Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: 26n9AkJixysCoWMx/DVjgli5KNOJJO82ysrPBse9zJ8=
Subject key identifier: 4D:FD:37:82:5E:43:CA:32:40:C4:6E:86:46:88:A4:F6:0D:46:C8:EC
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 0194C388046DFDE96AF82740662065EBC6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 32
Signing time: Sat 01 Feb 2025 22:00:58 +0000
Manifest this update: Sat 01 Feb 2025 22:00:58 +0000
Manifest next update: Sun 02 Feb 2025 22:00:58 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: crlsUGLRQXFBoPS2amxtx9/NC++94t5OHtaw75ppsgA=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:04:6d:fd:e9:6a:f8:27:40:66:20:65:eb:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Feb 1 22:00:58 2025 GMT
Not After : Feb 2 22:00:58 2025 GMT
Subject: CN=4dfd37825e43ca3240c46e864688a4f60d46c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:fa:6d:fd:bd:5f:c2:e0:f4:e2:df:49:be:
8d:8d:a0:82:6e:a4:81:db:48:b0:ed:4a:1a:b1:07:
76:19:4d:cd:05:18:50:87:2a:bd:43:7c:40:f8:64:
aa:96:e4:ee:99:90:b1:dc:da:b3:e9:68:a9:49:04:
0e:1e:b7:3f:7b:9f:5f:4a:8f:82:b7:85:7d:70:02:
3a:51:fd:bf:49:71:2c:b4:a7:c6:f1:08:a2:5c:69:
96:43:13:55:81:0e:ab:92:5f:d2:51:1a:5b:8e:d6:
2e:74:94:77:7a:88:cd:79:05:3b:e2:f5:40:f1:69:
b2:59:68:9a:6f:8f:67:ec:79:72:5e:b2:02:16:04:
88:65:e2:75:17:85:4f:db:46:fe:72:1d:60:13:85:
bf:cf:97:43:bc:da:73:8d:61:fc:45:b5:fd:e5:81:
6e:95:e1:c6:36:00:6d:17:c9:fc:f0:ad:88:d1:39:
c5:7d:e8:e7:82:a5:49:9e:9b:d5:3d:ba:04:7c:bf:
3e:fb:37:e8:6e:77:69:28:d5:c9:8f:5a:e6:10:37:
c0:35:d6:a2:b2:6d:b1:ff:62:59:27:af:36:68:d7:
2a:d2:68:1a:7f:8e:b0:bd:43:53:79:59:58:2f:ca:
21:28:a3:62:fc:16:01:d1:20:dc:53:c4:07:71:8d:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FD:37:82:5E:43:CA:32:40:C4:6E:86:46:88:A4:F6:0D:46:C8:EC
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:1a:6b:3c:e7:94:9c:af:cf:46:17:5e:ca:10:27:13:61:
e5:6e:f2:22:f0:04:e0:f9:6d:08:2b:58:b6:a8:b6:17:c8:ff:
25:69:6d:46:bb:b3:86:fd:21:98:d0:82:36:25:c5:91:0d:fe:
9a:24:4b:4b:03:6d:29:23:60:bf:57:83:a3:e1:58:42:02:fc:
9f:25:e9:3c:a7:3d:2c:08:93:15:35:9b:f4:3f:9b:84:fe:a7:
66:c4:df:73:43:d5:e7:b1:9f:5b:9a:50:2a:10:67:11:f6:fc:
5f:f4:e9:8d:37:b2:b5:6b:89:df:8f:4b:56:ad:c1:ca:ed:99:
6a:63:72:1d:72:2b:a6:d2:45:a3:93:06:64:e3:06:9b:c4:e1:
64:e2:f6:cd:c8:a3:f9:60:c8:7b:00:cb:c7:c0:c8:72:ae:35:
f0:a4:48:8c:94:67:22:16:1a:05:cc:5e:21:e6:e8:91:bd:d2:
47:7a:d4:0e:c3:ac:7f:28:c4:c5:fc:eb:d4:2d:01:ba:49:19:
1a:7d:18:e9:6e:5c:65:73:c5:13:63:db:54:6c:12:29:1b:7f:
5d:ee:00:87:81:b6:9d:52:9f:8c:62:83:e5:f9:1c:1d:71:66:
60:a3:7d:32:f3:c2:84:a4:e0:b4:62:c8:df:ab:09:96:4a:94:
76:fb:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:20 2025 by rpki-client