Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier: ivqklAuPhtVYcmdePDPIVHb8vA4x9pV3aKUztUL7mZQ=
Subject key identifier: 69:E8:2D:5A:4D:7A:96:0B:07:8C:EF:7E:6E:4C:20:81:59:FC:06:43
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer: /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial: 0194BABB614EB9813C3B4CF1AC2FD9545622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number: 0ABC
Signing time: Fri 31 Jan 2025 05:00:29 +0000
Manifest this update: Fri 31 Jan 2025 05:00:29 +0000
Manifest next update: Sat 01 Feb 2025 05:00:29 +0000
Files and hashes: 1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: Q7+Vwn8Zqa+UC9tV8/SdwPfPWiyHLVpLDJnafvus+js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:61:4e:b9:81:3c:3b:4c:f1:ac:2f:d9:54:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Validity
Not Before: Jan 31 05:00:29 2025 GMT
Not After : Feb 1 05:00:29 2025 GMT
Subject: CN=69e82d5a4d7a960b078cef7e6e4c208159fc0643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:a9:9e:78:99:90:24:ff:3e:50:77:05:d9:
52:40:29:58:92:c2:4b:c5:1f:8f:2c:78:e9:09:95:
71:a7:2e:02:50:87:06:a5:3f:64:fb:3c:fd:f1:4b:
39:ec:82:02:c3:c0:00:27:db:0e:f4:ad:16:08:81:
97:3a:2a:5f:59:b5:c6:fa:b4:7e:99:d4:24:07:ab:
04:9c:af:fb:96:3d:cd:f8:b1:07:3d:99:e5:df:ab:
22:b0:12:fc:bc:09:b8:16:5c:03:2d:a2:35:49:b6:
af:ac:4a:eb:b6:21:ee:7b:a6:99:f6:4d:65:41:5e:
4b:4e:ad:a0:51:96:13:2f:bf:08:74:38:66:f8:a4:
9b:16:b4:64:a0:86:0b:5f:50:02:a5:08:35:4b:9f:
b7:83:97:a9:2d:c9:9d:7d:a8:e3:2f:ad:3a:4b:9a:
12:04:1a:c7:e5:c6:a7:24:4c:53:c6:fa:24:2c:80:
c1:fe:04:d3:39:72:fc:03:03:8a:5e:bb:73:06:ba:
05:a3:b4:b6:1d:48:39:4c:d5:03:93:d0:5e:f1:ad:
4b:c1:81:a3:1e:e7:ce:9a:25:49:b6:ad:fd:b2:7e:
f8:dc:ab:50:7c:ae:cb:bf:ea:3c:eb:ee:ba:cb:9c:
6b:b3:88:a5:da:3d:4d:e8:a8:e4:62:2f:a2:be:f9:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:2D:5A:4D:7A:96:0B:07:8C:EF:7E:6E:4C:20:81:59:FC:06:43
X509v3 Authority Key Identifier:
keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:76:4a:6e:bd:da:8d:15:1b:6e:ce:97:f0:8d:44:8b:99:06:
7f:05:76:e3:42:d7:25:a7:55:be:6f:74:36:87:6e:e0:d6:93:
cc:39:e7:a3:b0:2f:36:f0:1d:26:0e:0d:c3:73:1a:b6:e4:0c:
f3:fb:f0:1d:5f:37:35:33:cc:26:6f:18:19:06:0e:b1:2f:56:
2b:8d:f0:a0:ff:01:ae:55:02:9e:5f:c1:ac:33:e4:c4:1b:c2:
1a:1c:ad:6d:21:81:30:61:9a:03:65:9c:06:69:7e:ac:e4:c4:
8e:0e:94:df:2d:fe:e0:c8:2e:87:be:c3:61:b6:58:fd:0a:e1:
a8:3f:08:3b:32:90:cc:44:1c:a3:b2:98:f7:c3:a9:a2:92:39:
c9:55:c0:f4:a0:53:1a:8d:54:67:3f:37:d7:83:9b:7e:f2:9d:
51:ef:a2:8c:18:f2:56:f9:76:f6:91:ff:61:c8:5d:6f:0d:af:
04:8f:ce:4a:b8:aa:b0:b6:60:f5:85:8a:7a:eb:62:5f:6d:d7:
1a:79:51:81:e0:c9:7c:d2:a9:63:75:57:dc:34:fb:d1:c4:9c:
34:da:7c:2b:32:4e:9a:a9:70:a6:93:4a:ef:46:69:de:3c:2e:
80:16:57:4f:63:37:a3:e6:1c:39:5c:8b:d6:4b:e5:2c:2a:a7:
ef:37:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:58 2025 by rpki-client on console-fra.rpki-client.org