
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: VLDnGxTydGUOCaMnR9c63iRZ0NskBPwpOJ+vC7QiICs=
Subject key identifier: 1E:C3:02:EB:51:21:CB:05:A2:8B:B2:F6:F1:E6:FF:D8:67:A7:05:7D
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 0194BB96C18C5D2642899F45DBC031AC5E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 0520
Signing time: Fri 31 Jan 2025 09:00:06 +0000
Manifest this update: Fri 31 Jan 2025 09:00:06 +0000
Manifest next update: Sat 01 Feb 2025 09:00:06 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: O8+sVstlUZR5m4AkRlGx51EYOdRKarzwtG/o5v028Uo=)
2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c1:8c:5d:26:42:89:9f:45:db:c0:31:ac:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Jan 31 09:00:06 2025 GMT
Not After : Feb 1 09:00:06 2025 GMT
Subject: CN=1ec302eb5121cb05a28bb2f6f1e6ffd867a7057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:d5:d4:55:54:80:68:bf:be:03:11:57:44:
85:6d:b0:21:ad:d1:16:c1:fd:4b:b9:04:92:4a:ce:
eb:1a:b2:61:39:96:a5:42:64:02:08:48:14:db:1b:
22:00:ed:06:dc:e3:8c:6f:be:94:1d:26:35:0f:63:
ef:5a:40:6d:1f:54:98:36:8d:5f:6a:97:af:42:48:
e2:ef:2c:be:1a:cc:98:27:51:2a:ec:d8:85:8c:12:
5d:5c:0e:60:6e:3a:1c:63:c2:53:a2:32:dc:bd:7c:
ec:55:11:de:64:11:45:21:d3:15:47:f0:d2:72:8d:
f5:e8:2a:56:07:db:6f:e2:61:68:2b:b7:75:96:e5:
88:cf:a6:db:56:43:be:24:ba:3c:1d:ea:41:36:57:
b5:dd:02:18:c3:c2:08:cc:28:65:d0:25:9f:ef:92:
2d:f1:c5:39:c7:37:4f:3d:02:9a:1b:1a:8a:7e:3e:
5c:57:05:e1:25:51:98:96:6f:23:25:6b:de:86:84:
6f:87:3d:6f:39:a7:80:9d:71:f6:62:25:01:19:09:
50:f7:83:89:7d:ec:4d:42:76:0a:2f:c6:0b:b9:05:
3c:57:f0:9d:b4:8e:43:1b:70:3b:3d:60:6f:0e:1d:
d6:cb:1b:84:c7:36:d0:bc:08:e3:20:76:e4:1e:8f:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:02:EB:51:21:CB:05:A2:8B:B2:F6:F1:E6:FF:D8:67:A7:05:7D
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:47:e8:38:07:56:d2:23:b5:88:a5:65:b5:23:d7:8d:fb:
2f:76:42:d5:f7:17:fd:fe:5e:65:9f:cb:c4:ea:ee:78:f4:92:
3d:46:b8:06:d7:53:3a:f4:ca:0e:90:4e:c0:a6:b3:7d:c0:1d:
19:98:b4:f0:51:dc:9a:d9:93:72:96:2f:e8:c8:c4:0f:a6:70:
d6:37:aa:b1:d6:46:60:7c:04:98:7b:98:60:af:d3:3e:c9:80:
3d:09:57:37:ad:f4:bc:ee:38:a5:60:9d:90:9b:87:8f:76:ef:
1d:5c:f9:dd:c7:69:4d:93:e8:ad:75:b4:38:63:11:86:98:5a:
fe:a5:3c:7d:0c:b0:5e:a7:d8:34:7d:f9:9a:25:93:b4:e2:aa:
9f:de:ec:4b:bb:6d:3c:d5:00:a0:33:c7:47:2e:da:0f:b9:55:
2b:c1:7b:28:47:6a:3e:71:2e:ea:f4:0c:bb:0e:91:1b:d9:fa:
d3:66:48:5f:39:98:0a:f7:f5:55:bf:d7:0c:7d:b1:15:e9:65:
6c:ad:df:ac:5e:8c:87:2c:11:15:b9:53:12:aa:64:df:5a:cd:
0b:6c:b7:6e:37:38:08:d5:f7:51:54:e2:f0:32:71:c7:70:86:
17:b0:ec:f7:28:a1:ce:61:3b:c9:37:91:3f:3a:e6:06:ed:22:
f8:5c:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:09 2025 by rpki-client on console-fra.rpki-client.org