Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: ZrD4kwH7sVMdRIGl0UvKzgEjXdYrwS37yknPkd0vLJM=
Subject key identifier: 9C:EC:09:D5:52:7E:CA:77:0F:55:76:9D:27:DF:86:FA:39:F4:A0:17
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 0194BAF1FBBFA1628689F8188A995E3A78EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 06:00:07 +0000
Manifest this update: Fri 31 Jan 2025 06:00:07 +0000
Manifest next update: Sat 01 Feb 2025 06:00:07 +0000
Files and hashes: 1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: bIbfNneCVvkI5MSpCsq5z+s6M9BE1HerzDIiaGAb5HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:fb:bf:a1:62:86:89:f8:18:8a:99:5e:3a:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Jan 31 06:00:07 2025 GMT
Not After : Feb 1 06:00:07 2025 GMT
Subject: CN=9cec09d5527eca770f55769d27df86fa39f4a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:10:6b:a3:53:63:5a:1f:e5:56:67:bc:ec:
51:d1:7f:90:1f:64:32:f8:45:c3:60:58:70:5e:91:
94:28:18:0a:be:e7:6d:44:4e:73:a4:58:a0:01:bf:
2e:04:34:c7:75:f1:1d:a3:e9:82:42:b5:99:59:7a:
ab:88:a8:ca:82:c3:21:84:f5:9f:09:e7:c4:00:4c:
77:e9:a9:a5:fc:ef:f5:70:49:ef:ca:0f:e7:b4:6f:
18:3f:ef:39:a6:8e:61:87:db:74:64:10:24:3e:12:
14:63:77:79:ed:b4:dd:cb:ef:4d:e1:4c:b1:75:4c:
5f:f2:13:16:fa:e0:78:d9:6c:38:dd:0e:1c:ff:1a:
fa:51:c5:05:74:43:70:d8:c8:06:96:cd:8b:85:eb:
77:fe:ec:97:84:e6:d0:5a:d9:8e:31:9f:1d:53:df:
90:0c:8c:1f:0d:4d:30:a1:3b:33:bf:b3:72:8b:20:
ea:de:b3:f9:d4:dc:42:06:ea:cc:e1:ae:21:e4:61:
79:4d:48:ce:24:e6:d2:8d:9c:b7:86:03:4f:dd:e0:
af:c9:b4:f3:17:e3:b4:a8:23:ee:e0:ab:14:ae:b6:
00:ba:a1:ae:39:29:a6:cd:9a:03:71:c8:d3:21:87:
d5:ca:71:2a:cc:2b:7c:6e:f2:e1:48:7f:5c:e4:b3:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:09:D5:52:7E:CA:77:0F:55:76:9D:27:DF:86:FA:39:F4:A0:17
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:ab:1a:2c:7b:b1:49:45:e5:71:3a:51:d1:94:3a:60:25:
65:b0:da:01:75:4b:11:31:32:63:ed:93:44:f1:b0:8e:44:3a:
e2:d7:8d:f6:86:02:b1:71:12:fa:a6:45:36:f5:51:b7:8f:c6:
89:88:d0:78:d2:3d:9e:fa:52:ec:bd:30:2f:9f:db:68:d2:1b:
f4:c0:51:6f:81:69:48:04:58:0c:17:f9:f0:4e:43:c7:61:04:
c2:ee:ee:c2:fd:6c:1d:64:4a:06:18:15:60:a1:55:19:12:1f:
2b:7c:74:3e:6d:12:76:f2:37:c3:c8:66:b9:b0:8a:ef:a5:8f:
ec:ea:27:9a:56:cd:14:f1:14:c2:77:62:b8:31:58:21:16:d7:
7a:73:81:20:27:d8:c8:ad:b2:42:f5:d6:43:48:bc:94:fd:de:
2a:e9:08:be:07:e3:2f:3d:47:d9:5e:cb:45:e8:f4:be:e8:6f:
79:f5:7f:c8:a0:d9:36:5a:94:a5:d2:3a:7a:b0:ed:1e:bd:64:
b4:6b:7a:5c:ad:60:b8:53:67:cf:12:d3:5b:09:3f:1f:e5:ef:
78:fe:c7:80:39:ee:e2:72:43:56:e5:86:9f:30:31:42:ca:ae:
a2:f1:f2:1d:a8:ed:26:3c:95:78:2f:c3:25:17:17:37:34:04:
f9:15:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:31 2025 by rpki-client on console-fra.rpki-client.org