Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: s5qgOAhN24FSYazieE3IjDm/6YadPWBAbd1v1wWNg5E=
Subject key identifier: 89:C9:1D:A6:25:D6:AE:97:A4:3F:63:9B:58:48:D1:7B:64:DB:CB:E1
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 0194BB2919D11BA43D145F06F79E75E3CD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 07:00:20 +0000
Manifest this update: Fri 31 Jan 2025 07:00:20 +0000
Manifest next update: Sat 01 Feb 2025 07:00:20 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: 5Ow0tqRTI2Q0yywVVISNWjEwJRrDJOnzsKM9Vp3NJj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:19:d1:1b:a4:3d:14:5f:06:f7:9e:75:e3:cd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jan 31 07:00:20 2025 GMT
Not After : Feb 1 07:00:20 2025 GMT
Subject: CN=89c91da625d6ae97a43f639b5848d17b64dbcbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:ae:fd:b5:b4:ac:34:87:46:fd:db:63:a4:
18:54:71:a5:81:6e:e1:39:ad:f2:3a:44:d7:ea:ae:
90:c4:60:6e:f0:1f:08:f3:33:3c:a2:ef:2d:d7:b6:
35:c4:fb:ae:36:f9:65:f8:96:71:d7:3a:0f:ca:73:
2b:e8:31:57:43:c7:02:35:fd:44:84:43:e3:53:8a:
c9:6d:d0:74:c2:e0:9e:5a:d5:97:42:fd:51:c6:12:
15:ae:64:44:b9:2c:c5:c8:74:6d:cc:43:46:64:48:
32:bc:62:52:bd:0c:5d:0c:59:e7:cc:d6:90:e4:0c:
0b:8d:11:cf:e3:1d:77:92:c6:89:16:4d:20:eb:d8:
c9:c8:39:4c:7f:d8:04:af:00:02:2c:03:65:1f:bd:
1b:fe:99:4a:90:8c:92:6f:ae:e6:22:d6:c0:cf:7f:
33:ef:0b:72:02:3b:8f:97:42:c5:6d:b7:a1:30:ab:
95:73:04:11:0c:3c:95:7a:b2:14:f2:5f:d5:c2:29:
3d:b1:74:93:9e:d1:17:31:bf:7d:00:20:00:77:5a:
af:19:39:80:89:81:da:3b:01:3d:e1:62:8d:eb:1d:
0c:a3:1c:7a:17:f4:3b:5f:16:77:1c:00:ab:f6:f3:
1f:62:1f:83:a9:69:c5:cc:61:bd:84:67:54:83:38:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:1D:A6:25:D6:AE:97:A4:3F:63:9B:58:48:D1:7B:64:DB:CB:E1
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:1f:ee:8a:4a:e0:ee:80:11:ce:6a:dc:fb:ff:c8:bf:06:
4f:5a:e3:b0:8a:e8:74:ff:97:78:b6:db:9a:67:3c:31:3a:92:
92:7f:43:17:59:64:3f:f9:59:18:86:47:ef:95:dd:bf:38:f9:
59:19:a1:ee:f5:fc:09:8f:5b:63:14:d6:df:fa:69:bc:3c:df:
c2:08:f1:bd:f3:fc:68:af:24:6d:23:a1:a6:ac:73:5c:37:da:
30:08:60:13:a0:f8:b8:2b:fa:25:cc:9c:3b:c1:68:56:29:1f:
94:a2:b8:be:ec:01:50:bd:f0:92:3a:da:a9:bb:85:ac:aa:d8:
3d:fd:ee:50:eb:e5:44:a7:48:e2:65:56:a6:24:10:9b:1e:e3:
6d:b8:a0:37:67:92:fd:78:5b:af:53:dc:23:27:04:cb:93:9a:
4b:01:e7:80:08:8d:85:a1:b5:82:5f:0b:33:65:e7:d9:3c:0b:
ca:ce:73:1d:31:21:77:3e:b8:08:81:70:d9:8f:47:b8:6a:bb:
00:e9:08:42:b6:57:8f:d9:c9:d7:cb:6a:ad:31:9e:4f:20:8d:
50:52:13:08:45:17:88:2a:71:03:46:c3:1f:82:c6:4b:14:2b:
39:36:92:2e:d9:8f:0e:13:fc:ac:81:c3:ac:e3:81:43:74:79:
92:10:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:03 2025 by rpki-client on console-fra.rpki-client.org