Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File: F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier: BqG2siqLBUZjf7xsrl5OopHhbuKEL0IpxSy4j12VeZM=
Subject key identifier: 90:D0:13:D1:22:E4:17:19:BB:7C:E1:8B:98:A0:04:04:15:F6:9A:FB
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 0194BA847D19A1856210795A6A080220E881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number: 12FB
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: uVu3rVRIuTX8ecfBaftPCgVvTtUzXa+/HlpCYZR/e0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7d:19:a1:85:62:10:79:5a:6a:08:02:20:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=90d013d122e41719bb7ce18b98a0040415f69afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:33:84:32:98:6f:f6:04:47:75:54:33:61:
e5:63:23:d8:ae:bb:7f:a9:4d:e3:ce:53:4e:fa:2a:
11:df:96:3e:a7:ab:39:86:12:ea:ae:b5:a7:0e:eb:
19:19:d1:04:07:04:79:f4:65:e8:e2:2f:bf:99:4c:
2b:5f:01:29:31:31:d9:f9:91:17:4f:66:85:4a:1b:
c3:e9:72:73:90:ec:3a:f2:f0:b6:48:aa:dc:94:22:
2b:3b:71:72:ef:25:95:ec:94:59:44:e0:a8:54:e2:
1d:63:ad:e9:7c:fd:0d:d4:bb:0c:f8:0f:09:32:e0:
df:20:9e:d7:a2:8e:41:74:b5:f0:9c:ae:e2:77:48:
fa:46:4c:08:9a:cd:3b:fb:51:a4:3b:83:9b:1e:4d:
05:27:0d:b1:07:96:5a:b4:92:b2:c0:6e:84:dd:ee:
e4:a8:e4:ed:69:14:62:39:fa:74:36:e9:66:cd:57:
54:0d:17:bf:cd:9d:bf:b4:8d:2c:83:82:77:14:2e:
27:14:aa:b3:91:3f:51:b6:76:39:62:ec:8e:83:7a:
f7:f7:03:32:b6:6d:70:1a:2e:25:9c:8b:c0:44:1f:
d6:d7:54:fe:5e:54:22:b6:31:3e:63:0b:92:08:e8:
25:a0:77:5f:27:ca:67:64:6f:bd:fa:93:1f:fa:74:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:13:D1:22:E4:17:19:BB:7C:E1:8B:98:A0:04:04:15:F6:9A:FB
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:f7:47:cd:7c:1b:97:d6:78:ef:a0:c2:e9:0c:da:fe:b7:
87:00:a3:72:3b:98:ae:cf:e7:9d:42:9e:a3:e3:38:1f:f8:41:
70:04:86:97:f7:55:56:c6:ed:72:d2:77:48:1c:d0:9a:dc:bd:
28:25:9e:10:03:19:0e:2f:1b:27:a7:9f:93:d7:36:b0:d9:ca:
53:cd:a2:97:6b:10:74:db:07:d8:ad:7d:9a:82:4f:85:cb:33:
cf:d2:80:0d:c0:0e:f0:d0:81:33:82:c2:74:1f:34:53:9e:97:
7a:68:c8:b2:a4:f0:ed:09:70:90:2b:14:6b:e3:87:09:96:e8:
76:6e:70:b3:f4:5f:1f:ba:d3:e5:97:0d:d0:99:ad:14:b1:26:
91:ee:1d:eb:31:e0:81:b4:08:42:bc:77:38:f4:73:9a:1d:22:
b0:ba:f9:55:7e:a1:ea:a3:5a:7b:85:48:f5:f1:0f:46:b4:95:
40:97:1e:f0:29:c8:63:99:bf:42:f5:ba:ad:e3:b3:b4:66:f9:
61:a0:23:e2:66:f2:6e:d8:61:f9:fc:ce:5d:58:82:f0:9d:34:
53:4d:cc:6f:51:1a:7a:ba:b3:8a:5a:b5:76:b9:a9:0d:f0:9b:
be:d9:f0:02:27:b2:28:bb:1f:27:82:ea:52:91:d9:22:cf:aa:
a1:44:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:26 2025 by rpki-client on console-fra.rpki-client.org