Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: SXYitcx2e7fJwnRm0QzL3SHfm5R/j+YbZOsI2ceHECw=
Subject key identifier: AB:A6:4D:6C:54:6B:4B:A5:66:8C:FB:B5:5D:C1:20:F8:4A:B5:DE:38
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0194BB5FDB56B3D4D7EE84BAF9A44C4186AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0822
Signing time: Fri 31 Jan 2025 08:00:08 +0000
Manifest this update: Fri 31 Jan 2025 08:00:08 +0000
Manifest next update: Sat 01 Feb 2025 08:00:08 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: Y9XhmkjkcGUprwPD+mBzkwvl1ovvIFYcyynsODHo7wM=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:db:56:b3:d4:d7:ee:84:ba:f9:a4:4c:41:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jan 31 08:00:08 2025 GMT
Not After : Feb 1 08:00:08 2025 GMT
Subject: CN=aba64d6c546b4ba5668cfbb55dc120f84ab5de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:20:5c:b2:48:1b:1f:b0:a3:60:83:39:6d:32:
20:6c:54:ef:a6:79:1c:ff:07:53:91:72:7b:4f:52:
0b:51:d5:c7:cf:2a:36:af:54:c1:c5:1f:1b:bc:35:
1b:bd:b1:bf:1e:c8:80:52:d5:39:89:bb:0c:94:58:
7f:5e:c1:00:32:59:2c:67:dc:90:15:fb:e4:06:55:
55:94:a7:49:3d:26:67:be:fc:f2:1e:11:81:a1:70:
88:44:6a:f9:50:de:1b:a9:d9:cb:03:5d:60:70:5a:
9c:4f:fa:e0:38:0e:52:f5:39:bb:a3:48:ea:a4:b7:
21:05:e7:77:3a:53:82:7e:57:7c:69:52:9b:13:15:
0b:eb:e0:96:96:78:f4:c7:16:65:e4:c7:09:77:ff:
2f:97:b8:57:72:02:c2:f9:97:6b:3b:d9:80:82:72:
c8:c4:a6:d0:d3:48:a1:da:98:2a:9d:02:93:c2:27:
24:13:5a:10:62:04:a3:43:32:d6:68:27:8b:cf:73:
42:01:29:a8:c5:1e:63:20:05:d1:8f:14:19:54:81:
c8:47:f8:fe:90:ef:d2:dc:7b:6d:c1:ad:a6:56:d9:
c2:0d:dd:8a:45:e5:d1:97:13:21:e7:6b:f2:1b:dc:
e3:b1:97:5a:ca:98:dc:e8:d7:44:98:e8:e8:57:16:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:4D:6C:54:6B:4B:A5:66:8C:FB:B5:5D:C1:20:F8:4A:B5:DE:38
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:60:ab:c4:c4:27:6e:5b:a4:d1:ec:26:89:d5:6a:97:88:a7:
2d:ac:db:7d:4c:c1:0e:4e:9c:17:65:8d:8d:13:24:8e:96:2c:
1d:24:22:62:d6:fb:35:89:36:f4:5f:24:75:53:ab:2a:de:cb:
94:de:70:5a:dc:2b:34:e8:e0:b3:94:c5:d1:c6:8c:ae:6f:b3:
9a:21:80:de:a7:5b:ef:80:60:6c:80:e0:77:22:8f:c9:d0:e6:
c8:2b:bc:8c:7d:fa:d5:4a:fb:8d:f2:16:22:0a:78:a7:dc:a3:
eb:08:d8:ad:48:06:93:17:0c:81:ac:e0:7a:2c:b1:2a:10:51:
6a:5d:52:a3:35:bf:e3:df:d0:39:f8:c8:9a:31:64:e6:c0:38:
3e:f3:67:be:6a:77:e5:9f:2e:8c:13:c3:89:c9:ba:59:f6:56:
72:b5:34:20:d2:cf:71:5b:f1:a4:87:7f:ee:7b:f8:13:f3:e0:
f8:91:1c:07:08:69:d9:5d:df:41:92:80:75:a3:82:89:7d:40:
7b:f8:af:35:05:aa:27:27:1d:df:77:84:04:b8:11:f6:49:0c:
4e:86:63:f6:89:5a:22:3d:9d:96:ea:1b:46:f3:8f:6f:e3:e2:
29:e5:f7:98:07:db:6d:f0:b9:f3:32:13:0c:be:c7:62:ec:11:
eb:ce:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:30 2025 by rpki-client on console-fra.rpki-client.org