Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File: _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier: mZqsTVnbzIO6LyrgWiOwni7HQN00Pw8+R4wfr5bVIvg=
Subject key identifier: FC:2D:4B:89:CE:3A:6D:3B:95:7E:F1:85:22:04:66:3E:72:21:1B:97
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 0194BB28EAC52AA55B5AA775EAFA58A1276B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: 2C7Ekgg1cXIXfoijtKmMU9z3z/eNIUjqBJQ5R2GsE0Q=)
2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ea:c5:2a:a5:5b:5a:a7:75:ea:fa:58:a1:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=fc2d4b89ce3a6d3b957ef1852204663e72211b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:7f:a7:06:89:41:45:55:3d:b8:b8:d0:32:
a9:ac:41:e7:5f:9a:d8:20:37:df:a8:fd:aa:5d:55:
71:36:bc:4b:1f:e9:9e:51:e5:5d:85:00:a7:92:b0:
5b:16:d2:b1:c9:79:0b:3a:d9:35:5c:3d:45:ca:e0:
9f:be:5b:6c:10:dc:f2:34:e0:ee:0e:17:c3:71:e6:
75:f9:e4:08:96:3b:89:f3:0b:5e:00:86:3c:4f:a8:
4d:55:0e:16:47:6a:c3:00:7e:9e:8c:c8:04:53:23:
21:e9:c4:0c:a6:4f:42:2b:1e:a9:c2:97:ae:16:50:
fd:92:54:0f:ab:98:57:2d:79:5c:0d:7a:36:28:0e:
15:aa:ce:e0:12:85:89:c5:17:10:ad:9d:bf:0f:3f:
11:6b:7c:5e:fc:9a:da:28:6b:a2:a2:6b:7a:1f:dd:
88:27:dc:bb:e1:bc:74:aa:30:8e:67:1b:a9:03:7b:
ac:9d:f0:fd:fb:20:50:56:42:57:10:a0:e1:33:b1:
71:62:b5:fc:ef:c8:c3:0c:10:13:bd:c9:a9:01:96:
00:c0:d9:bc:e7:ec:4a:01:52:78:47:9b:c9:c1:42:
77:ac:34:71:2a:e2:c2:ae:82:f4:a1:ef:32:c3:21:
01:f7:0c:54:c7:f2:84:1f:b2:ee:25:9f:89:6c:42:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:4B:89:CE:3A:6D:3B:95:7E:F1:85:22:04:66:3E:72:21:1B:97
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9d:e9:74:7f:f6:f0:bb:53:de:ef:3c:fa:21:70:41:60:c8:
52:2c:bb:29:86:1f:0b:d0:79:b5:8b:7e:ff:ac:16:e3:ca:db:
c8:3a:30:9f:7e:f2:15:e5:4c:8c:3e:fd:70:7a:47:fd:8e:c2:
4b:c2:b0:88:fd:16:5a:c8:e7:22:5f:f5:22:b8:16:ee:f4:2b:
a6:57:c8:ab:e8:f0:79:8b:b2:29:97:e6:b5:0f:20:19:b3:3e:
be:4e:3e:ee:db:19:15:1c:ea:7b:0a:2a:ea:70:86:bf:7c:73:
92:1f:8e:53:08:a4:3e:9a:a4:c1:88:9d:2e:e9:e0:d0:f1:fc:
4c:5f:4d:6d:59:21:ba:45:fd:bf:2e:37:a8:d8:79:19:86:07:
b0:f3:33:f3:27:42:57:3f:e7:13:a2:23:66:a9:67:1c:03:f9:
fa:ee:cb:e3:b7:c8:3e:db:24:02:54:97:c6:ec:54:bf:0f:cc:
f0:32:b9:61:7c:11:63:0b:09:13:fe:64:16:a1:6f:8f:7e:c5:
a7:b3:a0:e9:18:5f:62:63:98:f7:4e:7e:93:88:6a:52:8a:33:
59:ad:89:a2:75:dd:5a:94:3c:34:d5:a9:f1:6b:80:fd:5b:34:
ea:d6:48:6b:8e:00:d0:70:37:fa:d6:e8:72:a8:59:cc:6f:9b:
03:a9:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:27 2025 by rpki-client on console-fra.rpki-client.org