Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: 01GzmfKxGJ3ZJSjapqgvxZUwmpRbTVjnrz9WkvU9s4k=
Subject key identifier: 24:A6:14:07:AE:AF:FD:E3:F7:3D:4E:D0:F0:07:C1:AA:7F:36:01:31
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 0194BBCE956EE91DFA090D357982E3390A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 0CB9
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: wlwyFyISpLfkQr48nTHtVio2P1AL7pTgTD3upGl7Fsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:6e:e9:1d:fa:09:0d:35:79:82:e3:39:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=24a61407aeaffde3f73d4ed0f007c1aa7f360131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:c9:b9:ca:dc:52:db:53:3c:07:fc:49:90:
f2:df:b9:96:e0:99:5a:bb:a4:e6:1a:1b:25:88:55:
cf:3f:a1:ce:da:b7:29:7d:d0:d9:37:17:84:1a:47:
88:1e:4f:99:7a:db:4d:35:b1:85:b6:78:42:3d:1d:
fd:7f:bb:38:cf:fd:bc:80:3c:77:85:7d:ef:cc:99:
e9:26:55:35:74:d4:54:22:cb:32:80:7b:6d:96:eb:
25:fc:fc:dd:3a:ef:66:08:d0:bb:c6:dd:9e:83:d4:
8a:a1:34:f4:ed:6e:b7:4f:38:43:4b:70:57:f5:a0:
a6:26:47:47:96:26:1e:88:fc:ea:bd:a3:24:a2:1f:
52:fb:aa:97:0b:98:a2:3e:dd:3d:39:40:65:0c:22:
d5:d3:1a:39:2b:e5:20:f1:fe:2f:14:97:5f:97:3a:
79:71:3d:f9:3b:33:1d:29:c9:cb:c8:f0:e2:9a:8b:
94:fa:2b:ef:93:ed:39:c3:b8:4e:bc:95:28:2b:ff:
d9:5c:3d:ab:dd:fe:bd:e1:71:3f:71:dd:d2:c7:4a:
78:02:82:7e:82:4d:74:8a:30:42:eb:ef:91:f3:bf:
08:d0:fd:9f:6f:a1:5f:b6:85:8f:91:6b:98:ca:3b:
4f:dd:0b:5f:f6:8e:8f:6e:31:51:ad:38:8b:47:20:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:14:07:AE:AF:FD:E3:F7:3D:4E:D0:F0:07:C1:AA:7F:36:01:31
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:b3:55:cd:15:22:b0:d4:80:27:4a:3e:33:8b:60:d2:bc:
82:e4:a6:36:0d:07:ff:26:2b:c7:a5:78:57:9f:61:08:49:e9:
1b:ed:35:56:c5:68:e2:ff:1b:58:8c:94:30:b2:09:86:73:d1:
eb:41:27:d9:9a:56:16:dc:5e:f7:8f:b8:e7:d7:fc:a9:2e:27:
5a:4f:95:29:61:b9:2c:6c:91:27:9f:bc:c4:49:45:2e:79:e4:
59:94:05:74:ab:9b:1e:03:ce:e5:69:d6:e1:cb:3b:cd:b6:58:
b8:ad:77:4c:f3:66:12:43:36:15:e3:52:d8:29:27:fd:62:42:
23:c3:7f:12:1c:6b:0a:41:f5:46:33:6e:93:25:10:82:0c:4b:
20:e0:4c:b2:92:f6:9c:c0:34:23:e5:ff:52:8f:3b:e7:5a:cb:
b2:ec:30:d2:b4:e2:cd:37:0a:aa:e9:3a:19:be:76:53:30:99:
7f:33:7d:96:57:64:c8:58:bd:99:df:da:fc:f0:95:05:30:c2:
d8:d7:88:a9:64:88:92:ca:c3:4f:a5:0d:81:3c:0f:b6:95:44:
c7:0e:5e:eb:32:0f:24:b5:06:6e:db:5a:56:31:c6:c0:ea:49:
43:0c:98:c4:1f:a9:f4:9e:92:c4:db:52:44:a9:aa:c6:43:40:
9a:1a:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:55 2025 by rpki-client on console-fra.rpki-client.org