Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: B5YRrx1mLjRs3YoKryOm9fP0x2XvYCXDPtc7nMUq0sw=
Subject key identifier: 41:8D:A2:07:0A:D6:A9:BD:8B:88:66:E6:AB:B7:E3:E3:66:16:75:4E
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 0194BABB2D55FDB517BB5B1CEF528F15B7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: gisVH1u8CkHdRgnqGX8kUhij9qKej09JGC/nu3rzNv0=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2d:55:fd:b5:17:bb:5b:1c:ef:52:8f:15:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=418da2070ad6a9bd8b8866e6abb7e3e36616754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:b5:15:e6:af:2e:3f:e9:f9:dc:4b:96:29:
13:29:98:85:1d:4e:a5:db:1f:b9:5c:c8:bb:5e:cd:
73:c3:7e:eb:07:7e:34:18:a9:3e:14:5d:e9:77:3e:
cb:83:35:77:bf:5d:c1:93:5d:ba:9e:81:fd:e9:2f:
97:4b:d6:84:b3:7f:7d:38:cb:6b:e6:c2:db:d8:a6:
15:9c:af:c5:8c:63:a9:8a:d9:e4:d3:be:c0:58:7b:
32:5c:b1:f3:6d:4f:c9:62:d1:38:48:d0:9a:39:ea:
ce:e0:ea:07:df:53:05:55:43:b5:81:4b:0a:80:c4:
72:34:be:5a:27:bb:e6:b2:7b:35:3a:de:6c:99:dc:
50:b8:dc:5f:27:bf:6c:40:28:d7:7d:8c:87:0b:79:
ba:a9:07:ee:bb:a0:f5:93:db:28:e1:38:4d:30:39:
1d:68:f1:ca:8d:72:8d:b7:28:c2:0f:84:a3:b4:1e:
2e:74:be:29:eb:8c:b1:5b:17:d8:b1:9e:b4:28:0c:
6a:f0:fc:5f:70:69:13:28:3a:b0:e2:7d:98:1a:08:
f8:9f:24:98:20:57:3e:b4:3e:f0:e1:83:59:3a:b3:
06:ac:f2:be:15:9f:ce:96:8e:bb:4a:c0:3a:3d:3e:
19:c9:64:ea:40:48:df:48:70:66:7b:42:6a:69:a8:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:A2:07:0A:D6:A9:BD:8B:88:66:E6:AB:B7:E3:E3:66:16:75:4E
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:a2:6f:67:f7:b7:ae:b5:45:f9:77:49:b8:b4:6c:e1:74:
50:99:b7:15:44:91:65:47:3d:9c:b4:d1:b2:16:da:34:02:5e:
07:08:71:b8:07:48:7b:ac:59:b2:56:d9:5b:65:83:c6:6e:53:
cd:ba:9d:e3:17:f3:7a:01:32:6e:f3:d9:70:ed:b7:13:3c:b8:
a2:29:93:f5:54:b4:48:c7:fe:38:85:b3:25:4d:a7:b5:6c:58:
02:d5:70:58:71:a1:a7:98:3c:f8:65:42:f8:3e:16:26:e7:7d:
5e:36:e9:ea:3e:b3:35:7c:ca:72:5b:e3:27:ed:71:9f:be:8d:
68:4d:45:8c:0e:a2:cc:eb:cb:07:b7:15:e8:92:55:79:8d:41:
68:57:1b:05:f8:a0:64:64:7e:9a:fe:26:c0:bf:21:34:7b:29:
99:07:58:2a:2f:ec:7f:5c:67:e2:73:2e:56:9d:78:7b:c1:2f:
52:aa:97:84:03:a2:27:1b:f6:be:92:f7:d0:26:a4:6c:df:ae:
ac:ba:ce:f1:17:97:f2:2c:57:0a:7b:ee:4e:b2:24:6a:78:f6:
b8:63:e3:e9:8e:6c:18:87:d3:be:5c:3f:5c:20:0e:af:71:18:
21:c3:59:52:d0:20:1b:85:f3:21:db:e7:2e:5b:7f:5b:85:b8:
20:3a:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:00 2025 by rpki-client on console-fra.rpki-client.org