Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: GDTti9Bg0bWbcXLip5TCTkzXo2Chuj5fqi6LxXmlVCk=
Subject key identifier: 8D:79:C3:1A:28:AC:EC:C3:45:AB:38:AE:A8:6D:14:48:5F:B6:50:41
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 0194BB28F24F7F0A9F33C7912E8FD617D2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 0B1F
Signing time: Fri 31 Jan 2025 07:00:10 +0000
Manifest this update: Fri 31 Jan 2025 07:00:10 +0000
Manifest next update: Sat 01 Feb 2025 07:00:10 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: QFd4XEcpB1sePsRvjtajf+KflR4FTxN0w490Q+A0+uQ=)
2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f2:4f:7f:0a:9f:33:c7:91:2e:8f:d6:17:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Jan 31 07:00:10 2025 GMT
Not After : Feb 1 07:00:10 2025 GMT
Subject: CN=8d79c31a28acecc345ab38aea86d14485fb65041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:e0:8f:65:c6:7c:c0:24:6b:60:81:76:09:
04:14:8b:36:67:75:cb:26:55:66:7d:29:12:c8:1c:
06:90:73:80:41:0e:9c:12:f6:62:ed:d7:a5:29:d5:
bb:f8:2e:fc:a2:74:b4:25:14:d9:7c:2a:ff:4e:b6:
4c:b4:47:6b:42:34:bf:d5:36:8e:0f:a1:fc:53:4b:
1f:5c:be:20:35:36:cb:ba:0b:65:05:e3:6e:5c:6b:
ec:86:61:20:48:a8:90:7d:43:d8:6c:c7:8f:cd:bb:
0d:ae:55:54:a2:e9:b0:17:1a:d5:ed:3a:90:54:59:
fc:f8:c2:d2:f2:77:5a:b0:a8:31:57:f9:48:8b:f2:
c0:d6:a2:e9:fb:d7:c2:62:a3:e7:ac:9d:7f:7a:b9:
2e:66:c5:e4:2f:06:6d:0e:5a:8a:72:9c:81:11:dc:
56:74:f7:eb:09:c1:65:7e:3d:6d:af:43:d3:f6:8f:
a2:80:e8:84:5e:1c:01:df:a9:54:f4:91:12:58:28:
69:bc:d8:6e:24:a3:a7:32:e5:2b:dd:24:38:fd:48:
9e:93:a8:8e:0a:d8:80:a1:2f:c7:40:24:d0:4e:a5:
47:d3:58:84:fa:d1:75:7d:5d:f6:4e:b3:e8:f7:db:
32:03:0c:1c:92:5f:cb:0a:66:56:9a:69:74:9b:a7:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:C3:1A:28:AC:EC:C3:45:AB:38:AE:A8:6D:14:48:5F:B6:50:41
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:de:c0:b7:5d:40:61:12:e0:e8:d7:f5:a3:cf:b3:ca:a5:cd:
ee:24:82:7b:01:cc:47:6d:3b:d7:21:b9:94:98:58:a9:b9:b6:
54:d4:b6:e0:2f:96:2e:f2:c9:3e:2c:ac:44:06:b9:46:93:76:
62:aa:7f:59:46:76:f2:eb:a2:98:b3:69:4c:99:9b:29:20:e7:
d3:40:0b:c8:52:30:ef:3d:7d:04:72:f8:22:38:68:49:b9:d5:
ea:21:69:41:74:d6:1b:07:11:65:4a:41:83:a0:32:b0:c0:49:
1a:e2:64:41:b3:40:3b:1f:e3:d3:1c:c0:1a:28:05:b4:f1:08:
98:9b:06:4b:e8:10:b6:05:26:9f:13:29:79:cf:c6:74:a8:91:
52:e3:53:0e:71:be:80:73:7d:dc:48:26:cd:ea:cd:8e:e4:37:
2e:b0:6f:d0:a2:67:f9:41:72:dc:80:e5:10:ad:cd:fa:cb:12:
19:4a:2e:d7:cd:6a:dd:77:04:fa:b7:04:33:97:be:01:b6:84:
63:3e:4b:91:e1:22:28:2b:ae:ab:16:d2:4f:85:1e:b9:41:7e:
bb:f0:64:c2:b2:66:e8:38:59:be:e3:4d:02:91:9d:22:18:c8:
61:4c:f0:2f:23:ba:c4:32:5d:34:da:26:3e:b9:05:bd:c7:1b:
0f:fb:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:00 2025 by rpki-client on console-fra.rpki-client.org