Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: wyMmfVr7itLCC2jR7CiraEldmCQCsHo2m6wwvJrT5T8=
Subject key identifier: 48:E4:22:A0:AA:CD:DF:41:5F:2C:C5:86:F2:D9:87:87:05:5F:9A:E0
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 0194BB600B7195DE5F3CDEF693ABD8F4EB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 08:00:21 +0000
Manifest this update: Fri 31 Jan 2025 08:00:21 +0000
Manifest next update: Sat 01 Feb 2025 08:00:21 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: Dv7gZzfm9uor+SG71fOZLscF/JlFM16FhnXtlnuSAdY=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0b:71:95:de:5f:3c:de:f6:93:ab:d8:f4:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 31 08:00:21 2025 GMT
Not After : Feb 1 08:00:21 2025 GMT
Subject: CN=48e422a0aacddf415f2cc586f2d98787055f9ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:f4:9c:ea:a4:ce:88:ba:31:05:e2:3a:45:
67:20:91:6d:b2:a2:e8:fe:e0:34:49:e9:d6:2c:3d:
99:c3:25:2c:96:0e:37:2b:f8:95:db:ca:42:2f:d6:
13:46:c0:1b:fe:22:fa:ae:30:03:74:a2:77:34:01:
d5:56:28:5a:38:b6:11:a7:7b:ac:fe:7e:20:5a:71:
a0:9b:12:55:b1:16:e6:5c:fa:13:bb:7e:8e:cb:f1:
a3:05:4f:30:7c:63:09:73:99:0f:3a:cb:95:77:32:
0f:aa:f2:af:7b:3d:73:ae:90:f8:93:d7:75:09:83:
e3:75:0e:1c:4e:3c:c7:e5:a4:a8:e1:f5:d3:a1:1c:
82:56:a1:97:73:19:8b:39:c8:06:1d:86:e2:a1:cd:
43:ea:6e:91:aa:95:02:ca:a8:51:41:09:b8:dc:61:
4f:1e:dd:15:dd:a3:0d:37:2e:94:af:80:21:52:8c:
b7:1f:30:a6:2a:df:30:78:c3:a6:75:a0:15:62:3e:
3a:53:c4:ee:0d:fe:89:f2:08:de:10:60:34:7f:5f:
29:93:35:c4:94:88:4c:79:0d:71:d6:47:61:98:9e:
30:89:80:7e:6b:f9:d9:cf:3b:b0:f8:76:b5:e5:76:
70:42:09:5a:05:52:90:c3:fa:13:ab:a1:3b:65:12:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:22:A0:AA:CD:DF:41:5F:2C:C5:86:F2:D9:87:87:05:5F:9A:E0
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:ee:a5:0b:af:22:1b:9c:f5:6b:d3:22:0b:62:7a:c6:6c:
1b:1d:e6:40:b2:5e:54:27:d0:52:d4:0a:26:cc:94:89:3b:46:
3b:b9:ec:fb:90:3f:8b:27:91:4b:d8:68:af:75:47:32:26:dc:
7e:02:24:45:05:9d:2e:dd:51:d3:21:a8:fd:54:29:e8:ff:6a:
88:1d:58:3d:af:42:5d:3c:9b:06:9f:33:44:1c:54:14:5d:c3:
f6:50:41:6e:93:c9:e6:71:23:05:9b:cb:62:63:b6:7b:ac:b1:
37:0a:51:01:aa:54:39:c6:6c:c3:f9:bb:4b:4f:7a:cf:19:86:
06:b0:6c:3d:f3:59:4d:dc:1d:ac:d2:84:32:6e:d9:e2:24:17:
e8:26:a6:38:59:cc:4a:af:44:c7:29:d5:a5:4a:aa:eb:1e:83:
c4:ec:5b:b9:36:eb:d8:5b:51:67:2e:70:d6:43:a2:84:e0:aa:
0d:69:a9:ba:d5:33:da:ec:c7:80:13:b6:fa:34:3c:92:25:75:
c2:e8:b0:10:13:1b:e1:5c:52:83:d7:de:51:bd:57:ed:d8:07:
05:37:fa:7c:f8:b8:2c:44:6f:31:bc:82:49:41:20:d6:46:1f:
65:73:e7:f1:57:8a:8f:c1:be:e1:16:31:2b:55:66:b3:a5:e3:
e7:ae:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:15 2025 by rpki-client on console-fra.rpki-client.org