Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: cGb9YjNx26xDr5xqvdjQxp6bwkNKexAayiB/aWBXziM=
Subject key identifier: A3:7C:57:97:DD:F9:D2:DC:9D:AC:FA:41:E0:BC:B9:F2:12:78:97:58
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 0194BB9744FFCAC26D3E1E7EE4B1365F5A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: YXH/Q6BdLdGricflSol1lSz2OZRqYoGrLO/5ezlQy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:44:ff:ca:c2:6d:3e:1e:7e:e4:b1:36:5f:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=a37c5797ddf9d2dc9dacfa41e0bcb9f212789758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:f0:7e:47:b7:86:58:54:5a:62:8e:e7:bb:
36:d5:ea:9f:b3:4a:bd:e6:f9:18:3b:35:01:a2:a9:
6a:3b:24:d2:7c:00:aa:6c:c1:4a:82:5b:72:11:34:
8b:26:f9:e4:a3:18:d3:5a:fd:43:93:52:56:ba:09:
d6:97:f2:ab:76:a3:df:e9:0d:5d:79:14:d9:bd:19:
19:15:95:26:07:aa:eb:01:30:52:3c:65:31:fd:fc:
8d:e6:29:19:8a:3b:52:6a:00:97:a0:22:85:23:01:
9d:5c:66:c5:39:57:6e:82:9c:0a:c7:32:d4:a3:0d:
6d:6d:04:51:d5:3a:a2:c9:10:cc:28:ba:cd:af:98:
cb:26:9a:a1:d6:f5:b8:10:2e:79:84:17:61:71:1f:
1c:c3:7b:24:95:de:20:c2:28:58:6d:15:c5:58:bd:
be:b3:76:d2:ad:47:92:73:ef:7d:8f:ae:34:38:55:
ae:e5:21:82:e8:ff:2f:2d:2d:3f:ba:70:cc:4e:49:
79:4b:40:0b:7b:51:e7:8d:2b:6b:ba:fd:c7:e4:83:
ac:df:1c:72:cf:eb:c4:e9:4d:36:02:56:b9:f0:e8:
f8:02:38:1d:57:0a:90:7c:5e:d0:d2:db:da:df:31:
23:e7:05:4f:2d:67:4b:bf:fa:34:f3:c4:96:79:42:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:57:97:DD:F9:D2:DC:9D:AC:FA:41:E0:BC:B9:F2:12:78:97:58
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:fd:a5:b1:1b:c6:d4:32:02:a8:85:28:f3:89:19:4d:a8:
5a:b4:9e:35:81:46:cc:e3:fa:9d:bf:0f:b3:16:8f:57:9b:c7:
31:be:c2:3d:8c:d9:fe:c5:3f:9d:5e:b0:3f:71:e0:e0:76:3f:
77:71:d1:e8:15:fb:78:7d:84:14:d6:c5:2c:94:61:5a:dd:ea:
a7:2c:1b:5b:16:c7:4a:54:a5:21:c4:43:7c:66:13:f1:dc:b7:
17:65:b2:a4:a9:1e:95:a5:ce:04:6a:53:53:3c:00:b4:44:33:
17:40:60:ca:1f:a2:7b:ad:bc:99:a8:be:76:0c:c7:cf:27:8d:
11:52:a2:b5:94:57:b8:d8:d5:3d:5a:5f:3d:4a:38:4b:38:38:
b4:bf:84:04:7d:a8:4f:2f:02:19:cd:7f:77:86:49:d4:ce:64:
64:40:53:f5:79:6c:36:cc:5b:0a:58:8c:4c:9c:4a:3a:b3:be:
3b:b0:20:fd:7c:05:21:b8:84:9c:8f:a1:df:1c:d6:e0:46:aa:
6e:f4:3a:54:15:a9:e3:dc:1a:6b:d9:a7:49:af:0b:05:6f:4d:
85:df:ba:fc:9e:35:9b:6a:3c:30:3d:7c:fb:99:59:75:af:2a:
0d:68:b8:ee:10:3d:98:8a:a3:1c:e0:3f:08:5d:91:3e:32:3e:
36:e1:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:42 2025 by rpki-client on console-fra.rpki-client.org