Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: mIkaocOm82U5VcFR3jskZGUswFG0F052qp/PKHhDw7M=
Subject key identifier: 33:79:63:A9:D1:71:47:53:5A:AF:3B:9A:8D:B9:59:F3:9E:9C:1D:CD
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 0194BABBA1757E698CA00B8D88BC550C83B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:46 +0000
Manifest this update: Fri 31 Jan 2025 05:00:46 +0000
Manifest next update: Sat 01 Feb 2025 05:00:46 +0000
Files and hashes: 1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: JrtRF0y7hurV7gtFf7EZuKeIOVXUrFN2p8XT1pa3bcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a1:75:7e:69:8c:a0:0b:8d:88:bc:55:0c:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 31 05:00:46 2025 GMT
Not After : Feb 1 05:00:46 2025 GMT
Subject: CN=337963a9d17147535aaf3b9a8db959f39e9c1dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:04:80:6a:35:b7:77:46:f0:eb:86:5c:4d:
91:04:52:2f:19:73:47:ea:91:df:b0:a1:75:0e:ab:
8f:36:c8:04:a7:8b:3c:91:d9:86:fa:76:63:a5:02:
48:70:43:09:34:22:53:de:b5:89:89:06:fc:eb:2e:
54:79:68:65:4b:5c:12:45:df:87:c7:0d:a3:74:24:
75:ab:16:0a:91:51:66:b9:85:51:08:ab:a4:bf:cc:
94:eb:31:27:3b:60:e5:99:04:7d:55:ca:71:f3:c6:
73:67:03:1d:84:a8:42:55:cb:ad:a3:d1:c8:0d:6d:
88:f8:05:fd:e2:85:f9:0e:7b:5f:d9:28:97:dc:ac:
49:bd:a5:bd:dd:da:c7:9c:ae:96:b1:94:da:fb:a5:
6b:dd:79:03:36:8d:9b:40:39:46:90:c5:71:28:27:
81:ea:99:e1:87:b7:11:58:d9:44:0e:22:57:47:c0:
c5:f1:00:89:41:c4:b2:6d:99:f8:fa:fb:bb:dd:55:
86:03:db:74:46:12:5b:ba:7c:f9:cb:01:3a:ac:5c:
26:68:ce:6c:e1:e2:09:29:44:a5:e3:23:a4:9e:be:
e2:16:3a:12:17:75:e9:b2:b8:05:28:f9:8a:89:27:
85:cc:01:2e:07:90:c8:ec:64:57:30:4b:ef:81:78:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:63:A9:D1:71:47:53:5A:AF:3B:9A:8D:B9:59:F3:9E:9C:1D:CD
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:c6:42:b6:be:d6:82:28:1c:44:4a:89:87:b9:01:ff:55:
63:db:22:17:d0:04:43:8b:3e:c4:64:b4:97:77:c4:37:e4:96:
2d:c8:ed:1b:1c:59:31:2c:4e:1f:05:90:6d:c2:80:81:14:90:
4d:76:88:9b:de:de:33:73:6d:53:5b:cb:e3:90:57:b6:fd:cf:
29:6a:eb:a9:a7:4f:bd:6a:5e:45:c4:7b:e6:ca:81:e7:0b:b7:
70:a5:a4:df:f4:f3:43:4d:27:6c:dc:92:96:51:67:0e:e1:14:
2d:c2:d0:97:62:32:c2:e9:9d:7b:a6:60:91:d4:a8:d8:f3:80:
ec:3e:fa:40:4b:2a:6c:c7:06:ff:4f:aa:44:90:ce:2c:12:59:
8d:f2:59:99:e2:4f:eb:11:8d:7f:e3:84:36:43:16:5f:21:7c:
e5:5f:66:4f:fe:95:97:2d:54:f7:bb:cf:66:5a:c6:9d:c4:4b:
a6:5c:25:7a:10:08:a3:7b:3f:7f:be:e7:1e:92:6b:53:5a:f2:
30:c2:71:8b:68:c0:33:62:f3:b9:ef:9c:83:0b:3f:b1:ea:39:
17:b7:b8:6f:d8:f2:3a:eb:f8:f7:aa:53:1e:78:7f:2a:c7:7c:
13:58:be:42:92:62:26:b7:17:94:ca:f5:0d:3b:4c:85:63:c6:
b5:4d:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:33 2025 by rpki-client on console-fra.rpki-client.org