Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File: FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier: i33yIILlJpZ1ui6JEFcHGPfej2+TnekShohLYQEAoCc=
Subject key identifier: A9:B0:0C:0C:8E:D5:4F:51:CC:E3:8B:4A:2A:99:E5:F8:F3:0A:B3:B2
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer: /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial: 0194BB5FFF1C20454326A6E41F7380554344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number: 1404
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: aVVZJEehEy2v/uiGj1gBWT+sBmZJjb1zmGbuB97hWbI=)
2: _QEsBnvbshc1c-Oa6SonU64QEfk.roa (hash: yLyPG52nHMG7xe0cgh96djTLDEljXisJslyJOhCNEoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ff:1c:20:45:43:26:a6:e4:1f:73:80:55:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=a9b00c0c8ed54f51cce38b4a2a99e5f8f30ab3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:af:47:e7:81:60:9d:2b:53:65:47:52:f7:
b9:44:05:08:d1:9e:89:bd:b1:98:0b:54:da:61:40:
e2:b3:7c:d9:26:17:28:9e:7d:6e:d5:90:41:80:48:
5d:b6:19:59:3d:b3:d4:02:a2:43:82:92:fd:f3:97:
7f:e0:ce:82:10:4b:10:d1:1a:3c:d7:ee:73:12:fe:
6a:69:17:7c:7e:b2:d8:85:c9:9e:8f:4d:be:a3:c2:
2d:12:38:e0:5f:9f:45:13:68:9e:db:91:18:73:5a:
c0:fe:91:98:b2:93:59:f3:bb:fa:3f:72:69:bb:a2:
9f:5a:58:8c:81:00:59:4e:ad:45:f8:ca:fe:ff:65:
10:60:a7:33:36:32:fe:72:d6:dd:a6:d2:dd:ee:84:
24:2c:2a:4f:86:4a:c3:a8:6e:fa:f0:c2:6c:d3:3a:
bc:95:a6:77:09:be:49:d9:39:15:ee:e8:e6:1e:c2:
fa:9e:61:40:25:0a:5d:8e:17:f9:c1:d2:65:07:1a:
76:15:3b:d4:b5:87:13:05:ac:d2:c7:da:57:6a:49:
a1:ec:e6:a3:a8:88:e5:88:dd:45:44:1e:be:19:e3:
f1:52:9a:4f:7a:c8:95:72:a0:bc:7b:a4:49:ea:fb:
e7:fb:2e:bd:29:d6:a7:78:25:a1:4e:c6:dd:4a:d0:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:0C:0C:8E:D5:4F:51:CC:E3:8B:4A:2A:99:E5:F8:F3:0A:B3:B2
X509v3 Authority Key Identifier:
keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:29:f7:24:95:65:ce:60:49:74:f4:d7:9a:ce:ae:d0:34:
fc:7b:1b:0d:66:64:d1:f7:cb:28:c7:80:78:ab:d0:ed:28:65:
dc:4a:41:06:48:2f:ec:05:95:0e:b2:0c:ae:63:cb:e1:d4:25:
4b:fc:0b:aa:3f:55:20:9c:df:32:75:73:c5:69:71:37:fb:b4:
2e:63:0b:34:c5:c6:ce:6a:9b:9b:74:1f:b9:2e:a0:7d:94:fc:
a2:46:d2:7b:36:c7:75:d8:e8:19:d7:3d:5b:e4:dc:13:fe:8e:
2c:04:92:fa:be:72:9d:6d:ae:2d:92:47:54:95:cd:c3:de:2f:
02:96:2e:55:03:24:33:c5:ab:9b:34:77:bc:5f:e9:34:bb:0c:
30:49:ce:67:2a:d9:a5:f2:9d:2a:85:fa:09:10:bd:3b:b6:a0:
d6:65:66:b5:ed:2b:e7:3b:85:a9:ee:30:ad:62:bc:62:0f:90:
63:73:ec:91:19:ad:18:49:3a:1a:17:b7:5d:10:60:6e:06:3d:
6e:6d:e2:35:69:bd:dd:61:77:ef:fa:b3:f4:40:78:6d:6c:85:
79:83:25:a8:e8:c8:28:5d:c4:c4:b0:2f:81:cf:6b:0a:5a:e3:
d4:4b:9a:c6:56:4d:90:6c:6e:d9:a7:94:3d:c6:04:df:6f:d6:
6d:ce:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:23 2025 by rpki-client on console-fra.rpki-client.org