Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: qss65foqAbN8ClWJsgNGh9u7dMLJfygrwIk+lO9/vog=
Subject key identifier: AC:88:50:AC:B8:40:8E:8A:4B:B0:52:C0:B2:79:8D:2D:7E:01:EF:C0
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 0194BAF242C19A0D3941E4F5213E6CB2B644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 06:00:26 +0000
Manifest this update: Fri 31 Jan 2025 06:00:26 +0000
Manifest next update: Sat 01 Feb 2025 06:00:26 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: R2zq8yiFQi+XEOblIEOvAn0T9riaZUgdY5AImbucSSA=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:42:c1:9a:0d:39:41:e4:f5:21:3e:6c:b2:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Jan 31 06:00:26 2025 GMT
Not After : Feb 1 06:00:26 2025 GMT
Subject: CN=ac8850acb8408e8a4bb052c0b2798d2d7e01efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:65:ad:91:b4:e2:bc:a2:b4:14:0b:01:27:
e2:13:51:e0:68:03:cc:d1:9b:10:a4:71:c9:6e:d4:
d7:c2:98:56:3e:fb:a3:c2:72:55:0a:39:7a:25:a5:
dc:08:d2:36:10:f1:63:f6:a5:c0:6a:f8:d5:7f:ed:
31:29:5d:40:77:13:42:c6:89:f5:89:3a:be:ed:35:
d7:bd:58:96:bc:68:88:89:46:e3:f9:d2:b4:3e:1b:
6b:41:6f:10:5b:49:af:17:97:f0:09:dc:47:f7:55:
04:5c:dd:96:41:20:7e:ba:c9:38:a5:14:47:aa:e2:
af:34:31:88:1e:18:04:05:56:6a:9e:da:da:27:58:
3e:35:ce:f4:33:21:23:cd:d9:c5:c6:ef:aa:5c:20:
b8:d0:96:cd:24:a8:28:47:50:17:12:41:ba:f0:43:
cd:5c:64:80:91:81:78:3a:fa:85:6d:55:45:15:87:
c2:91:56:b2:74:23:1b:6f:ee:01:e4:08:04:62:92:
10:58:5a:14:cf:01:56:38:31:e4:f6:4e:73:c0:18:
3d:25:f5:a8:96:55:6f:9b:0b:32:07:a6:40:10:26:
6f:23:f0:06:2d:c9:48:81:9c:2f:f6:2a:7a:64:06:
35:95:be:83:bc:9f:56:57:02:6f:6e:c6:90:c1:a8:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:50:AC:B8:40:8E:8A:4B:B0:52:C0:B2:79:8D:2D:7E:01:EF:C0
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:5c:34:0a:e0:38:f2:01:52:ab:21:ae:54:46:81:ca:98:
64:4e:0c:3a:f4:11:46:15:a2:d8:47:7a:bb:1a:ce:da:9f:1f:
39:ab:9a:ef:10:75:ce:3e:e9:9a:11:7c:2a:87:23:a6:24:3e:
e7:65:c0:9a:40:91:64:0a:cc:14:0c:9f:90:e8:99:6c:3b:21:
9e:54:b5:f3:8e:0f:45:3d:4f:cd:a2:3e:79:bb:56:bc:f8:a0:
2c:a7:0a:c0:34:81:33:8c:7b:80:61:ef:9c:f3:4d:c4:50:57:
1d:56:5e:5d:9f:73:97:e5:54:6b:e4:af:45:52:da:61:e6:a4:
ec:32:70:3b:22:00:f4:a6:28:78:e0:9c:84:36:6f:6d:d4:29:
ce:68:cd:8f:99:67:c3:6a:64:ed:33:d5:a6:08:ec:b4:e8:e0:
a3:69:df:a4:24:c7:e6:62:06:e7:ab:71:e6:48:b2:35:1a:5f:
ed:ab:eb:b9:df:a6:68:e9:b6:31:2d:aa:ce:22:a5:c0:15:03:
5a:43:bd:01:75:18:4e:33:32:f7:2b:83:8b:fc:58:ff:ba:38:
a4:45:c5:01:86:90:13:66:a7:d5:95:71:d4:87:35:7d:42:0c:
b9:d5:98:6f:41:eb:fc:25:1f:4c:9a:04:04:6c:35:46:82:69:
33:3a:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:46 2025 by rpki-client on console-fra.rpki-client.org