Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: pEd0nzvGi/DZjHUWDEdxl3dbvzzqcxj0lT1PwbZdKKY=
Subject key identifier: B5:67:D5:58:48:B0:9D:93:04:27:0B:A7:79:C0:8A:C8:0C:DD:19:3D
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0194BB97466106C4A8D23EEF3EA57B115290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0AA3
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: 6WSIzhLxM5EHydQaVVfBeLfANT30AIzfwmmvaW4lQ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:46:61:06:c4:a8:d2:3e:ef:3e:a5:7b:11:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=b567d55848b09d9304270ba779c08ac80cdd193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:42:a0:df:f7:cc:a5:23:16:ad:24:34:4f:
b8:9a:4f:15:0b:62:97:43:a2:ec:c7:a9:fa:df:84:
f1:33:0a:e8:3d:bb:30:c3:54:30:a2:f4:da:3a:03:
e7:ae:3f:92:d4:f4:15:6a:e3:3a:2c:41:b2:36:51:
8e:8d:0a:f4:de:01:16:5e:e2:86:7b:3f:ae:ad:a6:
c5:a5:5e:84:2e:6e:e6:db:9b:72:50:85:cf:fe:b6:
91:fe:a3:8c:be:ff:c5:b2:ef:d0:04:a7:8d:b0:cd:
14:76:85:4d:9c:4e:25:69:b3:6c:a4:0f:52:67:17:
8e:8d:e2:4e:3f:39:20:fe:35:cb:1e:c4:ea:fc:6f:
0f:82:5d:11:9a:83:87:75:6d:a3:21:64:9f:62:59:
0c:fe:48:e9:67:eb:d4:54:4a:e5:8d:86:8d:c3:a2:
da:dc:9d:33:17:41:df:11:59:49:2d:33:3a:cc:64:
1b:18:c5:78:98:66:fa:46:49:12:d0:b2:14:8e:c8:
69:c4:0e:ea:49:3f:b9:da:df:6f:59:96:67:3a:b4:
f0:6b:3a:db:23:4f:86:3d:db:7b:a1:6d:ee:69:e4:
64:fb:b4:ab:12:4b:30:d7:d6:31:ff:3f:ea:bd:3f:
34:1b:3b:41:6d:4b:35:87:60:55:8e:f0:38:2f:02:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:D5:58:48:B0:9D:93:04:27:0B:A7:79:C0:8A:C8:0C:DD:19:3D
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:89:6e:9e:a4:f7:aa:27:8b:2b:a9:93:01:95:b7:ee:af:72:
86:ba:2d:a7:20:4a:a9:b0:92:6e:cc:90:5d:ca:93:29:95:23:
23:6a:0e:40:00:24:5f:ca:ed:63:2e:3f:36:1e:79:07:46:be:
35:6d:3a:67:08:58:8c:1d:9a:7c:8d:79:9b:f2:df:c6:ff:68:
34:ae:34:ab:99:c8:b8:0f:57:91:8b:c1:fa:76:1a:cf:9c:3c:
10:21:62:cb:f1:44:7f:0a:17:02:fd:67:bd:71:a2:57:78:cb:
02:f6:77:ed:be:80:29:a2:df:f6:ed:a7:27:44:bf:f2:9c:01:
2a:6f:ed:80:21:ec:8e:13:6e:87:1e:96:6c:d2:2a:e6:f1:1b:
55:6b:c9:b5:bc:6a:c1:f6:ae:a2:61:70:0b:ec:79:fe:63:53:
a7:e9:3e:44:85:bb:8c:2c:aa:31:d3:3f:dd:96:f6:9a:9b:df:
aa:e7:98:4e:ec:8e:f2:35:4b:d1:74:a2:d5:85:6c:a5:71:a6:
9c:49:76:02:1d:23:09:d3:c7:78:61:1b:d4:1e:08:d1:a0:ef:
3f:95:b0:92:d4:b8:0a:db:1c:ac:fe:67:76:5c:71:f9:54:7a:
bd:e8:8d:3d:b1:0a:97:8c:c9:72:fd:6d:4f:c9:bc:80:57:92:
93:81:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:29 2025 by rpki-client on console-fra.rpki-client.org