Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: G4636xymvbB8WwQooiOjyI0ve1pjgPuoJkcEM9N0qYQ=
Subject key identifier: 14:CB:D1:30:5F:83:EF:DF:92:8C:5D:7C:29:F4:B9:09:DF:2C:9E:6E
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 0194BB5FF155270A92BF6AD2B68DA232118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 099E
Signing time: Fri 31 Jan 2025 08:00:14 +0000
Manifest this update: Fri 31 Jan 2025 08:00:14 +0000
Manifest next update: Sat 01 Feb 2025 08:00:14 +0000
Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: lJdEthq6cb0DEuS6wAvydFcGQJC8vVIJt8kvLOK3cdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f1:55:27:0a:92:bf:6a:d2:b6:8d:a2:32:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Jan 31 08:00:14 2025 GMT
Not After : Feb 1 08:00:14 2025 GMT
Subject: CN=14cbd1305f83efdf928c5d7c29f4b909df2c9e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:e6:b3:e5:71:5c:1d:0d:44:e7:16:cb:61:
34:f7:cd:4c:41:dc:7b:ca:7f:e0:b1:9b:23:33:b6:
c8:4e:52:1b:2d:c0:1e:0c:d7:16:eb:cb:a5:78:0f:
ea:c9:3e:3a:80:2b:0b:05:50:0d:13:94:a5:bc:cf:
c4:71:6c:6a:34:49:0e:3d:bb:19:ac:c3:3f:5b:57:
31:3d:7f:df:91:02:0c:57:47:7d:79:73:0a:36:cd:
60:2c:ce:57:cb:d4:93:b8:f4:b3:95:77:7f:b1:69:
1a:4b:10:64:33:f4:3b:c0:99:56:cc:63:7e:81:4d:
ac:14:c5:69:d1:7e:f6:2f:a5:dc:57:b7:0c:66:c9:
86:23:50:f4:c0:52:33:53:fe:64:a1:1c:b6:13:f0:
da:67:23:c4:47:4a:1b:86:cd:94:69:a4:59:d6:23:
4e:33:39:ba:bc:e6:5b:84:67:18:cf:1c:0d:77:8a:
bc:f3:e7:81:ac:59:29:1d:65:4c:ce:df:e4:e3:ca:
da:93:74:dd:2c:8a:94:52:57:bd:d0:35:27:4b:2f:
70:86:a3:8b:26:ef:75:1b:da:5d:1e:c1:65:e4:98:
0b:57:f8:e3:50:a9:08:7e:26:5c:64:f2:78:b6:d4:
7c:20:e4:45:36:a1:15:5b:44:c4:4e:2c:e6:c9:c8:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:D1:30:5F:83:EF:DF:92:8C:5D:7C:29:F4:B9:09:DF:2C:9E:6E
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:0e:d0:96:b4:3b:35:2a:da:0e:7c:11:8c:fb:82:ad:2c:
fb:50:42:ea:02:d9:a9:ec:99:74:86:ca:dc:6b:e7:9c:3c:aa:
bf:60:dd:23:cc:cd:08:a2:94:0f:e2:37:b7:e9:c4:3e:ac:40:
76:70:b4:87:5b:d3:73:58:21:e1:1b:2d:f2:66:42:66:08:1d:
11:74:a7:fc:fb:98:af:31:c6:1b:35:d7:e6:c6:77:dd:87:7b:
b5:3d:56:dd:ad:03:db:64:69:7c:6d:0b:12:a0:55:10:c7:e2:
dc:9e:af:85:ab:3d:87:3f:33:f0:fa:6f:44:d7:fe:40:7c:58:
97:10:4a:81:d5:4d:f7:cf:e1:83:8e:e8:88:22:00:1e:e4:23:
19:e0:49:52:06:fb:f1:58:ac:a1:27:ff:26:8c:a5:8e:cd:67:
ee:19:4a:59:96:bb:d6:f2:5c:9b:dd:51:85:57:b7:d6:b0:21:
f0:61:cd:f0:72:b3:b7:84:09:ff:fd:f1:4f:78:0b:a3:65:b7:
62:95:25:08:e9:ec:3b:36:e9:fb:13:8a:e5:33:7d:d1:36:6e:
45:2d:fe:ea:ee:26:f6:67:c7:30:cb:4a:a1:d3:f4:2d:e1:b4:
da:6f:5d:85:21:ee:84:52:87:e2:e5:53:39:67:44:34:cc:cd:
4d:3d:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:45 2025 by rpki-client on console-fra.rpki-client.org