Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: ic0s+N6Cb0zU6AL2UGnXRRYCHu13CjeOCwfkF1fsHdI=
Subject key identifier: 66:52:70:23:FC:5B:61:4F:43:22:9D:A3:02:FD:95:7D:D4:3A:22:C0
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 0194BB29799D25D6E32871984FC66919EFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 04A5
Signing time: Fri 31 Jan 2025 07:00:44 +0000
Manifest this update: Fri 31 Jan 2025 07:00:44 +0000
Manifest next update: Sat 01 Feb 2025 07:00:44 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: p7AqD7+hU04mz8truNr4+dkWUyPRikxEi7wC1XWhMJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:79:9d:25:d6:e3:28:71:98:4f:c6:69:19:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jan 31 07:00:44 2025 GMT
Not After : Feb 1 07:00:44 2025 GMT
Subject: CN=66527023fc5b614f43229da302fd957dd43a22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:d2:20:46:86:6c:cd:d0:73:75:d9:5a:9c:
dc:01:dc:b9:2f:c0:13:3d:d9:eb:b5:41:a0:f1:96:
21:cf:85:8f:fe:d6:ca:5b:11:00:ac:5d:70:7b:48:
d9:97:78:f9:cf:59:cb:2c:18:1a:48:a8:b1:84:e3:
06:11:df:66:f7:89:bf:86:91:00:e7:17:73:f1:c3:
54:8e:80:77:42:32:ea:ae:d0:64:3e:dd:6a:f4:ac:
cc:b2:27:1a:3c:cc:9c:26:f6:c3:8a:ff:f7:e1:3d:
ef:f0:4b:f8:72:91:11:3e:aa:2e:c7:99:ac:b4:b9:
d7:10:5f:83:99:f4:01:e4:70:92:2b:73:80:a8:6e:
92:f7:a6:11:8a:36:f7:23:30:14:4e:12:bd:20:fe:
95:5c:10:57:60:36:e4:03:c5:69:67:69:fc:2d:f4:
02:4f:9a:7b:96:48:94:e1:1a:05:54:a9:b8:2a:e8:
ae:53:6e:50:ce:a2:55:7b:58:0f:08:ea:25:d6:b6:
7c:47:e3:5a:64:e3:3a:6e:c9:24:6f:bd:4a:a1:13:
1b:be:a1:6e:e6:fa:29:0f:48:8b:c5:18:6b:fc:7e:
b1:e6:81:2e:16:e3:89:30:0b:05:b5:d2:ba:62:32:
a2:ab:4b:57:bf:71:70:c8:a8:f1:f0:b7:f3:83:b5:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:70:23:FC:5B:61:4F:43:22:9D:A3:02:FD:95:7D:D4:3A:22:C0
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:eb:ee:06:45:ba:f2:a9:53:20:4a:87:46:47:49:11:3b:
0c:6a:8a:bf:ea:e6:b9:30:02:b0:9a:fa:5c:89:e3:49:46:4a:
1f:c5:b0:16:26:1b:bd:83:64:6b:de:4d:95:f6:ba:2c:f0:84:
73:da:80:74:26:e6:7b:b5:bc:ad:b8:4d:e7:90:26:bd:13:1a:
d1:c7:5c:7d:77:33:78:f3:18:99:44:f8:fe:00:af:12:f5:5c:
e7:5a:6f:06:d7:41:ca:c1:36:f4:86:16:a4:70:c3:02:2c:3e:
66:a2:7f:b7:65:0f:48:d8:3c:1f:16:c9:58:ea:70:c6:6f:af:
9c:e0:b3:05:f2:4f:6d:34:a7:3d:da:69:24:ac:d4:a9:1c:0d:
e0:34:f1:3e:f2:1f:fa:d8:8e:c1:98:b9:84:c9:8e:88:db:45:
6a:34:92:6d:e7:8b:ec:24:5d:a6:38:0b:ee:9f:3a:83:93:6f:
cf:cd:6b:66:b5:15:8b:e5:ae:43:92:f7:c1:31:c8:b4:03:bb:
d5:c7:06:b2:f9:77:02:5b:57:96:c0:c8:08:10:2f:e4:6e:d9:
5d:f5:81:8d:14:13:e0:b8:2e:af:6d:9b:0d:4e:ab:86:19:18:
e3:1d:71:1c:c2:25:3f:1d:25:b4:89:7b:da:95:ad:9d:fa:06:
a8:8d:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:07 2025 by rpki-client on console-fra.rpki-client.org