Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: +HDYxsaxhfCSypgcXND28mbHrbQhdmPkbfZimRtuJu4=
Subject key identifier: A5:2B:BC:EE:06:2A:51:2A:63:14:10:5A:FE:20:6B:A9:D9:76:48:14
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 0194BB602D2C10909CD8E01DCCB8982D4840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: HvW+oZoOxEit8ezwp0xinPPnypznAv2DcblBiZmwQZ8=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2d:2c:10:90:9c:d8:e0:1d:cc:b8:98:2d:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=a52bbcee062a512a6314105afe206ba9d9764814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:b4:4d:1f:43:4b:26:0f:32:ca:7d:25:b8:
e4:8a:e3:bf:c5:d8:8b:94:6c:1a:6e:09:c1:4a:69:
c4:d3:ce:6d:1f:b5:05:91:16:a5:a7:d4:51:18:71:
b6:fc:cc:76:4f:e1:60:66:75:e5:45:30:79:75:d4:
6d:60:3f:ff:17:a2:12:59:fc:df:97:a9:21:3a:7d:
c9:21:96:f1:06:c4:ab:40:05:b1:03:72:01:76:29:
70:eb:58:6b:51:0f:f1:ce:f8:b4:60:7a:b2:be:46:
38:da:9f:a7:f5:df:6b:01:08:f0:1f:0d:57:53:63:
24:0a:1a:01:35:40:47:1d:02:17:59:bb:14:00:ec:
17:e7:64:c4:fb:db:d2:b7:34:f7:a7:e7:29:81:b7:
12:4e:af:f8:e4:97:2a:e4:bf:75:18:9c:b0:60:94:
0b:09:c3:ad:24:65:68:3c:d1:34:7c:9c:15:1a:4f:
ca:87:53:59:66:3d:73:7e:bc:71:0b:0c:42:78:ca:
17:fe:91:58:6d:61:50:a6:d4:9a:e1:7f:cb:a6:2d:
37:8c:6a:51:7e:e1:3f:14:50:76:94:b1:68:cb:67:
1a:2b:83:7d:73:10:15:5b:e3:92:8a:69:0f:bd:c4:
88:f4:78:f8:4a:e0:2f:88:df:72:72:af:16:64:00:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:BC:EE:06:2A:51:2A:63:14:10:5A:FE:20:6B:A9:D9:76:48:14
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9a:36:18:07:40:b1:cc:63:bb:08:68:ca:69:62:be:4e:7f:
04:65:1a:1b:53:10:92:fd:53:e7:de:93:76:78:c5:f7:d3:80:
b0:c0:7d:c2:75:b5:1e:48:ff:34:d5:62:a0:69:0c:22:df:05:
42:51:df:25:ca:67:a9:20:f7:b8:72:2b:df:77:93:3b:aa:4c:
3a:c6:db:24:2e:2b:ec:15:a7:d9:16:47:29:b9:95:33:66:05:
8a:95:ef:32:e4:54:d9:e3:4f:53:cd:72:6c:1d:96:87:8f:67:
ae:b2:01:20:f8:42:e1:6d:ec:d6:65:ac:a7:f0:80:c1:3d:a6:
9b:7b:00:35:5d:19:df:c2:7c:ab:f4:e2:d9:5b:bc:f3:f7:78:
fc:9e:a6:f4:71:49:b2:fc:48:a6:b4:e6:1c:15:0d:80:6d:f7:
fb:52:4a:df:42:1b:b4:3b:fc:6c:d3:08:7f:48:f2:b1:59:a2:
6e:79:89:11:f3:b5:04:a4:97:4a:c6:10:ca:ff:f7:c6:09:63:
f7:ef:04:c4:0f:47:76:2f:4e:36:93:0a:a9:5d:3e:de:e5:45:
06:c4:a9:f9:1a:df:fc:93:d3:33:fb:87:aa:78:4a:c6:84:64:
92:ba:0f:1e:45:48:57:b6:9a:60:0b:14:8f:f4:95:6e:fc:35:
49:1b:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:20 2025 by rpki-client on console-fra.rpki-client.org