Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: YeFqHLYYBwLorbr2YhlipCpuvxWx6j8jR77mwTPZEys=
Subject key identifier: EA:03:4A:A6:17:EA:94:5F:C4:79:AF:F9:A6:9A:27:60:FC:2F:59:DD
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 0194BABB77337ED2358645288907B8970F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 1337
Signing time: Fri 31 Jan 2025 05:00:35 +0000
Manifest this update: Fri 31 Jan 2025 05:00:35 +0000
Manifest next update: Sat 01 Feb 2025 05:00:35 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: 5seVfeBkvhumoXk47G09Y+8jbX5ziQBIHWah9B4JG7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:77:33:7e:d2:35:86:45:28:89:07:b8:97:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Jan 31 05:00:35 2025 GMT
Not After : Feb 1 05:00:35 2025 GMT
Subject: CN=ea034aa617ea945fc479aff9a69a2760fc2f59dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:42:cd:5a:7f:fa:23:6b:5c:7d:91:3c:90:
29:ff:3f:f1:af:b4:4b:61:d0:4c:81:2a:35:2d:1d:
11:1e:2d:18:63:e1:c9:20:2a:ef:eb:05:e7:44:8b:
1c:e5:b5:22:30:b5:28:5d:b9:46:a5:87:b4:5d:e5:
d1:07:2b:a1:2f:73:fc:17:0f:be:fb:5a:46:8d:83:
0d:11:0a:de:50:46:65:91:9e:9e:13:25:5f:80:e5:
0f:88:4d:52:19:ce:d9:09:97:51:ab:7e:b0:a7:61:
9f:c8:fb:a9:af:b0:f4:81:0e:10:05:e8:6f:40:e1:
31:7c:94:bb:fa:3b:f2:ea:8c:b4:1a:8e:90:be:90:
bd:d9:fb:4e:de:fc:8b:2f:b6:03:80:a5:9f:15:41:
25:50:bc:fb:a8:ab:c9:7a:3d:df:1c:22:14:49:07:
a4:9c:1f:1e:96:dc:a0:b3:1a:f2:0c:bb:bb:6d:23:
eb:d8:12:be:11:50:54:37:00:00:73:4c:52:2d:c4:
6a:ac:61:3d:16:e1:f1:fc:71:30:7b:00:e8:1a:d5:
a3:ad:33:8d:bd:3b:56:e7:09:44:2c:ea:19:8b:b6:
c5:c1:cb:c9:ea:ff:04:c7:7e:3d:d4:32:d4:5f:f8:
46:50:b5:a1:80:8e:dd:52:ec:45:7d:07:f8:aa:93:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:4A:A6:17:EA:94:5F:C4:79:AF:F9:A6:9A:27:60:FC:2F:59:DD
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d9:18:1f:60:e0:61:d6:fe:a2:52:dc:ad:f7:6f:3f:a3:28:
62:08:15:da:39:9f:87:12:b4:84:4d:4f:46:f4:a5:a8:58:4e:
50:db:81:2d:53:9c:3f:db:6b:09:1f:2b:70:a5:57:d6:94:04:
43:e4:56:d9:ae:dd:f8:f1:7e:7b:f9:78:ac:2d:68:eb:6d:32:
40:44:a2:b6:56:cb:c1:c4:6f:ce:04:8b:47:0c:77:69:a4:ac:
7e:05:b2:22:fd:8b:1c:63:ee:7c:ee:b4:98:17:b8:ad:d5:e9:
99:69:8f:ab:e9:45:27:0c:c5:8e:9c:cc:8c:a0:6a:c2:63:24:
62:18:b5:b4:58:42:6e:2d:c3:e6:ce:01:20:c9:8e:43:fb:99:
da:f1:37:5b:cd:7e:a9:3e:16:ad:b2:00:20:51:cd:ce:66:4f:
74:22:57:8c:6f:88:3c:0f:ee:b1:15:da:22:11:b3:46:57:d4:
3d:05:24:49:7d:c9:c1:f0:bf:89:3c:98:de:f2:0e:f8:5d:03:
86:32:f6:63:92:ee:92:ab:9f:be:52:48:11:1c:34:39:a7:80:
13:6e:67:df:d1:4a:c0:9d:03:01:ad:19:4a:8b:6f:99:1e:a3:
f9:97:ea:fc:d6:85:79:07:58:36:d2:a2:1b:c4:d0:99:cd:31:
42:a1:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:00 2025 by rpki-client on console-fra.rpki-client.org