Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File: _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier: wzjBEY9rFZinHK7JJaP1bN4tSq0Erev9cqlUrIE7+C8=
Subject key identifier: B0:0D:49:5F:F5:62:7D:AF:4A:8A:0A:04:93:A1:A5:31:E1:D0:C9:93
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer: /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial: 0194BABBCFEA64A4341A6BDB0E0F3FF639BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=)
2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: hDrwYe8+h8rTrDkicRKErk7NGJRv59NyKWkUM5k6b1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:cf:ea:64:a4:34:1a:6b:db:0e:0f:3f:f6:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccca62cbe743328555483a857e521863f953b41
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=b00d495ff5627daf4a8a0a0493a1a531e1d0c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:95:2e:f5:5d:4c:18:47:20:f8:96:a7:aa:
b9:9f:2e:c6:f1:11:48:47:13:59:60:27:97:e3:db:
cc:10:91:22:90:99:d9:d5:bc:79:2a:45:0b:68:4c:
9f:2a:aa:7f:65:df:f2:dd:35:1c:f5:9b:0d:c9:36:
a2:b4:2f:41:ec:4d:fb:b9:19:8f:bc:a9:28:25:31:
ef:05:23:c9:34:ab:e2:c6:1a:8f:ab:af:6e:01:6e:
5d:44:52:b8:01:fb:26:2e:b7:b4:e1:4a:6d:12:16:
67:38:6c:f3:63:83:c6:a9:cc:0e:f0:c5:89:aa:3c:
1d:a3:a1:26:a9:ec:e3:4a:f2:4f:f3:b6:37:a3:f4:
1b:2b:c8:ef:ac:29:42:95:81:7b:19:2a:8c:d3:c1:
47:35:e8:38:20:fb:67:0b:ba:48:8f:78:0b:10:da:
86:19:c1:71:fb:86:f5:d4:7e:99:52:52:6b:f0:bc:
24:32:42:59:61:6b:fc:e9:48:ac:3c:a8:52:5d:2e:
b3:a3:70:c4:d2:ef:1f:b1:ac:69:78:f3:ee:5c:83:
c9:ae:b0:8d:e4:92:8e:d2:1e:26:3f:45:2f:8b:84:
39:81:41:cf:c6:d4:71:7d:55:fe:67:5f:9f:29:2c:
78:7b:1f:bf:60:5c:59:b7:f3:fd:b2:77:c0:d4:cc:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:49:5F:F5:62:7D:AF:4A:8A:0A:04:93:A1:A5:31:E1:D0:C9:93
X509v3 Authority Key Identifier:
keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:be:fa:2e:e5:2b:dd:49:01:ff:8e:94:08:8f:9d:4e:b4:
d2:4d:58:16:9d:11:eb:f2:4e:0a:a5:ab:12:32:fb:1d:1e:01:
ca:06:a0:d9:11:23:1d:f4:dd:55:8e:0f:d1:27:c0:c1:14:3d:
6d:da:8d:3d:49:75:af:32:f1:5a:d5:ec:52:b5:71:8b:74:cb:
82:ad:a3:23:25:bd:d5:08:1d:a5:3d:eb:d3:12:96:0a:b9:93:
92:13:bd:1e:6b:d1:cc:a3:91:0c:6d:49:f9:61:0f:63:29:35:
b0:67:bc:4c:89:58:84:2e:a3:60:cb:bf:ad:1b:54:7e:cc:25:
9d:7d:80:ac:3d:63:24:20:6a:6f:5c:52:f2:87:8c:df:a6:1c:
f0:96:35:77:f1:3d:28:8a:a4:d5:42:1e:8e:7c:34:6b:54:d3:
ff:cf:4a:7d:3c:c4:51:e6:ec:90:f0:1c:1d:a3:29:cb:74:47:
3f:b3:31:73:ba:3c:f2:07:5d:37:57:dd:fb:9b:33:c1:55:06:
db:0d:1f:91:a5:7a:60:a6:11:19:45:75:e9:a2:b8:52:8f:f8:
a5:50:99:3e:ec:07:3e:c2:54:ac:81:ff:40:a4:fb:cc:6a:81:
c4:b4:23:fa:38:cd:45:57:af:e6:56:32:22:3b:ff:b3:0a:49:
aa:f5:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:42 2025 by rpki-client on console-fra.rpki-client.org