Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: peWUVmpA+JnZrkqfb4UCV7b7a+ykCwZQPQjo2uoHFl0=
Subject key identifier: A0:95:B3:E4:72:7A:49:99:94:43:AD:05:54:88:14:86:98:12:F1:A9
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 0194BABB2E670C7133BE3CB08D84142592FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 0FEB
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: tRNOU52/GHi6lFK+s0+QcCUFU4ns45fZ6578wxWE4zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2e:67:0c:71:33:be:3c:b0:8d:84:14:25:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=a095b3e4727a49999443ad05548814869812f1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:bf:3a:e3:2f:16:cf:69:da:0f:10:b5:52:
3a:cf:03:01:66:09:64:8b:8e:86:29:3a:8d:8d:00:
6b:4a:e8:1b:12:30:cc:45:ab:41:af:6f:df:b8:2e:
05:f0:02:7b:79:cd:0d:67:b1:b8:cd:b2:d9:31:fe:
85:f0:36:6e:a4:f1:84:c2:a4:af:78:47:2a:80:1f:
59:6a:5a:d0:4e:29:c7:be:d8:3d:86:cc:4c:60:e7:
13:51:7e:aa:07:41:70:2f:a2:63:f3:a2:c2:f1:08:
8e:f5:88:2d:60:b4:f4:b7:3e:87:15:3d:eb:cb:3b:
9b:09:79:2b:ca:08:f9:a3:3d:62:98:7e:94:5d:91:
f4:35:2f:da:59:c6:8e:c5:69:4a:89:25:06:80:33:
20:49:f1:7a:69:1e:2d:4c:34:ce:81:27:39:74:09:
3b:d3:b2:07:c5:fc:a3:62:7e:8c:8e:3c:46:08:37:
15:c9:a3:c2:8e:72:cf:41:0a:25:eb:31:44:d4:94:
95:41:53:3a:a1:7c:e6:d2:0f:6e:51:79:26:a9:63:
76:99:4f:84:67:19:6b:6f:64:ad:61:50:62:fc:56:
53:d1:a5:63:27:c2:50:0f:72:b8:b2:90:b0:be:49:
0c:77:96:09:5e:5b:bc:02:f5:b1:92:b3:16:5b:a7:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:95:B3:E4:72:7A:49:99:94:43:AD:05:54:88:14:86:98:12:F1:A9
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:78:72:4f:4b:4c:5f:15:51:52:76:48:45:28:07:77:ad:21:
ee:b5:ea:23:0c:5f:17:7f:1d:02:9a:75:33:fa:62:55:69:11:
e6:52:a5:dd:5d:37:61:80:75:7f:e8:3f:10:15:f8:f4:09:e2:
dc:c6:15:3f:12:10:ec:7d:9f:53:be:d8:7e:ef:e3:5c:b9:bd:
fc:87:3a:21:27:be:cd:a9:5e:2e:c2:bc:01:1a:22:a2:20:2f:
d7:e2:f9:0f:b7:9b:fc:3c:3a:dc:28:ef:16:17:52:22:d7:f4:
a8:47:78:08:34:0e:f9:a3:6d:92:af:56:b6:49:fb:48:e9:47:
4a:e0:e9:d2:5e:ce:a5:ca:c3:1a:d8:c0:99:5d:9c:cd:cc:a0:
7c:f2:14:a8:d9:e8:46:27:6a:04:00:45:fc:bd:6f:bf:e5:28:
fd:91:87:d0:49:3a:ca:2d:76:07:70:9e:86:97:30:c2:ef:5a:
80:9e:5b:97:26:76:25:f6:6c:58:fc:6a:5d:07:85:77:c5:d4:
a6:d4:b1:89:d1:1c:6c:c1:79:b2:1b:57:12:d9:07:71:b9:3d:
dc:45:af:b3:87:26:6d:05:5b:f6:f2:06:d7:1a:48:05:53:5c:
ae:6c:00:c9:b8:e7:db:aa:31:f1:81:b6:1e:b1:4d:f5:27:84:
17:53:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:35 2025 by rpki-client on console-fra.rpki-client.org