Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: NLYzyCGB3YtWOUD+JNLCXWkBdR6Rmj1JvpC4t3Ep68o=
Subject key identifier: ED:4C:23:35:4F:2A:DE:7B:42:F8:88:67:4A:0E:2C:59:D2:16:83:F7
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0194BB97185B240F33AE8003E5668DB32FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 03A8
Signing time: Fri 31 Jan 2025 09:00:28 +0000
Manifest this update: Fri 31 Jan 2025 09:00:28 +0000
Manifest next update: Sat 01 Feb 2025 09:00:28 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: HOwN3DgBWpjpR1v26n9bJnh8kPfgplXnbFt/x6nMQG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:18:5b:24:0f:33:ae:80:03:e5:66:8d:b3:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Jan 31 09:00:28 2025 GMT
Not After : Feb 1 09:00:28 2025 GMT
Subject: CN=ed4c23354f2ade7b42f888674a0e2c59d21683f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:91:b6:f6:d5:69:b1:7f:01:55:bc:b3:3a:
4c:46:39:f6:fe:8c:5d:ff:5b:06:b8:08:ec:9e:68:
96:c3:8d:a2:62:9b:38:07:8e:ac:3d:c9:1a:00:77:
4a:ca:0c:50:9d:61:ea:63:2d:88:25:6e:86:66:5c:
2d:6c:21:1f:cf:39:de:2f:6e:86:ef:ad:d7:54:4b:
11:58:3e:2a:3c:4e:17:99:f5:d2:87:90:7d:5b:fe:
aa:8c:1d:ea:01:f5:f6:df:1e:24:a2:41:4c:6f:bb:
7b:bc:87:52:ea:ac:62:20:aa:f1:1e:1e:80:88:69:
cf:ec:1e:5d:bb:10:58:c9:ad:66:e7:3d:48:0a:44:
07:be:ae:21:f1:ff:a0:5f:1b:6c:61:0f:f2:1f:8d:
df:f8:68:bf:fc:46:84:97:ad:a8:09:62:6b:93:ea:
f7:d9:18:c0:25:28:57:8c:f7:ca:ef:2c:f8:fa:c1:
22:44:6d:c3:a7:5a:74:36:76:66:82:42:88:b6:4f:
8c:e5:ad:3a:32:69:7a:02:ac:c8:4b:5e:43:f9:13:
05:56:d2:7e:42:74:66:b0:f5:6c:21:2e:0b:3c:e1:
8c:19:55:d1:77:18:b2:31:4a:3c:b9:e4:27:82:42:
f4:6e:33:07:63:b2:3d:93:00:a2:c2:40:af:f8:91:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4C:23:35:4F:2A:DE:7B:42:F8:88:67:4A:0E:2C:59:D2:16:83:F7
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:b2:2c:f1:1d:83:7a:e1:8e:2c:12:8f:19:e7:9d:8b:b2:
84:48:fb:1f:3f:6b:e3:79:77:5d:55:5d:12:8f:77:38:b6:56:
26:4c:cd:da:eb:d3:fb:d6:1d:d8:8a:ea:6c:23:9d:a1:50:cf:
11:37:f2:77:58:83:ce:84:3a:87:1e:50:80:d5:48:f3:17:e0:
c2:c4:97:04:c0:56:54:bf:3d:42:47:ec:ae:38:4c:d4:f5:ff:
2a:79:c9:e0:b0:1c:55:f1:9e:db:f5:1e:cd:3a:a7:07:f5:18:
f1:fe:19:f7:1c:05:81:ad:8f:35:ae:3f:b3:4c:30:8e:3e:e8:
d0:27:13:47:59:f7:6c:e6:a2:6c:c7:0f:b2:57:ff:76:c0:2a:
4b:14:45:34:31:71:5b:5a:e2:5a:4a:dd:53:19:2b:ba:48:50:
7b:8d:f9:69:bc:e2:6d:0d:a0:f6:6a:5c:18:be:d6:b7:22:99:
e0:78:c2:93:a5:16:fb:36:a4:e9:13:56:6d:38:30:44:73:1e:
23:25:9a:4f:b1:6d:0b:82:70:5d:05:c2:78:bb:66:04:28:a9:
a0:0a:9b:85:4f:af:fa:7b:5e:99:09:b2:2a:17:3d:cf:6a:ff:
4d:a9:87:7c:26:48:b3:e3:68:ab:80:bb:59:6b:20:71:89:5c:
64:5f:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:04 2025 by rpki-client on console-fra.rpki-client.org