
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: c6Sbuju5BWXsTEtNlJR9g3WMuefzhs3545Ruyh0c4WY=
Subject key identifier: C5:32:EE:0D:33:1A:3C:54:BB:30:A6:7E:68:27:7B:25:F6:DE:56:10
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 0194BB28F1604D3A1BA8E22B75FDAFE93DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0B32
Signing time: Fri 31 Jan 2025 07:00:10 +0000
Manifest this update: Fri 31 Jan 2025 07:00:10 +0000
Manifest next update: Sat 01 Feb 2025 07:00:10 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: eAtp088C++NC9RFENKZQQO18WPgaG6keiNQWBQjENek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f1:60:4d:3a:1b:a8:e2:2b:75:fd:af:e9:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Jan 31 07:00:10 2025 GMT
Not After : Feb 1 07:00:10 2025 GMT
Subject: CN=c532ee0d331a3c54bb30a67e68277b25f6de5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:3b:43:65:43:bf:3d:f0:99:50:42:27:59:
6b:92:01:05:a2:b8:23:29:31:89:d2:ad:98:86:4f:
d1:84:d2:79:4d:8b:44:9c:a0:9a:03:d6:0d:03:33:
71:fd:9c:e3:ae:a5:90:61:80:82:6b:4a:ad:3c:85:
af:90:f5:a1:8b:64:c1:16:62:bf:da:44:ba:f7:08:
92:db:82:a9:00:fc:59:7e:c9:17:29:d9:88:26:f4:
53:6a:94:92:63:e9:57:f8:33:92:68:1f:ce:e6:b5:
6b:32:79:23:4b:c5:2f:5d:08:d5:b2:b1:cf:cb:07:
50:eb:ae:00:6f:26:21:96:6b:2d:05:13:7d:b7:8c:
ed:4d:3f:41:51:d2:a3:a3:8b:d9:8c:d0:67:91:53:
76:94:a1:db:1f:4a:36:0e:07:d2:6f:68:62:0c:ec:
77:55:f5:dd:b5:01:47:8d:85:3c:19:e2:2e:7f:fb:
1d:bc:ea:b9:ed:5d:12:63:26:83:46:db:ec:a4:b8:
d8:86:9f:75:06:4b:20:da:59:d0:c6:66:f4:6e:47:
49:9b:7c:c6:03:c1:e3:de:94:d5:fe:84:f3:8b:0b:
72:d1:5d:f4:9a:15:0c:6b:5f:ba:a8:fc:b0:16:7d:
7f:c6:87:9a:ea:66:43:b2:02:31:34:05:ae:43:fc:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:EE:0D:33:1A:3C:54:BB:30:A6:7E:68:27:7B:25:F6:DE:56:10
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:ce:54:04:01:8f:c8:b1:ea:c7:df:4d:39:12:42:87:11:
d6:e2:65:71:4d:7f:89:08:f5:6c:80:4f:53:b4:ef:b5:1c:6c:
a7:df:d7:37:e4:87:09:dc:3b:28:6b:d9:c7:8a:e8:c6:c5:fb:
9d:62:01:c3:42:2c:bb:aa:e1:be:b7:98:7a:3d:11:4f:39:a7:
90:ac:a7:bb:c2:fc:96:d0:34:c4:30:3f:d0:99:0a:be:00:57:
45:c3:aa:5d:4b:3e:7f:3c:54:0b:e4:63:2c:04:43:db:2c:a3:
4e:81:68:2f:91:95:93:af:ee:2b:c4:b2:e9:63:42:4a:94:f9:
e0:c6:84:ea:22:e4:04:15:b4:6a:18:e8:f2:d8:d7:53:31:c2:
7f:93:71:19:31:5b:b8:ee:85:11:40:1b:d6:22:9f:5b:ff:0a:
99:79:4b:fc:32:a4:29:83:0d:a4:8f:6a:ca:64:8b:28:04:da:
1b:b5:bc:de:4c:5c:e1:f2:53:17:e5:13:6d:32:b2:5b:14:fe:
5d:2d:81:da:43:0b:63:63:74:01:f7:20:5f:2b:5a:9b:ad:aa:
7a:52:03:17:68:f6:f3:14:b9:3e:d1:73:72:94:4f:e8:0b:7f:
16:f0:1b:d1:64:d9:4c:6b:94:0d:ff:64:97:cb:67:37:44:c0:
ac:a1:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:15 2025 by rpki-client on console-fra.rpki-client.org