Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: G/1RiFjcP9E0y61982ODNMq0OLSRszkLP4yOd4pxsOk=
Subject key identifier: 97:DB:6B:C9:D8:38:C3:83:F8:C2:1E:1A:07:92:40:4B:D1:90:A1:7D
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 0194BAF206C850DC0487FEA055B1E348A439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 0257
Signing time: Fri 31 Jan 2025 06:00:11 +0000
Manifest this update: Fri 31 Jan 2025 06:00:11 +0000
Manifest next update: Sat 01 Feb 2025 06:00:11 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: fPqcNRavKTVG010wAIkzm61m/oWdv/8mtswE0u0PVzk=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:06:c8:50:dc:04:87:fe:a0:55:b1:e3:48:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Jan 31 06:00:11 2025 GMT
Not After : Feb 1 06:00:11 2025 GMT
Subject: CN=97db6bc9d838c383f8c21e1a0792404bd190a17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:40:6e:c5:2e:08:a6:7e:dc:63:06:4e:dd:
3c:6e:7b:2b:24:9b:d3:c8:04:7a:2e:4f:67:d5:ce:
36:47:1b:2f:1a:f2:b1:24:5e:5b:1f:a3:24:38:a5:
61:a7:a0:07:22:e3:2e:c6:f7:b0:9e:27:9b:a1:16:
fb:2a:90:99:23:f3:cf:1e:c9:a9:96:ca:04:f5:5d:
c8:fd:85:1b:ab:45:9e:22:51:17:e7:de:03:09:a8:
dc:7c:89:f1:c6:62:d4:e5:61:fd:85:17:f6:5e:e5:
99:9f:65:7f:da:e4:e7:22:19:2e:55:d6:0f:73:96:
f9:a5:75:cd:9a:c5:68:94:e5:fc:b2:00:bc:e2:c5:
47:8b:6b:08:ee:52:46:98:bf:36:76:0c:14:be:61:
69:b2:59:d9:2e:60:61:39:16:02:d1:87:80:01:06:
63:1c:e0:8d:88:c7:f1:dc:9f:fb:f8:49:84:2e:6e:
e9:60:d8:cf:2a:a4:aa:10:30:2c:24:fb:d6:8f:ff:
3b:e0:08:b8:0b:99:fe:df:e1:95:c6:e3:90:78:c7:
e0:d0:59:0a:7f:06:d8:75:ef:17:80:26:da:8a:6b:
91:1b:5b:32:f2:bd:c5:46:d2:e7:fc:e0:7a:d6:4a:
36:73:9f:64:8b:be:0e:0a:73:05:d8:48:58:b4:0a:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:6B:C9:D8:38:C3:83:F8:C2:1E:1A:07:92:40:4B:D1:90:A1:7D
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:16:c3:b0:4f:bd:66:88:af:36:3b:2a:81:89:2e:70:e8:
87:39:2d:b9:63:46:d8:0d:64:0e:a1:e6:53:46:44:bc:b4:6b:
2a:3b:d2:72:17:c3:10:94:db:81:88:8e:ff:9c:f4:1f:66:8b:
fa:0f:6d:f0:eb:ad:6b:8a:33:5f:df:53:7e:68:a5:23:84:a9:
85:29:1a:61:7c:4b:5a:a8:d9:be:21:64:84:7d:9d:e5:a0:19:
15:c3:6b:cb:3a:5d:76:68:80:47:d9:5e:2a:ca:50:20:06:81:
15:f3:a9:52:ae:63:82:e7:3f:69:fa:06:04:79:6a:3e:7d:89:
ff:42:6d:95:d3:de:9f:b5:80:a8:73:8c:26:c7:5e:01:18:79:
af:92:21:2f:ab:30:88:31:35:b5:70:37:ac:f2:48:02:ba:d4:
09:a9:23:58:5c:21:1f:c8:4a:59:4d:52:2f:bd:b6:b5:3e:84:
14:47:a0:23:a5:18:42:9a:ef:39:bb:dc:a5:3b:bf:ec:e1:3b:
37:9f:19:f2:a6:75:ef:a3:43:1c:96:90:04:a4:3b:dd:1e:58:
3f:5f:4f:d9:c8:a8:41:95:c0:2e:e5:2f:71:71:e3:f1:3d:26:
da:89:45:17:e2:78:75:d5:96:76:34:2e:58:3c:34:20:78:f5:
e8:72:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:45 2025 by rpki-client on console-fra.rpki-client.org