
0d:15:48:a4:08:35:32:eb:28:23:85:fd:3c:df:97:57:2f:42:
a3:4d:8d:72:52:91:dc:f1:3b:f5:6d:bf:eb:0f:1d:f5:f9:f9:
04:42:e3:3e:6c:b8:92:2d:84:f3:02:9c:90:45:52:5d:84:f6:
1d:63:f1:96:0f:39:60:7d:77:de:62:cf:81:12:d7:35:a5:bf:
11:46:b8:8d:07:bd:c6:d8:5a:58:4b:fb:69:4b:57:9d:1a:ae:
f8:40:d2:90:0e:18:ba:ad:ca:bb:02:54:a0:b4:0f:09:d6:14:
21:91:c6:72:37:01:85:35:cf:45:16:ce:97:82:8c:01:bf:a5:
24:13:da:dc:85:2b:67:da:1a:c3:e0:8a:88:60:4c:86:8c:3d:
ae:76:52:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEETUX1R6o0vp+0poyubAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx
ZDE5YjUwHhcNMjUwMjE3MDQwMDEwWhcNMjUwMjE4MDQwMDEwWjAzMTEwLwYDVQQD
EyhmYzNlZWM3MWNkN2Q2ODEyMGFlNGRlNGZmYTM4N2I0NmIwMGI5MmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A4gcO29FlzgFRkJb0V77Gs8y0C8
7zQ2WKzCBiabSLU4GZtV50zSo65kxQK/gg4FcfL8NgZaP5UowG8v4Hd95VqngcwW
pga6d016yYJrrA3tjEk0+3rCbr8hmnT9QJjlCwCewzlb2oLmMr4XagvT0ZoHl6Xd
A8V76JGb+DnJp8Iw2Yc6xfhf3txbQwhhtB0M7lwLdn0rf6Zp3L6tzmgCgY5b7xkz
QCHLIuyZsWCb1A0f0Ad81yoeQWg3XeIxzF03HrlcRz57Q/y5XmWdgyXXOkJrph5Q
tJOTqdHYt6NM6+qtDMAqDLhrdQp0foBMLfeHCWGNU8PymtC6pO5ArwMW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw+7HHNfWgSCuTeT/o4e0awC5KtMB8GA1UdIwQY
MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt
Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi
LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv7sFd/V
b5gVuJJX2a/wghuRM1U/ngqcbbObbykEf9VnJjOc6nQl9uq1rHbiyCNq50+jhnaI
JVVUediC2GlDqeRY4XH0u53zsr7Pilv5GKK+9hpFFAQinjV4AVo8TE3cBqJ/dH4B
CJ5JT6/vDRVIpAg1MusoI4X9PN+XVy9Co02NclKR3PE79W2/6w8d9fn5BELjPmy4
ki2E8wKckEVSXYT2HWPxlg85YH133mLPgRLXNaW/EUa4jQe9xthaWEv7aUtXnRqu
+EDSkA4Yuq3KuwJUoLQPCdYUIZHGcjcBhTXPRRbOl4KMAb+lJBPa3IUrZ9oaw+CK
iGBMhow9rnZS0A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:17 2025 by rpki-client