Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File: faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier: Pa5Q34Uu7LicJ/UPKtgdGMmo9+7SXyCCxysB2ddHhY0=
Subject key identifier: 85:F5:4D:6A:EB:C8:0B:EB:46:E3:06:C7:73:AD:E5:8D:6B:06:DC:85
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 0194BB603624E30FDEC665BB39F9C2B3ED89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number: 09B7
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: kHbH8Gu2kO4N2BbiOMg7ntTovK40jlq7mrEofLINdn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:36:24:e3:0f:de:c6:65:bb:39:f9:c2:b3:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=85f54d6aebc80beb46e306c773ade58d6b06dc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:3e:00:6f:61:91:56:4d:a4:0c:c8:62:29:
b0:58:1a:e8:08:e9:17:3e:be:a1:33:dc:7a:40:83:
eb:4e:36:74:3f:2c:52:e4:d7:1c:2a:d9:72:cf:25:
db:eb:4c:07:ab:30:25:21:14:ed:f2:bf:ea:19:a5:
1b:18:4e:57:75:e7:52:41:27:73:70:81:9a:1c:18:
b0:cf:f4:95:45:a4:12:73:7e:e4:48:a0:da:7d:ec:
ef:a7:43:0a:de:d0:b4:30:a0:08:df:83:0e:e2:89:
d7:3b:17:5b:65:4e:39:8f:ca:c9:e8:a4:1b:d6:d4:
08:ea:7d:f4:64:e9:3f:91:fc:a1:1b:81:85:3e:8c:
83:75:86:54:4e:c5:5a:30:e9:4b:51:56:71:d4:6c:
10:2e:22:dd:f3:8f:36:a7:08:a9:ba:e0:50:5b:df:
f1:49:80:64:82:73:3f:52:d1:f8:14:fd:03:72:96:
6e:8c:05:e5:9e:ba:05:94:5f:df:9e:ce:60:94:89:
66:bf:ee:26:78:6c:69:be:0e:9d:64:80:79:a8:e1:
72:e0:07:81:a0:8f:cb:c3:88:74:45:57:27:ea:4f:
ef:2a:ff:99:86:6e:5a:35:c5:f8:34:cc:d4:45:1c:
96:2a:e5:0a:82:71:e8:1c:6a:44:91:44:6d:93:39:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:4D:6A:EB:C8:0B:EB:46:E3:06:C7:73:AD:E5:8D:6B:06:DC:85
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:a2:bb:1b:da:20:00:ef:08:50:89:53:2e:3c:9b:64:1e:
22:74:ea:e7:e1:69:87:69:6c:52:76:42:5f:d9:42:b9:77:1e:
a2:82:2a:67:bf:62:40:5a:89:2c:54:c4:f5:83:5b:79:53:10:
c0:cf:94:f9:02:91:85:78:f1:65:0d:2c:b2:54:bd:40:45:a5:
f9:0c:44:57:2f:aa:ba:01:1e:c8:7a:0e:99:98:14:7d:91:b8:
4b:45:05:52:95:26:12:1a:6b:98:9e:be:c5:2d:e9:be:8c:6d:
c1:03:50:f3:8a:16:94:0f:5c:84:36:3d:87:c4:bd:2e:cd:b3:
f4:aa:3e:7a:b6:5a:dc:e2:e6:ef:64:77:62:57:79:5c:be:7f:
17:11:29:83:3f:fb:7b:96:43:88:23:3a:db:9f:51:1d:9c:00:
fc:ca:b9:22:bf:bb:ab:92:5c:9f:5a:b0:cc:99:65:17:5f:07:
70:7a:81:69:62:59:33:68:c3:27:f8:05:06:94:42:80:73:62:
a4:45:b3:2e:b9:40:ba:a4:40:2c:4f:07:4c:fa:3c:0f:29:c7:
2b:98:6d:02:2a:b9:91:e2:51:4a:72:1a:3f:32:a3:a3:95:b0:
34:1d:df:da:6d:7a:62:78:92:6e:c0:6e:fa:92:56:59:95:c3:
00:4d:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:21 2025 by rpki-client on console-fra.rpki-client.org