Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: yXCc9cK4UcC6/GnTshjease1COPeRfONaSoVlWh6bIc=
Subject key identifier: DE:9C:C0:6A:AF:B0:FC:10:92:15:8C:3A:74:17:B0:32:52:22:EE:58
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 0194BB293E6CC9049710F16816F8E8F46603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0C71
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: EoZy7/p94f0jeEd1OKUllRSf0luRxwq6tV7YWKpf5fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3e:6c:c9:04:97:10:f1:68:16:f8:e8:f4:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=de9cc06aafb0fc1092158c3a7417b0325222ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:3b:07:01:f1:24:be:37:05:1b:c3:3a:3e:
82:58:cc:26:fe:a2:5b:44:80:87:d6:77:d2:1f:53:
7d:27:26:14:2f:75:30:16:b6:f2:51:a0:bb:75:e8:
9d:9c:e8:a1:86:99:76:9a:08:ff:3b:6a:9e:e5:ec:
9e:a1:df:36:7b:4c:19:0b:f4:1e:9c:34:75:33:23:
25:18:80:9f:40:04:a8:29:1d:08:f2:18:12:dd:c2:
1b:06:d4:0a:4e:5b:1a:e0:9d:26:9a:44:a5:15:45:
86:46:43:60:a8:db:04:a6:d1:39:83:33:c6:6e:9c:
89:d0:96:c2:29:a6:19:60:6b:ee:14:f8:59:48:3d:
5e:95:82:9b:4a:a7:c4:71:63:12:b5:4a:bf:03:46:
f8:87:b3:6f:63:1f:88:6f:e6:e4:fc:23:1e:7f:65:
cf:ba:e8:7b:0e:f3:28:94:81:3e:d6:fa:c7:94:33:
36:f6:28:50:89:9c:c4:ec:e4:a1:ff:5b:d6:7b:85:
75:ff:2c:d7:c7:b8:61:d5:94:91:58:e2:bb:2e:41:
d9:bb:d5:d5:0a:44:d3:3b:35:d0:98:9e:25:3b:92:
ef:86:c8:2f:32:90:ec:08:57:06:f7:ba:78:49:4f:
86:2f:25:0b:17:9c:29:2f:b0:af:42:31:41:e8:aa:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:C0:6A:AF:B0:FC:10:92:15:8C:3A:74:17:B0:32:52:22:EE:58
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0f:90:a0:fc:76:a1:fc:53:c8:55:b3:79:f3:bc:a4:08:c9:
48:3f:5e:4b:2e:db:36:d2:7c:5b:d4:2e:5d:39:5e:4c:01:38:
b1:95:34:d6:a8:77:fe:a7:e8:f4:7a:fa:0d:19:17:f1:a2:e8:
7a:c7:75:db:bb:8c:71:7a:e7:d8:39:5a:72:81:e1:3f:e6:c7:
69:04:a8:67:30:30:19:2a:0d:80:89:07:91:ce:f8:91:08:c7:
af:f8:2f:ff:15:7d:66:4c:3a:c5:03:f9:07:69:a7:b7:f4:47:
37:90:b1:e2:8a:24:fd:29:65:61:5e:16:4f:85:6a:03:69:16:
15:a7:8c:34:74:24:78:e0:1d:02:0e:87:20:da:4d:e2:a4:77:
9f:60:74:5d:64:5d:8e:4c:d2:49:af:b8:6f:03:cf:bd:25:a8:
36:ae:d8:68:22:d0:42:b0:25:2e:5a:c5:f9:6f:96:af:16:ab:
f1:d1:05:36:fc:85:41:dc:c7:70:05:6a:a9:71:10:64:17:d9:
65:cb:4b:43:bb:f9:e6:66:c0:b3:eb:7b:b5:22:05:c9:94:cc:
1e:ad:d0:3c:58:37:67:8f:f8:a8:56:01:46:6c:e4:a3:28:6c:
6b:ff:6d:ee:ff:de:ba:a9:5c:2c:59:c1:e2:4c:6f:1c:92:d4:
d3:3a:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:52 2025 by rpki-client on console-fra.rpki-client.org