Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: tQUZlEJub3666vg50fs7g4yyEVh+0+Lsnb5uiEQHXRE=
Subject key identifier: 74:9F:8B:AE:83:DD:7D:6F:6A:27:83:2C:0D:A6:27:2A:C5:94:F0:B8
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0194BB28E6587CC0C78A8D85BA0CA22F0BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 0E99
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: YdssgHXdvBQgSEpcem/JsXkQ7bTtp7zSA+7CicBWHqA=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e6:58:7c:c0:c7:8a:8d:85:ba:0c:a2:2f:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=749f8bae83dd7d6f6a27832c0da6272ac594f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:de:9e:bb:73:e2:fa:c5:84:f2:16:cb:af:
1a:c4:09:c1:b4:de:57:48:08:ce:6d:4c:bf:44:4b:
da:2d:e6:d0:37:07:aa:ae:51:ab:02:a2:4b:16:1d:
95:78:ff:27:48:c5:7c:05:b6:3f:f9:e9:14:5a:a0:
ab:51:2c:40:e2:6f:a2:ba:0c:f1:16:47:6e:9e:cc:
f4:70:fc:a0:3f:c7:b2:30:6e:e2:80:40:a8:83:68:
be:b2:95:08:73:38:c6:44:0d:a3:e4:ff:f2:8a:c9:
2d:c8:18:5f:38:b6:07:a7:6d:f9:ee:3c:0f:62:7e:
d6:57:6e:b0:8d:ee:47:4a:90:09:73:3c:b8:72:cb:
22:fa:d0:19:04:f3:d1:3b:36:45:e4:19:a4:7a:85:
18:7e:2e:87:06:7d:b7:a8:36:5c:b2:f1:d5:aa:bb:
17:4d:42:4d:20:a4:1e:b9:f0:5a:27:85:9d:09:31:
14:29:03:97:68:8a:6f:ca:f3:6c:97:ea:c1:03:c6:
73:eb:46:a5:d6:23:ec:48:df:71:99:0c:37:34:5f:
6e:05:f5:70:f6:71:7e:71:4f:a4:59:7d:2f:1c:a3:
3e:1a:02:f2:75:a2:89:4d:9b:c2:6c:f0:3e:02:b0:
e8:f6:b7:7c:21:5b:62:5c:44:c5:ae:7a:ae:62:d3:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:8B:AE:83:DD:7D:6F:6A:27:83:2C:0D:A6:27:2A:C5:94:F0:B8
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:33:1b:e8:54:c4:54:77:0a:d1:da:c8:2e:28:c7:a8:96:
dd:00:44:ce:22:9a:27:af:e1:ff:52:86:e4:b6:1b:0c:2f:8a:
73:b8:7a:14:f7:8c:1d:b7:52:77:ee:79:01:34:13:a6:62:3a:
16:17:c4:bd:39:36:c0:b9:09:67:c2:96:0c:0e:d1:dc:47:a8:
53:3f:71:45:6c:70:31:a0:75:00:3d:d3:a4:10:7c:15:4b:c9:
df:79:74:bb:2f:f8:4a:a4:6e:33:ad:19:61:82:3d:ab:a0:37:
07:76:da:3b:e4:a4:2e:01:d6:a7:91:48:a3:9c:9b:5d:1c:46:
b2:70:a4:da:db:26:5b:f7:d9:d3:91:c1:87:74:5c:17:6e:f4:
b8:b3:7d:1d:06:03:31:4f:06:c0:89:f1:cf:63:07:83:24:6b:
3d:6a:a4:c9:98:6e:eb:1f:ea:16:e1:e1:65:00:1a:cd:2e:e0:
9f:5f:ee:cc:5e:35:e7:de:85:68:88:58:6c:39:a6:d5:cd:1a:
5f:3e:ee:e8:4d:c9:cf:53:ec:cd:5c:57:4e:1f:04:c9:c3:fb:
c4:95:06:32:50:cd:d9:dc:de:8c:bb:09:97:20:18:6f:d2:c2:
0a:c5:ca:5c:7d:71:ac:a8:98:66:8f:13:d7:bd:4d:ba:f2:d3:
24:b2:7a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:38 2025 by rpki-client on console-fra.rpki-client.org