Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: ylVs3uMZ5oHyslM2FlvOSJyRHbuP5Lnv4cg0yFFDK6s=
Subject key identifier: B5:A1:37:CB:D9:C8:FE:87:5E:02:EE:0F:BF:59:72:1C:41:21:02:4A
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0194BA843C6353FD6D0A78C6F8540CAC2048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:15 +0000
Manifest this update: Fri 31 Jan 2025 04:00:15 +0000
Manifest next update: Sat 01 Feb 2025 04:00:15 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: RZKa9tm3sTJLah41RaYN+7Enc35fgfhwXQgnbZRbsW8=)
2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:3c:63:53:fd:6d:0a:78:c6:f8:54:0c:ac:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Jan 31 04:00:15 2025 GMT
Not After : Feb 1 04:00:15 2025 GMT
Subject: CN=b5a137cbd9c8fe875e02ee0fbf59721c4121024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:84:ee:97:77:2d:3f:00:6e:c3:7f:fb:9c:
61:02:5a:d2:0c:4e:59:34:c4:a7:41:47:7b:5e:4c:
38:4a:81:c8:09:78:02:0b:31:bf:8f:58:60:cc:75:
e0:2b:19:f4:af:e6:55:dd:09:ec:dd:0a:73:49:e5:
b2:5b:76:02:28:58:eb:a7:7b:b2:e3:f3:b7:29:ce:
10:ea:e1:99:a5:b1:7c:07:65:88:f5:ce:1e:d9:7d:
35:b0:77:1f:49:4b:89:ef:98:c6:2b:9e:e1:74:e4:
d5:59:5b:a5:22:4f:b2:b6:65:fb:69:82:10:bb:5c:
1f:b8:85:88:6c:02:f7:92:de:81:4d:18:32:95:8a:
3c:d8:bc:9c:45:ff:2f:bf:4b:a9:41:29:54:5d:7b:
b0:d9:f8:cc:cd:7e:10:08:ec:58:8e:7e:b6:b7:f1:
cc:de:f0:8d:f0:8d:f6:6c:d9:06:e6:16:01:03:6c:
d6:7a:aa:3d:09:c7:29:4e:6f:fc:2e:87:ca:42:fb:
e8:0b:82:c3:38:65:0a:42:f4:96:e6:1e:a9:c1:09:
5f:f7:05:8c:00:4c:da:19:90:ed:e0:ab:44:7f:ce:
53:fc:44:71:e8:31:56:b9:0d:a9:a8:9d:f0:ca:4c:
73:a9:58:4c:77:35:ce:62:b8:c3:e0:b7:db:4d:c5:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:37:CB:D9:C8:FE:87:5E:02:EE:0F:BF:59:72:1C:41:21:02:4A
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:76:6c:d5:10:d8:1f:8d:8d:ab:ca:96:e4:a0:7c:5a:88:df:
35:4c:c5:9a:16:9a:18:dd:e6:e7:e5:e8:f7:8c:af:11:40:4f:
1d:18:ab:66:4d:e8:fd:f8:67:ae:a2:e2:e1:f2:f0:ce:3b:cf:
bd:13:28:04:a5:62:67:43:3f:b2:10:b2:ad:1e:48:e1:20:e2:
3b:ac:4f:b5:af:e0:58:1e:b7:24:ae:67:27:25:1f:41:a3:ee:
bd:8e:78:46:af:d1:08:f9:bb:d8:95:10:77:17:d8:60:42:32:
99:2e:ec:f1:24:45:ad:43:eb:cb:ca:7e:d9:39:ec:31:b2:26:
57:1b:76:4b:53:36:6d:07:68:af:02:93:2a:e2:b9:00:86:ae:
01:79:fa:ea:c0:38:e5:65:d3:c7:c5:59:b9:c1:bc:e6:b0:28:
64:63:df:18:09:00:11:61:58:2a:f2:04:71:a5:58:b2:b9:07:
de:43:c3:4d:12:1f:ea:04:4a:1e:0a:b7:bc:db:e6:02:ae:ed:
a6:79:dd:48:6b:1b:76:a0:6a:1e:8b:be:50:72:d9:f2:5e:2e:
10:fa:00:c3:e2:42:3c:1b:6c:64:97:c4:6e:cd:21:5c:7e:19:
89:e6:d4:c4:c6:0f:ec:14:6a:19:4b:9e:f3:d1:4c:d5:8c:f2:
91:79:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:39 2025 by rpki-client on console-fra.rpki-client.org