Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: UympKI1gmoO6AV660d6gcjbtsHZayRMqVnRqAyHzKak=
Subject key identifier: BA:5C:D5:C0:D4:54:15:F0:F9:AD:55:49:82:AE:58:57:17:23:FF:0B
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 0194BAF20C6E69B1530B85BDD7B3339BDDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:12 +0000
Manifest this update: Fri 31 Jan 2025 06:00:12 +0000
Manifest next update: Sat 01 Feb 2025 06:00:12 +0000
Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: tnMiqvZeAQtno1tObfkffmSRKMhi4ZbwIRC1OPyj+dA=)
2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:0c:6e:69:b1:53:0b:85:bd:d7:b3:33:9b:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jan 31 06:00:12 2025 GMT
Not After : Feb 1 06:00:12 2025 GMT
Subject: CN=ba5cd5c0d45415f0f9ad554982ae58571723ff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:38:75:8e:5b:1e:b7:f6:64:7a:02:d9:87:
35:71:d9:2c:45:69:5c:db:cc:80:cd:59:d0:9b:04:
90:82:ff:a7:1b:8e:d1:79:3a:09:d0:8e:e2:b2:05:
72:ec:51:2f:f1:bc:76:53:1b:c3:f1:1f:a0:05:df:
e1:ae:03:6f:17:c1:47:d7:3a:ca:88:8d:c1:22:8d:
e2:e3:8c:63:41:12:08:93:fb:48:7a:3e:70:f2:d5:
72:de:88:24:58:c0:cc:6d:c5:23:6c:fb:b6:ea:c2:
68:fe:0e:ba:fa:cc:4c:a9:8e:a7:fb:39:e8:31:6a:
a8:0d:2d:1d:47:04:bd:75:0a:c2:2e:83:4e:66:f7:
62:ba:5f:46:40:e8:f1:98:8a:16:fd:c7:76:8e:73:
52:8d:d4:e0:1c:04:0d:e4:fa:b1:31:3b:26:e1:f7:
bd:28:cf:3f:9b:ee:62:f6:71:75:97:ae:ef:a3:09:
b8:26:ec:0f:36:fe:af:82:6b:2a:53:3e:3d:89:5b:
13:43:2b:0f:ec:24:c6:58:99:d1:9b:66:f1:86:42:
42:20:67:63:b7:e7:74:17:1b:64:cc:c9:00:14:c8:
a8:f4:fc:b8:05:25:b3:b4:65:54:d2:84:b6:8e:72:
45:cd:96:88:8f:10:b4:1a:e2:8f:1d:f3:00:4b:a6:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:D5:C0:D4:54:15:F0:F9:AD:55:49:82:AE:58:57:17:23:FF:0B
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:83:c2:73:6f:4e:57:1c:d2:a4:03:a9:d4:3b:9e:07:4f:98:
09:95:64:e6:31:e6:d4:94:92:51:29:b6:c9:46:25:30:af:02:
cb:b7:0d:0e:92:d5:af:b4:b6:e5:f8:6a:4e:a7:4c:72:25:2d:
4e:1f:c1:98:1e:f2:84:55:95:cb:1c:5f:40:3f:b7:48:c6:03:
dd:f3:3b:ff:e6:f1:23:b2:30:80:08:02:b5:94:56:5b:10:61:
d0:e6:ba:b6:a1:e4:8c:35:a9:42:11:48:af:4e:7f:c1:7a:ec:
6a:4e:a8:0a:90:5d:20:fa:39:48:4a:31:d9:f9:20:fd:44:d7:
50:a5:fa:e7:27:d6:24:4c:d2:bd:45:4f:50:b1:96:f3:8e:8a:
12:e6:c6:9a:cc:72:1f:9e:08:8f:70:b9:da:aa:04:49:9d:fb:
c9:22:b2:ae:33:ae:93:a5:9c:da:2f:b1:b8:d3:d9:f0:e1:a9:
92:93:77:18:d8:d1:4c:6b:13:0f:e5:ce:07:ec:64:21:d3:f0:
74:ae:84:1b:91:00:61:a0:31:0b:68:ab:a5:3d:be:f6:b2:1f:
3c:27:f8:ff:e2:2a:f5:77:b2:9e:4a:b9:ba:f3:9a:3a:d9:e1:
5e:63:7d:f3:31:e5:57:07:a2:a7:9b:28:0e:c2:4b:00:d9:e8:
59:68:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:39 2025 by rpki-client on console-fra.rpki-client.org