Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: FF39+rbYpR0aDj4WUD2yt9fS1h+Ct98ADPcPU3ISGLY=
Subject key identifier: C8:0F:BD:CF:C5:2E:14:89:80:57:8F:D0:BE:D1:75:C4:36:86:2E:FB
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 0194BAF20CEF0ECB8F2E5E06A754527D5F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 06:00:12 +0000
Manifest this update: Fri 31 Jan 2025 06:00:12 +0000
Manifest next update: Sat 01 Feb 2025 06:00:12 +0000
Files and hashes: 1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: zlmvrsJl2ztg9jnYZkudzS9jusGODb1tD16uRqa33hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:0c:ef:0e:cb:8f:2e:5e:06:a7:54:52:7d:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Jan 31 06:00:12 2025 GMT
Not After : Feb 1 06:00:12 2025 GMT
Subject: CN=c80fbdcfc52e148980578fd0bed175c436862efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:92:5a:6e:53:b8:0c:f6:a8:b2:6c:d9:11:
c7:57:9b:51:9b:c4:d7:05:e9:30:3e:0b:f9:c1:43:
9d:ab:00:e4:9e:2a:e0:95:40:cf:90:3e:f0:45:46:
bc:c1:df:44:cf:48:d8:bd:20:25:14:9c:e0:4b:88:
22:59:fa:3d:b9:07:f5:59:4e:03:48:7b:98:2a:f4:
6a:fe:31:82:a0:be:15:18:ea:96:8e:46:87:f7:77:
ca:d4:a2:63:d7:f4:83:ec:6c:95:ab:cf:36:f7:37:
4b:83:bb:c6:94:28:8d:50:8d:7e:d9:73:56:90:0e:
6d:76:a1:71:41:32:3e:89:39:0b:71:54:d0:45:9d:
b6:39:e7:15:a6:c8:a8:74:50:59:31:6d:5d:d2:6a:
2b:fc:e5:0f:e6:69:a9:19:9b:ab:be:c4:e3:07:3b:
a9:2a:79:6a:6f:31:de:8e:45:c8:bb:e5:e5:30:26:
b2:6e:5f:70:0a:b9:1c:fb:18:8e:cd:45:dc:13:d5:
c3:17:5b:4f:9e:1b:77:e6:e5:b0:7e:47:e8:db:ea:
c4:41:ad:ce:b4:bf:47:d2:15:4d:43:57:ef:20:01:
cc:2c:b2:f2:98:82:1c:d8:0d:33:78:f9:df:53:76:
2b:78:ab:38:e1:ff:f7:65:88:53:96:c6:f9:27:33:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:BD:CF:C5:2E:14:89:80:57:8F:D0:BE:D1:75:C4:36:86:2E:FB
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:28:fe:c7:e0:eb:ee:23:25:43:eb:49:f6:ff:b5:33:69:
c1:d8:d7:ad:8c:44:ca:43:e2:e8:ab:01:ff:02:48:e8:91:cb:
7e:e5:86:61:c2:d8:ad:35:73:0d:c0:80:73:e8:e9:74:af:f0:
3d:1f:84:ca:76:e4:a1:e1:a7:ce:4c:70:0a:d1:f5:3e:69:da:
8b:85:0e:00:c9:00:fe:c4:13:91:66:29:dd:c8:3c:35:03:28:
d5:48:e6:af:81:77:76:37:b4:08:d2:5e:74:09:b0:8e:3c:e9:
27:e3:d3:99:a5:22:17:df:71:83:d7:7a:e8:3a:0b:0a:9e:5a:
f8:47:8b:9d:58:01:4b:07:c8:94:1f:70:c8:58:53:d5:5b:6d:
a3:46:22:c7:3f:a9:18:b2:60:6d:61:4b:b6:11:ad:0a:be:9c:
d1:96:dd:f8:21:07:0a:30:dd:41:4f:e1:ce:7a:2e:35:61:a9:
f1:e3:eb:c1:2d:08:78:e8:b4:6d:c8:35:7e:41:91:3a:a2:2d:
d5:31:ea:a2:2f:36:6d:d0:f4:92:a8:30:53:a3:47:cb:0a:41:
07:9b:f6:2c:1d:df:c5:b3:31:dd:41:af:3c:a3:ae:2a:be:0f:
9d:59:5e:44:ff:33:3e:ba:63:71:08:ae:75:56:30:e6:12:d2:
40:72:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:50 2025 by rpki-client on console-fra.rpki-client.org