Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: V5UA4tqLaZWitx6kPZOxqgGx2BgroRX6BcD/Ts+Ynqk=
Subject key identifier: 36:F8:92:74:76:5C:B2:44:9D:5A:DA:EB:B5:DD:19:28:81:3E:FF:DD
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0194BABB6E336C73C3E9261EE41BCB2143F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0517
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: K3iMHdAeJXfHlnnr-SFgcqXt6ns.roa (hash: UNryLkfKYrOJZtamnGSaO+ZvTx9tCb9rjtiqKaAua+s=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: kj85bfs1fPMqpZgMNWOMU98btiogWF9199b13YWKvS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6e:33:6c:73:c3:e9:26:1e:e4:1b:cb:21:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=36f89274765cb2449d5adaebb5dd1928813effdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:5a:d0:09:86:20:94:7f:ee:26:21:0b:4f:
5f:b3:48:70:42:82:40:69:8e:5d:bb:76:15:9a:b2:
f5:eb:3b:cf:82:4c:e8:8e:c9:28:25:7a:57:e2:86:
ab:f8:39:9a:cb:fa:ba:c7:a8:ad:69:a5:e8:54:99:
52:da:65:b6:e0:36:99:04:fd:be:1c:ee:59:cb:ec:
31:9c:cf:a0:b0:d0:3a:02:43:f9:b8:05:8a:dd:e3:
55:85:8b:60:60:e2:38:61:ab:1b:dd:8e:d4:d5:92:
c1:ef:6e:d6:cc:e6:b0:3a:f5:c7:9e:ae:0b:69:15:
a4:64:85:f9:9b:84:9a:2d:29:03:25:9c:3a:92:e1:
4e:24:d5:80:94:b3:00:6f:7f:9b:9d:24:49:3e:b9:
5b:45:5e:34:ff:6a:d8:ce:e8:1a:47:9e:9b:62:37:
bc:63:3b:62:26:1e:10:0c:41:9a:fb:e2:ec:30:87:
d5:d4:44:01:6f:e7:d3:54:70:8b:23:44:c4:a8:fa:
db:ed:f0:33:52:a9:a9:6a:16:d1:0a:85:05:06:36:
a2:d1:84:67:0e:f4:53:15:74:03:0c:d0:b4:43:e5:
a6:ca:88:e1:0d:d2:2a:22:dd:b2:ea:32:d2:32:df:
13:a0:b2:32:c8:82:78:b2:b4:89:b2:0f:01:f7:95:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:92:74:76:5C:B2:44:9D:5A:DA:EB:B5:DD:19:28:81:3E:FF:DD
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:85:0e:c6:67:92:fe:3a:4e:b2:d8:1b:fb:51:3c:a2:8e:
8d:5e:4a:35:f7:b7:0e:60:fb:14:1d:89:f8:61:5d:25:3e:99:
62:bf:19:d4:4b:29:bc:2a:76:79:2c:0c:4c:c2:45:a0:6f:a5:
73:9c:48:21:47:ff:82:d8:c3:30:63:ef:23:c6:d4:09:61:77:
3c:b2:a5:75:11:69:00:56:69:07:51:27:85:8c:8b:72:b7:26:
9c:56:56:95:c5:2d:3b:d0:f7:20:6e:a1:3d:2d:a0:ec:c4:b9:
e3:e8:59:9d:21:28:7e:d7:ce:90:b7:4c:f4:c6:04:a7:df:1f:
05:11:71:93:a2:a2:f4:4b:b8:a7:fd:32:a7:6d:7c:ce:35:59:
6c:69:63:ea:a4:c8:e2:40:22:40:93:3f:28:e6:19:37:78:4c:
aa:e1:c6:65:c8:71:8c:8c:69:c2:9a:90:4c:e3:48:5c:57:23:
e1:ba:2c:94:05:36:31:e4:3c:7a:33:54:c6:60:bd:dd:29:1c:
47:dd:67:e7:43:50:15:86:79:06:1e:c6:01:8c:34:4a:ef:d2:
70:38:15:30:80:49:09:43:51:6a:eb:fd:ba:99:41:33:31:5d:
5f:3d:3b:60:7b:b2:ad:bb:80:1c:3f:1e:11:11:f0:71:3f:5a:
d1:55:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:24 2025 by rpki-client on console-fra.rpki-client.org