Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: 7VELZ+FS/cWG3wV/cogbADN+8lDi02DTKbHrr7y0JHg=
Subject key identifier: B4:B3:4A:96:8A:53:89:7C:90:3E:62:C7:A2:B7:76:3F:6E:49:70:DD
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 0194BB290D04BFE2C2F2F89789DDBAB6923D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 0C9F
Signing time: Fri 31 Jan 2025 07:00:17 +0000
Manifest this update: Fri 31 Jan 2025 07:00:17 +0000
Manifest next update: Sat 01 Feb 2025 07:00:17 +0000
Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: 3H+rEcSFukgqu7PBAROb02P17X67rH6bTFYglaDHMxs=)
2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:0d:04:bf:e2:c2:f2:f8:97:89:dd:ba:b6:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Jan 31 07:00:17 2025 GMT
Not After : Feb 1 07:00:17 2025 GMT
Subject: CN=b4b34a968a53897c903e62c7a2b7763f6e4970dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:4c:ed:22:56:1e:ef:81:c9:b7:49:0e:95:
e5:80:91:23:63:94:50:53:cd:44:e7:b4:9f:f8:07:
07:bf:ff:39:e2:fc:9f:c8:83:58:72:bf:c4:35:b5:
14:ec:a1:d8:a7:02:9f:c5:80:6d:2a:d5:91:77:13:
f3:59:0a:54:3c:65:74:c8:4a:0b:6a:47:03:41:d4:
f6:12:f2:0e:59:5d:7d:3a:04:81:26:be:c6:8d:58:
4a:5a:47:61:7e:13:11:78:b0:4d:81:9b:ec:3b:dc:
25:e7:8e:9f:33:7b:5f:33:e2:54:b7:90:0c:b5:59:
77:25:32:92:8d:56:78:e4:c0:65:77:f1:a8:71:48:
5c:30:7c:eb:01:26:00:a8:f1:4f:bc:e9:78:a1:c9:
62:06:4b:4e:f9:67:a5:34:b3:79:74:09:30:30:0f:
2d:d9:1b:3d:92:13:1b:a0:57:8f:59:43:af:d4:4e:
51:ff:fc:59:33:ad:d1:33:2e:dc:5a:c3:39:38:97:
c7:96:86:f8:4d:2f:66:1b:c8:db:bf:ed:84:9f:10:
64:53:15:63:85:d6:56:cb:02:a6:ec:7a:e5:14:6c:
05:63:46:2e:83:e7:b2:5f:5d:5e:16:4b:6b:8c:ca:
ab:46:f4:1f:2e:2b:1b:b8:42:13:25:78:78:bb:81:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:4A:96:8A:53:89:7C:90:3E:62:C7:A2:B7:76:3F:6E:49:70:DD
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:f4:e0:9f:ba:fb:37:2f:78:80:47:d7:6a:31:ce:04:63:
3b:02:51:ed:9d:3e:b8:a9:af:d4:03:9b:c4:d0:f1:1d:f3:d0:
2f:80:81:96:6c:07:8b:27:9e:e3:c1:32:be:09:9d:de:41:b1:
4b:da:0b:fd:e6:9f:90:6e:80:1d:35:2e:d1:e3:fe:eb:cc:04:
cf:51:bf:7d:73:9b:c3:93:f1:c6:78:fd:68:1a:b4:a9:48:12:
ea:81:d0:3c:1c:08:68:f7:26:de:05:ae:f7:92:d4:6f:3d:11:
55:f5:77:86:26:11:b3:17:e6:5c:1e:66:ed:d1:4c:5a:0a:a6:
f0:68:53:dc:f4:b1:7d:37:27:3f:b4:03:69:0a:12:8f:65:88:
04:44:28:26:89:24:21:8e:24:01:f6:fd:68:27:c8:b4:08:37:
d4:a7:0e:cc:0b:d2:de:72:61:67:9e:b3:ae:1b:04:4e:8a:42:
ab:c4:0c:bd:f8:b7:65:b1:50:d5:af:cd:3b:0a:09:09:c9:a9:
c1:aa:8a:be:60:31:4c:d9:cc:37:ff:3d:d4:e7:9a:17:c1:0f:
53:d5:88:c9:53:fd:90:b4:ee:aa:26:2c:bb:27:d0:2d:e4:7d:
3b:99:88:02:6e:e1:13:42:86:7f:f2:35:33:e4:aa:bc:7a:68:
1f:14:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:22 2025 by rpki-client on console-fra.rpki-client.org