Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: /72LTZHlJhwpcdxq3v8WTXhtjQlOy2VoMgLzk+dyN4Y=
Subject key identifier: 55:7E:27:3E:8A:FA:97:75:91:AB:4C:6B:A4:2F:A2:6A:D4:26:FC:E1
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0194BAF22739CEC448C76A140863B98A2086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 06:00:19 +0000
Manifest this update: Fri 31 Jan 2025 06:00:19 +0000
Manifest next update: Sat 01 Feb 2025 06:00:19 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: fEO0weCpd1jxNa0BIhqfBFp+6mlq+BvlIPYiOMLCLY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:27:39:ce:c4:48:c7:6a:14:08:63:b9:8a:20:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jan 31 06:00:19 2025 GMT
Not After : Feb 1 06:00:19 2025 GMT
Subject: CN=557e273e8afa977591ab4c6ba42fa26ad426fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:8e:d0:98:ea:44:cb:cb:cf:03:6d:8e:08:
f1:a8:13:18:ba:80:9f:10:7f:2f:47:f3:be:60:d4:
29:6e:59:b3:57:7a:bd:3d:83:fd:11:21:bf:df:f5:
71:e8:a5:1e:cc:c0:25:ae:9b:26:8c:32:0f:76:24:
e3:a2:7e:a5:57:e1:c9:78:0b:fe:ed:a5:45:05:ca:
13:b7:6a:62:40:1d:64:b6:1e:1b:c7:56:37:14:15:
43:b1:c0:9e:0e:f4:2d:26:68:86:ce:3a:2d:41:15:
fe:4d:b4:e5:cd:e4:6e:97:59:eb:83:8d:33:d0:6e:
92:8d:f7:7a:3f:73:12:6d:86:51:3c:5c:11:86:8c:
c4:d4:2f:48:39:a3:d6:40:58:38:4e:73:97:57:2a:
34:05:37:fd:64:ef:e7:b9:db:d9:0b:98:5a:f6:af:
64:d5:01:0d:67:26:6d:2f:6b:f2:4f:d4:58:73:7d:
6b:e9:c4:83:ad:94:42:66:cd:58:70:0f:82:e2:d9:
2d:57:33:ab:46:38:f2:6f:70:51:01:84:8a:20:05:
16:91:76:b7:aa:08:30:cb:bd:d2:35:57:cc:a7:a9:
12:08:e3:0f:63:d8:63:c7:26:f8:d8:53:4f:d6:06:
80:ea:55:a7:85:80:94:5c:1f:5f:19:c2:f4:67:3e:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:27:3E:8A:FA:97:75:91:AB:4C:6B:A4:2F:A2:6A:D4:26:FC:E1
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:c6:9b:f9:b9:0d:5b:05:44:a5:e5:15:83:4b:c8:20:dc:
cd:f4:0a:bb:da:cf:9d:05:8c:dd:11:9f:35:4d:f9:bb:79:4e:
43:2f:ba:4b:57:50:e5:ae:46:1b:66:dc:98:77:9a:08:02:aa:
ba:3b:fc:df:36:a0:16:8f:ed:66:cc:0f:b4:30:c8:ae:4d:62:
2b:ae:b6:5f:d4:93:8e:29:b6:46:07:51:31:71:c8:15:0c:3b:
ab:d0:86:41:f3:b0:fa:96:58:1a:96:80:78:7e:65:bd:10:6f:
59:19:12:b1:73:33:47:ef:83:92:36:d8:f5:9e:dd:70:a8:8e:
da:63:ce:e7:f6:10:ee:48:bc:34:d9:3f:68:0a:ac:58:80:f7:
eb:8a:24:86:c3:9f:80:17:5f:8b:d4:a1:05:af:38:00:af:3e:
66:b4:8f:20:a8:c5:71:32:96:8b:85:20:f5:d9:62:24:4d:61:
f7:86:26:35:1b:1a:fa:55:94:da:be:b8:97:53:6f:b0:07:e7:
67:c3:9c:80:f1:33:8b:96:10:61:cb:ac:01:bd:ba:a4:83:02:
89:cb:ee:15:5d:12:9f:10:05:8d:84:a1:1d:b3:72:8f:51:d1:
2d:a6:cd:aa:65:08:f3:b3:39:53:fd:25:1d:39:70:92:d1:52:
16:33:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:02 2025 by rpki-client on console-fra.rpki-client.org