Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: hjlcuf2j168Pr2l+yqU3Whzovi13rglFoFEY6YB3LIg=
Subject key identifier: 89:62:09:CC:52:C9:C7:EC:4D:5F:7D:8A:59:8A:C6:3C:64:8D:E3:E4
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 0194BB974AC243874ABDA51F67EE545DB78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 0295
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: YNhkWvxTx6f0xn33FAxdvjFxk3I1hcIpGc4WcMM5DNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4a:c2:43:87:4a:bd:a5:1f:67:ee:54:5d:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=896209cc52c9c7ec4d5f7d8a598ac63c648de3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:f6:ca:97:f7:47:57:38:43:f9:ab:06:37:
02:7c:23:3b:ec:1f:a6:1d:09:ed:1f:ac:64:90:3d:
0f:0e:24:bb:05:7f:ae:f4:23:9f:f4:c2:90:7c:0b:
de:00:04:44:a9:fa:b2:6f:24:ac:aa:67:b8:d7:55:
c2:4d:42:57:a9:71:f6:b5:37:75:6e:c2:ef:8f:61:
52:b9:b5:40:88:70:4f:35:9e:93:0b:eb:8b:07:72:
d6:0f:3f:b3:4d:37:78:f2:43:16:8a:34:f5:b6:50:
40:eb:d6:29:8a:64:06:32:1d:7e:8a:24:f6:e3:bc:
db:3b:3b:41:08:3f:99:c4:3c:e0:e3:63:58:60:c2:
07:00:16:18:d5:e4:e0:ba:69:30:b1:35:9e:64:af:
8f:1f:e5:91:49:37:3e:c0:7f:a9:f8:9d:86:b0:80:
69:2e:a5:13:43:3f:bd:cb:2f:e6:c5:de:a6:a1:62:
ed:ab:6e:39:6f:a7:23:0b:a2:54:13:eb:1e:98:30:
a7:45:73:b0:88:9c:7a:33:15:7d:7d:6d:33:67:98:
1d:bc:d1:5d:c0:4f:0b:48:e6:7b:8f:8f:7d:0c:8e:
a5:51:40:d3:c1:ba:d6:09:e7:27:29:fc:4a:ec:77:
30:a1:1a:e0:28:a6:f9:b6:06:97:8b:1e:5d:23:57:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:09:CC:52:C9:C7:EC:4D:5F:7D:8A:59:8A:C6:3C:64:8D:E3:E4
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:56:7c:98:1a:1c:ae:08:60:86:64:18:18:08:ce:6c:5d:bf:
8c:82:29:4b:92:e8:02:95:b2:07:b7:c1:38:30:68:01:df:cf:
b7:79:fd:66:8a:4e:bc:3e:53:ce:bc:cd:f0:48:e8:64:2c:bc:
89:6b:44:e6:c2:e3:fe:11:ce:90:5a:26:32:41:1c:e9:04:1f:
95:d9:cf:0f:99:a7:82:85:a2:33:bf:b4:1f:3f:74:62:ba:8a:
9a:46:e4:69:d9:50:3f:c3:e6:87:85:d3:7e:53:1e:ad:1b:48:
95:1d:e6:8d:fd:43:5d:c6:e3:41:e9:e9:8e:d6:9e:95:45:b9:
79:f2:dd:ea:6e:20:03:24:cc:cb:61:45:32:c0:2d:0f:1b:d4:
df:a2:45:b9:34:59:58:7d:b6:05:32:50:77:4b:91:44:eb:5b:
a9:c0:9d:09:61:b1:e3:96:19:98:90:11:0d:f9:74:ab:ba:88:
26:a8:f5:12:97:85:2d:ca:4b:4e:f9:e0:11:a3:83:ab:a7:28:
e2:2d:aa:fd:b1:1c:ed:00:73:d9:64:e1:bb:8c:9d:65:39:10:
ef:36:08:58:03:49:51:9d:3a:93:5f:80:6a:15:f8:e2:00:e9:
e4:9c:ef:8f:a8:2a:cc:34:e8:74:2e:30:e0:de:34:43:f4:34:
5b:38:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:23 2025 by rpki-client on console-fra.rpki-client.org