Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier: Q70O7BzgJ2zIHjD2GWFCxd8Cnplv43MgPunCUZriwA8=
Subject key identifier: D5:20:3A:99:2B:B2:83:9F:3D:24:D7:F6:19:42:C6:52:D6:1C:C0:54
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer: /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial: 0194BAF2381B1EAA7FE6BBC9843D85D31F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number: 014A
Signing time: Fri 31 Jan 2025 06:00:23 +0000
Manifest this update: Fri 31 Jan 2025 06:00:23 +0000
Manifest next update: Sat 01 Feb 2025 06:00:23 +0000
Files and hashes: 1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: IXaSy9CGRmwwA/8Hs8XlvwyBEFwhB+TN6Kpwh4wJ15A=)
2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:38:1b:1e:aa:7f:e6:bb:c9:84:3d:85:d3:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Validity
Not Before: Jan 31 06:00:23 2025 GMT
Not After : Feb 1 06:00:23 2025 GMT
Subject: CN=d5203a992bb2839f3d24d7f61942c652d61cc054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:8d:34:fd:47:0f:6f:f0:5f:c2:e0:68:be:
1a:ee:ee:38:34:8a:63:69:c7:83:2e:d0:82:62:5e:
5a:5f:89:13:d2:b1:40:b8:1b:19:91:a3:77:e8:62:
9d:a1:45:b4:bd:78:a9:70:5d:f5:a3:c1:8e:cc:ae:
2e:10:8d:65:a5:f1:cc:38:bc:c8:5d:7f:71:01:05:
a6:b9:c3:61:1d:ac:8e:ed:c3:3a:b0:a2:8c:59:27:
47:46:01:b2:e1:30:56:45:3c:9c:3e:6f:be:c3:f7:
dd:50:ea:05:59:52:41:33:2a:cb:d6:f7:12:ae:aa:
d6:49:38:02:a4:08:6b:58:bd:eb:68:e8:eb:73:2b:
57:0e:11:0f:f0:e7:f9:a5:d6:19:24:8f:50:e8:e4:
72:6a:f5:cf:b2:2e:84:b1:6e:b1:ff:e7:7e:56:5a:
ad:c3:a8:54:6b:d5:b2:89:65:f8:fa:e8:c5:18:34:
00:bb:19:a4:02:95:af:5e:2d:df:c7:0a:bc:29:aa:
6d:82:7c:1b:d2:b1:fd:c3:08:41:28:b2:28:33:86:
4f:35:90:5a:d4:06:be:33:4d:5e:02:e4:57:33:21:
92:f9:35:8f:f4:c1:dd:20:9b:ed:55:d3:fc:8c:cb:
b6:bd:6e:eb:1d:b8:8e:ef:2c:0c:83:c2:fd:b9:f9:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:3A:99:2B:B2:83:9F:3D:24:D7:F6:19:42:C6:52:D6:1C:C0:54
X509v3 Authority Key Identifier:
keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:6e:14:82:7a:bd:1b:1f:c0:c2:dc:76:02:20:09:3d:ec:
d0:76:bc:19:16:84:33:91:17:5b:7c:c8:cc:41:1e:88:3b:42:
f8:ea:06:05:5a:f6:52:63:8b:b8:39:24:3a:c2:68:b8:f1:e8:
b4:af:96:a7:b9:37:c4:ce:8a:e2:3d:ee:0a:c8:a7:c7:ea:cd:
48:18:d3:f2:27:09:63:ff:e0:4b:57:0c:2f:dd:88:1a:ac:5f:
62:8f:86:d7:c0:76:99:c9:9e:30:b7:8b:2f:6d:fd:a4:bb:15:
36:d8:9c:63:9d:ce:3d:a6:8f:b4:1a:2b:c9:c2:5a:4d:6a:d2:
7c:0c:45:b5:ee:94:ca:3f:b1:f6:a8:e9:0f:12:88:e2:88:76:
a2:50:d6:78:16:d1:d7:fd:cd:b3:5b:6c:cc:ff:bb:08:86:64:
1d:60:c5:c0:09:f3:b8:d8:2f:7a:34:df:53:56:8b:8a:e9:02:
ea:0a:38:17:a7:ef:b2:6b:6f:e4:72:be:3d:eb:3c:e5:09:39:
02:ac:db:ea:56:bb:51:74:16:e1:37:32:8c:15:f3:83:58:ba:
0c:2c:ae:fa:9b:95:20:a9:99:6e:df:c7:d6:cc:d9:a7:e5:1a:
81:ea:35:81:75:ae:93:2f:94:ef:94:b6:96:94:5c:b3:2c:f0:
9b:d3:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:34 2025 by rpki-client on console-fra.rpki-client.org