Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: iNDcFiF1xMFphjTCRTTH7n5h7x1FfimPmAoRg/T/VBo=
Subject key identifier: 7C:34:3E:EE:98:90:78:D6:C7:6B:8E:BC:62:0F:9E:7C:59:B1:AA:24
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 0194BB290933675C70E90B79BFD9D1EC94B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 052E
Signing time: Fri 31 Jan 2025 07:00:16 +0000
Manifest this update: Fri 31 Jan 2025 07:00:16 +0000
Manifest next update: Sat 01 Feb 2025 07:00:16 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: NrCoLli9LNPotGsHqHNT8KCVVQxnQ+8eKaDjTyT7wU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:09:33:67:5c:70:e9:0b:79:bf:d9:d1:ec:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Jan 31 07:00:16 2025 GMT
Not After : Feb 1 07:00:16 2025 GMT
Subject: CN=7c343eee989078d6c76b8ebc620f9e7c59b1aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:ef:bb:d2:81:40:2e:88:d7:c4:82:b4:39:
79:57:42:b9:0a:d1:d5:c5:da:01:96:b0:ee:e7:4f:
d6:30:93:50:97:b6:c6:28:86:6e:7d:23:b7:72:20:
45:67:ef:17:73:9a:e5:95:00:92:b6:67:d3:ea:3d:
94:84:12:06:66:30:a6:1d:eb:95:15:39:c0:8b:51:
21:92:16:3f:dd:0e:2a:29:50:40:82:9e:9e:54:39:
db:66:d9:22:09:f8:82:fe:63:93:83:46:ca:fb:d3:
bf:ed:07:c3:68:25:66:3c:ba:b1:7f:0a:c0:f8:98:
e4:22:44:d7:98:dd:9d:7b:90:1b:9b:44:ef:19:26:
de:58:63:33:2d:c2:e1:d6:f3:49:5d:56:4a:5a:15:
54:de:91:d7:9e:ca:1a:9c:68:42:14:f7:3f:bb:ce:
72:4e:01:6e:22:34:39:a9:bd:11:1c:bd:05:7a:da:
c9:37:c7:10:4c:e1:5d:fd:1e:33:3d:2b:90:b2:5d:
f0:5b:da:dd:8e:7e:df:36:bb:0a:84:a3:d7:81:3a:
08:a0:6c:0c:4b:c2:6d:f6:ca:92:bd:87:0b:e6:67:
f3:07:f4:7e:41:54:f1:c2:1c:1e:52:8a:0c:29:fe:
6d:5c:41:44:63:bc:bb:8e:13:29:f5:4b:88:36:2d:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:34:3E:EE:98:90:78:D6:C7:6B:8E:BC:62:0F:9E:7C:59:B1:AA:24
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3e:cf:b9:d1:12:a7:17:a2:45:88:c9:d4:43:54:dc:60:e9:
95:60:a8:19:d1:bf:2c:bf:d7:5e:64:d1:bc:c1:e0:f5:ac:93:
27:90:75:2d:18:12:ae:f7:25:f9:fa:51:2c:94:c0:0e:ee:ba:
68:df:de:dc:31:7a:06:5a:0a:f9:30:bb:b1:bd:59:7d:7a:69:
16:85:39:cf:4a:c1:24:81:d6:25:01:75:3b:77:05:f9:82:11:
74:15:23:ac:87:2a:41:99:99:1f:ad:5c:26:8d:ee:31:9a:18:
66:92:66:83:ff:19:27:97:a8:de:24:59:fd:bd:74:10:70:cb:
03:2e:ad:ba:23:9a:13:fc:bf:3a:87:20:af:42:97:e4:6e:d4:
ff:37:c8:e2:46:3e:d2:a5:3a:0d:a1:9d:f8:69:bd:e4:7e:30:
fe:12:bb:cd:8b:09:50:9c:d7:1c:14:63:a6:40:59:56:7d:e7:
1b:ca:21:e7:64:1b:96:01:1b:26:e0:81:b8:91:e8:a4:f7:2b:
80:a8:60:a1:1b:97:0d:3e:5f:b3:8a:73:83:4d:94:61:ba:03:
6a:79:b3:62:84:e3:ba:b3:47:4d:76:28:43:ad:ae:ac:dc:7d:
ac:39:21:1e:47:a6:3d:0d:f8:d0:22:a6:57:a4:17:c5:dd:63:
d1:19:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:55 2025 by rpki-client on console-fra.rpki-client.org