Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: yQrnO1xwQhP9073ZtbhDoECp9MRO6x5E63Wki9sDe/c=
Subject key identifier: E7:58:86:BF:52:DD:AA:E9:42:E7:BB:A8:7D:D4:1E:43:B0:D2:26:7E
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 0194BC04BBD98553F4C8E885DFDE3E4751D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 08C3
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: fnqOHFrlICnuBMhsVxxNDOKR55+DUuX49d4SRZn8aks=)
2: UiJ3SFPycHJDAWrLPNzzGNFnI2I.roa (hash: 25C/HLWlIMspjRREcGRN7FGQZBj2RTsW/k1F7dI/0fk=)
3: aMw8zFpz0DQQ4LUzce5SbedZlsM.roa (hash: 2TtBSZh/XnHX3MDVMJOFGapZKtnnVYEgdGfCDlDr3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:d9:85:53:f4:c8:e8:85:df:de:3e:47:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=e75886bf52ddaae942e7bba87dd41e43b0d2267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:0e:c1:5e:11:54:22:5b:80:e9:bd:7d:3f:
8d:71:dc:12:6d:89:15:9c:38:16:a9:73:14:05:cd:
a6:f6:08:d2:5d:4b:37:2a:c9:2e:ee:07:44:c5:f0:
93:1f:a4:60:0c:b0:51:84:01:bc:40:3b:63:b9:33:
6d:5a:79:c0:ef:d7:2d:2e:42:3a:cb:8a:0f:5c:fa:
7e:c3:e9:49:f7:48:3a:f5:e5:7d:00:36:6d:0b:46:
df:0d:f0:a2:41:e5:87:0a:ed:92:22:87:10:f9:7e:
a3:ef:6b:4f:6c:7f:4e:60:f7:19:9c:d3:aa:60:c2:
e7:bb:df:f9:b1:f5:d1:fe:a1:22:95:62:4f:42:53:
f9:aa:b1:2d:b6:a7:dd:bb:f7:e7:d6:5c:a1:9f:b0:
74:8d:ea:d9:1e:fd:fa:22:de:a2:7b:94:1e:7a:f5:
47:a1:5f:13:af:5f:38:58:a6:72:75:f4:77:21:96:
f2:0d:6f:60:e6:c9:6f:b5:1f:8f:65:1a:93:8c:e5:
ef:1b:82:00:ed:a1:44:8b:23:73:63:73:2d:a3:fc:
6d:02:fa:5d:cd:29:72:79:6e:cd:a7:8d:3f:ac:a3:
a7:fa:74:52:df:6d:e2:c4:8c:f8:5b:ff:67:d0:37:
81:fc:4d:7f:51:02:77:1c:fc:a2:db:d8:55:e6:ae:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:58:86:BF:52:DD:AA:E9:42:E7:BB:A8:7D:D4:1E:43:B0:D2:26:7E
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8d:b1:47:fe:1b:1d:6d:ee:4c:40:4a:4a:59:1d:bc:5a:d0:
3e:2a:bd:39:a2:8b:91:ff:8c:aa:b2:a3:ec:96:a6:cd:0c:e0:
9e:e8:ee:d3:4c:4e:32:cb:4a:57:32:07:fa:c0:44:78:ef:cc:
5d:d7:8f:48:b3:e7:be:7a:3d:6f:02:63:50:e7:c7:78:42:6d:
f7:51:c0:53:9f:92:0a:46:59:a7:f1:47:92:c3:88:6d:54:52:
93:16:0c:b6:30:00:5d:9a:1c:75:85:d2:10:3e:9e:9e:b0:95:
bb:e5:da:68:9e:46:2f:22:c2:d0:8e:e0:38:f3:50:8b:5f:75:
b5:20:e3:40:a7:48:f4:01:4f:05:dc:13:0f:7f:6b:49:97:87:
89:15:7c:18:f5:dc:b5:ac:c2:83:a8:b2:c0:b4:61:71:0b:e9:
14:b7:4d:fb:80:da:a0:c4:85:ba:54:4e:6b:82:cd:57:e6:34:
57:e4:b3:49:f9:b9:a6:5d:e3:49:a4:d1:21:01:e8:60:0f:89:
e8:95:16:de:10:70:fc:ad:5a:1e:d8:b3:35:06:41:af:93:af:
ab:56:cc:52:f2:aa:8e:b6:2c:d5:09:2f:96:a9:51:c0:e8:7b:
4d:69:16:73:32:d2:ae:fb:69:cc:74:bf:69:06:b7:a0:62:a9:
9c:3c:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:52 2025 by rpki-client on console-fra.rpki-client.org