Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
File: tIKj5Qem8UAPb74uFI-hZERH5s0.mft (raw, json)
Hash identifier: WI+3mguJyh3PEwuNaJkLlz7j0sV4SvGInw/wDe8OSaI=
Subject key identifier: 77:87:4C:10:90:3C:48:35:2D:94:CF:26:15:58:FE:AB:D4:8B:21:6B
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Certificate issuer: /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial: 0194BA8424E0B3DA7103B4F9336E9D7DD076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
Manifest number: 0C43
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: jc3nJE4HlaAIZYtU9WTa-kp6P_0.roa (hash: ni65Uin42OxyzHPEODsDWUqZ0OwEhmfq3oGGPy0ODBg=)
2: tIKj5Qem8UAPb74uFI-hZERH5s0.crl (hash: F6kUdYHd90PzzOUyoxKvqicKbAPMqWgn0kIB64xAE3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:24:e0:b3:da:71:03:b4:f9:33:6e:9d:7d:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=77874c10903c48352d94cf261558feabd48b216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:8c:ce:6c:4e:a0:12:7e:bc:6a:04:13:30:
d8:53:41:b2:a6:a8:3a:e7:93:0f:28:fd:8a:f9:39:
1a:ec:94:03:80:f2:58:73:35:2b:00:6f:c8:b1:33:
2c:fb:24:f8:93:6a:09:90:2a:47:41:4d:13:08:34:
82:24:9d:e8:3a:c2:52:26:b8:59:f5:bf:7e:f4:8f:
d4:4b:f1:ac:c4:ca:41:fd:69:2d:90:87:56:fd:a6:
05:c5:90:05:df:aa:14:4e:f5:d7:23:38:e2:44:44:
d1:b0:00:2c:3b:46:df:62:04:e6:14:e2:66:94:b4:
d5:f8:56:a1:70:b8:87:4e:c8:09:02:ab:eb:ec:43:
f0:6d:90:ea:5d:d5:5f:9e:dd:4f:dc:58:17:e5:1e:
15:91:2f:7a:9e:4d:c6:d0:de:05:88:a4:cb:27:41:
a6:05:a3:35:86:73:18:fd:22:17:21:4d:2b:f4:83:
6c:0f:6a:69:fd:fd:58:a1:d8:9c:1c:5b:47:57:e6:
35:2d:7b:5b:f1:59:a7:95:23:1b:4c:da:6b:6d:8c:
be:4f:bd:a7:e6:0d:e7:b8:9c:cf:f7:fb:df:26:16:
66:af:25:53:49:f6:28:94:2b:9e:9e:a0:55:ca:e1:
1e:f4:cd:de:99:27:cd:a7:63:77:62:53:da:a7:ea:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:4C:10:90:3C:48:35:2D:94:CF:26:15:58:FE:AB:D4:8B:21:6B
X509v3 Authority Key Identifier:
keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:ae:43:61:34:60:85:db:be:9d:d8:c4:a1:d4:0c:25:6b:
7a:75:86:99:74:c3:04:ea:37:17:0d:9c:3d:f7:ea:ef:42:4e:
3e:48:ee:32:5f:36:8c:6f:8d:21:e0:00:9c:38:50:ca:b5:21:
30:12:59:7f:a8:8d:42:65:d1:5c:d4:87:1f:6f:93:b2:bf:42:
53:e7:44:fb:b8:72:94:c9:b3:26:c1:91:c6:16:d1:21:16:0f:
08:ee:4c:49:16:c6:c8:3f:35:eb:b9:c3:2f:e0:93:df:b6:fd:
6e:cb:bb:f8:66:25:60:4b:0f:25:58:61:ae:ac:65:b9:fe:b4:
ae:f9:e3:32:58:4f:06:d7:aa:12:ab:3a:bf:19:82:5b:27:98:
76:b6:f9:9d:db:94:59:98:11:d7:77:2d:9a:e4:02:52:32:03:
d6:7c:4f:54:cb:0a:d8:ac:c3:9f:90:e8:16:91:52:38:d3:bf:
e3:e0:84:22:f4:29:31:a5:cf:74:c2:80:46:4e:88:61:6f:20:
95:98:a6:36:64:e4:46:48:12:46:05:f6:1e:b6:9d:bf:09:31:
79:3b:32:62:b9:5e:9b:f9:b0:b0:43:54:8f:17:7f:41:21:61:
a2:5d:0a:f6:05:51:9d:36:86:93:4d:4d:a8:bb:4a:f4:b1:79:
6a:8f:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:18 2025 by rpki-client on console-fra.rpki-client.org