Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: 888F3IcJrJxBb7I3XK8K1lON6oeWmJJsSxDS6/Nou5Y=
Subject key identifier: 02:2A:98:8F:D8:9C:C4:3D:6B:13:02:1C:70:8F:46:E9:8D:17:20:DA
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 0194BB294629F19B0F4B4EDA12BA7DBF8F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: fLYbgepEtYRjKUssNxfYSsfO+I/Xo1c64/kPuliRLD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:46:29:f1:9b:0f:4b:4e:da:12:ba:7d:bf:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=022a988fd89cc43d6b13021c708f46e98d1720da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:e1:8d:93:df:d5:ce:d7:47:09:a3:12:7e:
28:b2:b7:0f:bf:f6:c7:11:ab:72:3e:cc:66:99:bf:
3f:4b:6f:f5:58:c5:82:d2:56:f6:a6:c1:09:63:33:
3d:bf:97:42:b7:b8:bb:8d:01:36:3c:f3:d8:8f:3e:
b3:3d:b4:83:03:e7:0e:08:3b:42:ca:d7:c3:9a:0f:
50:c9:2b:20:a6:01:32:09:ac:a4:f0:cc:97:49:89:
10:9b:25:50:54:17:14:ea:44:19:d3:4c:a7:cb:61:
f7:32:ac:c3:e5:cb:ce:2d:ef:22:df:28:86:43:71:
a2:d5:d6:de:d0:ed:24:39:f6:d4:76:e2:e9:52:66:
a4:de:b0:3a:52:bb:b7:9e:22:67:0d:01:53:65:06:
cc:f6:1b:cd:e1:30:3f:85:92:db:b3:d9:0c:65:11:
84:71:5c:1a:3c:58:ac:6d:66:78:89:31:95:9b:5e:
ca:01:6c:25:1f:22:4b:f8:22:5d:43:02:67:b8:22:
af:7d:4a:32:70:92:5a:fa:a4:4d:b0:3d:e3:75:05:
aa:af:bb:c2:91:e4:19:82:34:8c:be:97:3f:30:6d:
d4:d8:b9:db:cd:6b:be:ab:87:f1:40:a7:0c:04:57:
ea:2c:d6:77:2f:72:c1:71:f1:79:c2:50:b7:db:31:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:98:8F:D8:9C:C4:3D:6B:13:02:1C:70:8F:46:E9:8D:17:20:DA
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:07:4d:55:16:aa:84:df:25:93:dd:fc:e3:9a:c6:53:1d:
c2:e7:40:96:99:ee:5d:90:0d:3e:b6:d8:a8:6a:02:8a:fa:ce:
07:e0:ce:21:bb:e6:28:18:3f:5e:32:13:a3:3b:c4:2f:c5:8c:
9f:90:91:10:53:a6:bf:e1:ef:c9:fd:f7:70:de:bd:13:d1:75:
98:89:1f:ac:3a:b2:6f:b9:d0:44:ec:75:e4:16:02:ad:bd:c5:
a4:13:59:11:d0:02:c3:87:a5:40:05:78:e1:79:6c:6f:f2:55:
b0:a7:14:47:8d:0d:48:5f:1b:0c:6b:a3:87:04:8e:f7:13:3c:
73:33:df:b2:17:f8:83:a1:88:f2:09:6a:ba:ef:28:c8:2f:23:
3a:e8:41:41:51:de:fc:c3:e2:40:a8:05:be:f1:e2:d7:9a:b3:
76:e8:f8:40:20:33:1f:ce:54:ab:0a:a1:3b:f4:2d:de:c7:0a:
9c:cd:e2:80:af:e5:65:9a:85:4d:c0:fa:05:4d:37:6d:38:f8:
f9:a9:f2:e4:9f:74:0d:ac:be:5c:bf:88:a8:0b:55:88:b1:c5:
cf:f9:f7:23:9d:2c:0d:c3:00:2a:c1:85:73:04:a1:67:64:b7:
55:09:3f:38:d2:44:5c:5e:de:72:17:a0:2c:83:8a:db:3d:45:
a3:8b:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:41 2025 by rpki-client on console-fra.rpki-client.org