Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: eG/R72Upt5zYTNR7G/tpyPIrqcgXqm7oQDU7bdxfEiw=
Subject key identifier: E8:80:C7:63:BC:2F:DF:D1:95:97:EF:FA:C6:F4:7D:A6:D9:DD:DF:FB
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0194BB603E4CAFC83153D6B93853F99A25CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:34 +0000
Manifest this update: Fri 31 Jan 2025 08:00:34 +0000
Manifest next update: Sat 01 Feb 2025 08:00:34 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: fED0DOkM9QirwUJUt3tcmsLYGesZQ6HykuuwlWf2M7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3e:4c:af:c8:31:53:d6:b9:38:53:f9:9a:25:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jan 31 08:00:34 2025 GMT
Not After : Feb 1 08:00:34 2025 GMT
Subject: CN=e880c763bc2fdfd19597effac6f47da6d9dddffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:47:b9:f4:0c:a5:e9:9d:a6:83:a5:bd:73:
f2:ce:8c:93:1a:5a:e6:9d:5e:73:1b:36:6c:40:ff:
a3:2b:c4:10:24:70:26:69:9e:97:b7:5d:31:1c:ca:
40:45:0f:c8:14:ae:c7:07:45:b5:36:22:19:35:f4:
ad:71:6b:9b:02:25:27:81:84:0f:37:24:dd:db:c2:
86:70:5e:96:57:d7:5e:9d:2c:16:ed:c6:74:2c:e8:
37:61:ff:15:53:3b:bd:3a:a1:8e:ec:59:8a:3c:42:
86:66:12:37:67:cb:4b:69:b0:09:fc:61:db:4e:e4:
5d:b5:08:0a:37:71:3c:e1:a5:e6:35:d9:46:0a:e5:
04:9d:9c:b3:9e:28:40:f4:18:f8:ea:f7:c6:47:34:
20:82:6d:8a:57:32:b1:c9:b0:67:09:8d:36:6e:6f:
53:b2:27:71:3d:56:3a:73:25:85:c2:f0:b5:1a:12:
c0:e5:ea:f9:f0:3d:e6:f5:59:0b:f0:df:19:19:55:
69:44:3c:4b:7f:40:89:d3:7c:90:e3:41:19:6a:ca:
a4:ea:cc:42:68:83:0f:91:cf:8c:03:3a:1a:8c:40:
a0:05:fe:58:9f:4a:d6:90:bb:68:fd:1b:8b:16:3a:
99:57:f3:9f:4a:77:3d:84:55:8b:b4:95:b1:d6:e9:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:C7:63:BC:2F:DF:D1:95:97:EF:FA:C6:F4:7D:A6:D9:DD:DF:FB
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:bd:62:f0:f7:30:96:20:b4:bc:fc:14:ca:2e:25:ca:0b:
04:6c:39:8b:5d:58:6c:93:28:9f:9a:23:85:5a:4d:28:6a:1c:
75:e6:f7:8d:9c:cd:e9:63:d7:68:84:37:92:4c:fd:24:8a:fa:
1d:02:05:93:21:25:44:71:c0:1d:70:13:a7:bb:33:ac:86:0e:
e3:63:4d:41:51:86:f0:2c:33:7d:85:17:54:b9:5e:f2:11:4f:
9a:af:d1:af:b7:73:c5:38:f2:74:54:90:b4:6e:ea:89:a8:c4:
67:a4:94:ad:66:e7:df:6f:d2:73:de:29:a1:03:88:f5:51:53:
4b:ac:4d:13:fd:8a:ce:c5:38:5c:6e:3f:bc:da:47:3c:2a:19:
53:ad:e4:5b:cb:74:3e:03:6d:f3:5c:63:ea:6f:76:70:d4:ed:
9f:c9:78:e1:2a:87:c8:f0:4c:0e:26:13:d8:51:c4:10:54:ac:
60:bd:82:7e:fb:9f:c2:9c:e5:df:79:d7:62:d7:2b:b5:52:21:
41:c8:ec:c4:1c:5f:55:02:3a:a3:07:cc:f9:c0:c6:46:6a:21:
c8:92:51:0b:80:de:b5:4c:72:64:e7:8c:21:76:5c:94:e7:29:
4b:44:49:a9:fa:5f:ec:91:dc:2b:c2:88:47:67:d5:c4:0f:17:
51:b5:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:59 2025 by rpki-client on console-fra.rpki-client.org