Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: McXnbmOVOyvuglqNpsv3OOoM+F77UwVbt6C741KqaQo=
Subject key identifier: F0:EE:60:B9:09:C8:9D:B2:19:DC:B9:B2:B3:28:57:05:77:EE:5B:AB
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0194BB2954ECC16606969C4081B73A641803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Sat 01 Feb 2025 07:00:35 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: BBoQHHpFDgWCrF8o0heXsnCw8ASMXGv6VPLcHsm3UNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:54:ec:c1:66:06:96:9c:40:81:b7:3a:64:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 1 07:00:35 2025 GMT
Subject: CN=f0ee60b909c89db219dcb9b2b328570577ee5bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:41:08:19:dd:c2:d4:31:6e:7a:ce:9c:aa:
85:a7:a3:08:14:7d:99:04:46:4f:05:a4:cc:2a:bd:
a6:31:5f:dd:b9:d7:81:c9:aa:c0:af:f9:d1:ed:fd:
c5:89:e0:5b:1b:81:27:a8:7e:0d:3b:85:7a:6a:71:
d3:eb:4d:e5:ab:0f:c6:1e:45:5c:14:97:3f:02:e9:
c1:a2:67:b8:21:5a:70:bc:49:1f:c1:f0:7d:a8:30:
ba:2f:58:76:a3:de:c8:dc:ba:b9:d1:1e:2e:95:25:
46:ee:93:78:fb:1e:f2:cc:a9:66:14:1b:07:88:82:
97:2d:9f:44:77:68:c5:1a:38:c6:8a:ae:fa:18:cd:
ab:31:fa:2e:11:34:45:08:53:e6:b1:0f:fe:ac:12:
10:e8:9f:be:46:0b:e8:3a:3f:8a:3c:35:4c:4e:29:
40:76:ec:72:7f:5a:71:4d:40:c4:8a:81:be:06:61:
6f:3e:8a:4e:fb:73:1f:7d:08:83:64:35:57:96:90:
3d:db:1d:28:ab:6c:a2:6d:85:9f:c3:1b:e4:e5:4c:
c6:40:85:6a:16:50:78:35:86:8d:13:a6:b3:66:6f:
aa:fe:3e:83:a3:d3:0a:01:ad:8d:d6:70:90:f7:c9:
4e:bd:05:f6:f6:fc:a0:49:fb:7c:b7:e0:b1:8c:23:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:60:B9:09:C8:9D:B2:19:DC:B9:B2:B3:28:57:05:77:EE:5B:AB
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:64:10:06:f1:0f:be:d0:20:9c:ea:78:5a:a8:99:2c:8b:48:
8a:31:b2:ff:c3:ea:ce:e1:3f:d9:19:77:0f:cc:4b:4d:c4:6c:
bd:86:b7:c5:02:f8:96:b0:02:df:09:5f:f3:a2:44:49:13:b7:
fb:11:75:da:92:77:ba:a5:57:3f:7f:0b:2e:5f:22:7f:91:63:
f8:3f:5f:8b:ed:ed:89:4b:56:ee:7c:14:a0:c7:29:1f:f4:09:
9b:69:e4:47:69:95:c9:89:38:b2:98:49:5e:0d:59:78:2a:3b:
8d:68:3f:d0:01:25:72:b8:b9:ad:67:42:b9:dc:e8:85:c6:51:
69:f2:8a:42:7d:92:de:6f:25:19:87:6d:27:9b:0b:88:a3:72:
65:37:3f:d5:c5:9a:09:33:df:34:ea:12:46:8e:bd:0c:12:28:
58:ea:12:04:9d:a9:cf:8c:d7:2e:1f:69:c6:46:72:69:cb:f1:
26:a7:3f:b8:e8:f4:27:68:87:b6:06:6f:3c:2c:61:83:6e:57:
05:d6:fa:84:f8:c1:09:81:dd:d4:e2:e3:8c:7f:d1:0f:47:8f:
72:47:86:e3:38:f3:96:e1:a5:00:cf:66:b3:76:f3:3f:7e:63:
03:e3:ec:6c:c8:b7:e3:e8:78:f5:d3:b8:8d:c3:0d:1e:ab:c8:
56:ff:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:01 2025 by rpki-client on console-fra.rpki-client.org