Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: 5qSl8YHy9x85G8q3QwZMecV173pMIFHZAkOAP2ExC0I=
Subject key identifier: 21:3D:B2:D3:82:5F:A9:AA:9B:66:F1:72:8E:BC:8C:5A:15:47:AC:A9
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 0194BAF2591B91A56ED5DD28E27A1678C416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 06:00:32 +0000
Manifest this update: Fri 31 Jan 2025 06:00:32 +0000
Manifest next update: Sat 01 Feb 2025 06:00:32 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: GrJYXA2hruCYAtMr4n83RimIOcZebZcNcIQ0AZopsxI=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:59:1b:91:a5:6e:d5:dd:28:e2:7a:16:78:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jan 31 06:00:32 2025 GMT
Not After : Feb 1 06:00:32 2025 GMT
Subject: CN=213db2d3825fa9aa9b66f1728ebc8c5a1547aca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:7d:f9:ee:db:85:5e:3c:cc:2b:48:23:60:
db:45:96:e7:b9:b5:88:80:75:d6:9a:87:48:af:cd:
43:54:c4:06:87:59:7b:ed:8c:67:13:89:6e:07:86:
56:91:cc:76:63:e6:f2:1d:83:dc:a0:c2:e3:f6:f2:
59:13:9d:0e:4a:ff:49:03:07:63:6c:8b:21:0e:2c:
d7:57:72:12:fe:35:f9:3e:ca:4a:ba:aa:6a:ad:bd:
5e:a7:67:65:43:98:51:73:ea:a2:a1:34:23:12:10:
ca:64:35:74:df:be:48:6d:05:f1:d3:db:37:30:cb:
cf:26:68:05:28:92:b7:8a:cc:60:0a:6d:6e:b1:b3:
05:ed:96:fd:3f:89:77:4e:b9:fd:c1:e6:25:bc:08:
c0:b1:a4:53:b7:d2:96:a8:5f:a8:6a:b7:40:ef:68:
3c:59:f0:85:04:69:b5:ca:27:4f:f6:1c:ee:c1:27:
2d:e6:17:34:93:94:bf:9c:e9:1c:3b:cb:d2:ec:91:
12:7c:b7:e3:f1:ae:52:5c:75:14:3c:af:33:4c:91:
a2:aa:6d:87:a7:0c:e3:08:3f:8a:6f:21:1e:02:9e:
79:c4:1b:b5:80:e8:6c:21:4a:4e:fa:28:eb:70:52:
6d:d6:15:81:fc:96:7d:30:9f:6a:bb:a2:78:05:b3:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:B2:D3:82:5F:A9:AA:9B:66:F1:72:8E:BC:8C:5A:15:47:AC:A9
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:5b:91:dd:a7:9e:0b:28:1b:d3:0b:b8:dd:9f:06:3c:86:
73:95:d1:c5:fd:a5:90:62:50:56:c8:eb:71:1a:82:32:bf:47:
4d:83:be:31:29:1c:49:6c:bd:d4:e9:62:9e:59:57:05:a8:fc:
17:75:20:46:d2:41:f0:0c:00:1f:f8:aa:8f:e8:52:10:54:53:
02:d6:b0:af:1e:ed:84:e4:7c:84:12:92:ca:cc:0a:7a:50:b3:
9d:fe:d5:50:61:af:89:d6:16:2c:ee:53:f0:fe:f0:11:49:eb:
53:89:12:19:3f:0d:9e:f6:b0:64:be:e6:c5:12:a2:07:69:09:
73:c2:76:4d:80:0e:08:7e:0f:a7:e7:96:11:a8:f1:be:58:2d:
d0:70:9a:b6:e7:c4:f5:11:2c:28:f7:4a:c3:4f:4c:09:cd:98:
18:90:80:c5:6d:cd:f9:1d:83:b7:c7:6e:80:e8:d8:61:68:d4:
b4:62:43:d1:89:17:87:6c:a8:b3:2d:d5:2e:6f:b1:e8:40:dd:
ff:79:14:f3:a8:b0:56:f7:2c:02:35:cb:34:04:80:08:1d:d2:
e3:5b:79:fe:d3:a0:02:30:ad:0c:b6:ce:87:53:7a:be:92:94:
0d:60:12:3d:6a:e5:c5:1e:ae:1e:61:d5:81:f6:39:7f:9b:22:
55:01:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:31 2025 by rpki-client on console-fra.rpki-client.org