Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: JKBJ6fg7L01vCKLJ1RkSHxEJnBNBEf+KSzq88HR9B4g=
Subject key identifier: F6:AA:6A:23:F4:56:7E:BD:79:65:8B:AE:92:87:51:01:38:7A:19:D1
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 0194BB292CE13B0F5296EE7FBB3EE4D00219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0874
Signing time: Fri 31 Jan 2025 07:00:25 +0000
Manifest this update: Fri 31 Jan 2025 07:00:25 +0000
Manifest next update: Sat 01 Feb 2025 07:00:25 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: qsuzsNKoAFNrIwwzyoC2blF93yrRWcDGBkcNMrQZ5uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2c:e1:3b:0f:52:96:ee:7f:bb:3e:e4:d0:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Jan 31 07:00:25 2025 GMT
Not After : Feb 1 07:00:25 2025 GMT
Subject: CN=f6aa6a23f4567ebd79658bae92875101387a19d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:21:69:1a:2c:61:7c:0d:05:73:8c:6f:b4:
17:ae:cd:02:c7:fe:7f:a0:59:62:fc:e0:e4:b4:ac:
06:74:bb:0f:0a:6a:f0:59:45:28:f5:e6:7b:b3:63:
c2:c8:4e:57:ee:ec:d2:ee:66:2c:b2:e8:2c:03:e6:
61:f8:55:8a:52:63:5b:06:d5:e9:b4:e8:0e:ea:20:
3a:4b:3e:1c:df:34:f3:5b:2c:37:ed:a6:b2:87:a1:
e2:99:2c:ff:b5:79:c6:47:01:d6:84:f3:41:e8:05:
e2:6e:4e:53:5a:2c:09:f3:01:97:58:36:69:78:d0:
20:09:93:f7:8b:42:23:a3:bf:6b:2d:59:f5:09:3b:
a7:28:93:90:2f:b6:8f:99:f5:41:88:11:5f:0a:ca:
6a:d2:e3:12:72:4e:1e:36:c2:11:3c:75:3f:f0:2d:
4f:02:75:65:ec:11:3a:d0:8b:eb:09:f8:54:13:89:
1c:5f:7b:ab:ea:b4:a7:5a:36:9c:bc:9b:94:56:40:
74:cf:0e:7f:cc:11:00:aa:11:63:b1:16:3c:15:15:
1b:6f:26:fa:0e:63:3d:e3:ac:36:ad:38:f7:fe:ed:
31:c7:97:51:c6:41:23:17:2b:48:7f:e0:05:b8:c2:
56:d7:c7:78:d5:54:76:66:8b:e3:5e:63:8a:2c:e3:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:6A:23:F4:56:7E:BD:79:65:8B:AE:92:87:51:01:38:7A:19:D1
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:e0:bb:47:ba:e9:df:09:a4:95:01:85:9e:86:14:62:28:
15:35:6d:69:04:99:fc:ff:ba:b1:b7:25:db:c5:c2:68:ff:3b:
26:95:33:b3:07:f0:45:58:75:0b:35:91:16:11:a5:44:06:3d:
4f:cc:c2:5d:05:22:da:59:97:46:c4:44:64:02:f3:10:68:cc:
25:32:03:2a:88:4d:cb:3a:29:39:a6:e4:3f:a0:e2:92:3c:8f:
dc:98:84:06:f4:bf:42:f2:6b:ea:c4:a7:03:5d:13:cf:f7:d1:
1e:c7:dc:49:76:e4:38:31:36:8b:70:f3:05:f9:65:3c:6a:20:
60:c3:8a:cd:cf:55:e3:6d:12:6e:8b:43:20:49:82:8f:b4:81:
7d:fd:be:3b:39:ec:34:cf:b9:2a:f9:b6:6b:8e:a7:dd:08:33:
78:68:ee:fa:9f:3d:7b:72:25:49:cd:e2:17:f5:ab:9c:bc:ba:
f5:f0:2d:2d:6b:e3:50:d5:fe:2a:57:58:79:15:23:cc:55:bf:
1d:7a:f1:f7:fc:40:07:6b:57:16:d2:78:a7:ce:2e:a4:3e:53:
7d:18:33:61:0c:9f:f2:13:5a:65:a4:52:d3:98:f9:cf:ee:5b:
2f:58:1e:0b:1a:72:8d:69:0b:aa:53:23:fe:b6:81:f6:47:6c:
d4:a1:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:52 2025 by rpki-client on console-fra.rpki-client.org