Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: a+iyqrEEd20rA5m8x0URiISUWjePHcBj4ycEowBn4c4=
Subject key identifier: 9E:25:50:78:C1:F3:BE:4D:BF:5C:19:FB:C4:CD:31:31:88:36:B1:15
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 0194BA8435318A61379CE6D23FDEDDA315E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0CAF
Signing time: Fri 31 Jan 2025 04:00:14 +0000
Manifest this update: Fri 31 Jan 2025 04:00:14 +0000
Manifest next update: Sat 01 Feb 2025 04:00:14 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: AOSry3veLdvisRBGhsiskgrVTQDVDUcU0AHQiQ+Ug4k=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:35:31:8a:61:37:9c:e6:d2:3f:de:dd:a3:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jan 31 04:00:14 2025 GMT
Not After : Feb 1 04:00:14 2025 GMT
Subject: CN=9e255078c1f3be4dbf5c19fbc4cd31318836b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:28:7d:1e:9f:79:81:e3:e0:b3:10:bc:82:
f7:98:9f:2b:db:e1:26:b0:79:71:b3:c8:47:68:e9:
17:8f:ec:bc:3e:5c:c5:db:41:76:f2:ec:a1:9c:fe:
87:a7:3e:9b:0a:ba:72:79:be:fd:7a:17:6d:46:a9:
06:cf:94:eb:ed:2c:26:eb:04:5a:d1:cd:63:a6:09:
42:6e:cd:5a:a1:31:75:02:31:76:5a:61:2a:64:72:
aa:24:32:23:e3:a1:5d:c3:96:95:b4:25:22:a8:85:
7a:03:5f:a5:66:30:16:fd:7b:ea:08:58:f4:f3:bc:
48:57:9d:f3:18:ff:97:48:aa:9b:e1:09:a3:e6:3a:
52:ef:cd:12:88:70:45:65:8d:de:86:5a:36:15:bf:
42:c1:5f:c0:bb:a5:24:b4:a1:86:aa:8d:b2:01:04:
e7:44:f6:96:b4:81:df:ea:d3:e3:f5:ea:e9:e4:b0:
27:ad:47:3e:7e:c1:e0:21:5d:5d:ed:ab:b2:d1:b8:
7c:92:6f:e0:3c:a3:74:cc:9c:8a:b2:18:0b:a1:c9:
26:03:85:95:e8:a4:22:ac:d8:4f:d1:8a:0c:a6:63:
76:4b:04:18:ca:aa:c7:0e:dd:e8:12:04:37:74:95:
2d:29:c8:9a:71:c0:a5:d0:75:a1:f2:ef:1e:ae:4a:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:25:50:78:C1:F3:BE:4D:BF:5C:19:FB:C4:CD:31:31:88:36:B1:15
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:41:1f:09:91:28:4d:14:c7:b6:6c:61:a3:79:7c:0c:30:
5e:5c:ba:3b:25:e9:57:26:20:49:95:78:5a:47:77:94:2c:09:
07:51:53:d5:4b:f8:7f:17:a7:7a:6d:28:a4:56:b0:e9:d6:42:
d2:0a:5d:2b:57:5a:f9:61:bb:19:73:6f:95:5f:90:59:6e:e5:
6c:45:f1:93:10:81:e6:de:a0:8d:24:68:f5:32:52:05:40:9b:
6c:7d:0b:a8:6e:89:eb:30:fd:be:c7:41:40:eb:35:60:53:75:
16:d5:39:a3:3a:aa:2b:35:0b:18:f4:45:31:6f:0d:9c:d1:79:
5b:fa:af:aa:98:f6:ea:5f:a7:f8:01:03:f3:00:29:82:f4:28:
be:66:92:44:8e:41:b0:b7:20:11:7e:36:69:cc:ff:ae:5c:d3:
c4:79:60:05:e6:8b:31:a6:b0:75:b6:e7:16:b8:0b:75:55:d8:
86:86:17:93:b5:95:c9:6f:e8:0a:2a:9d:73:b0:7f:f5:37:85:
43:5c:87:e7:1d:19:bf:c7:97:55:d5:cd:8b:29:ed:9e:66:0a:
e1:a3:6a:75:3e:c7:af:5d:85:d0:02:18:63:0a:1c:43:62:43:
3a:1f:17:d2:7e:b5:94:d8:03:51:36:17:a0:90:7a:7e:4d:31:
71:be:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:09 2025 by rpki-client on console-fra.rpki-client.org