Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: lshO1SAA/TgJ1YJVuv+nhrbNwwcWFpMJTsIBv/yOn0U=
Subject key identifier: DF:E7:B9:33:F6:90:ED:F8:69:4E:D0:6D:72:A2:88:54:8D:BB:66:09
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 0194BB2999015D314903D5F249A953263AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0878
Signing time: Fri 31 Jan 2025 07:00:52 +0000
Manifest this update: Fri 31 Jan 2025 07:00:52 +0000
Manifest next update: Sat 01 Feb 2025 07:00:52 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: kxL8q7hB5MO7ztJGUo7g/oK7+p3Aw6wQFLzOi2jv3f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:99:01:5d:31:49:03:d5:f2:49:a9:53:26:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jan 31 07:00:52 2025 GMT
Not After : Feb 1 07:00:52 2025 GMT
Subject: CN=dfe7b933f690edf8694ed06d72a288548dbb6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:c5:ed:0f:a6:b2:84:71:8a:f2:98:37:6d:
fd:f3:22:4d:0f:12:36:5b:71:4b:0d:f1:83:cc:66:
74:f7:52:29:3a:72:a6:79:6a:01:bf:85:8c:c9:30:
25:8b:0b:26:05:59:a1:89:52:cb:be:66:e5:d2:a1:
05:96:e4:03:0e:8b:f7:29:7e:b9:f2:65:c4:54:5f:
5f:72:10:dd:b3:ec:e1:ba:20:16:03:65:7f:51:bc:
0b:5b:85:35:24:82:b8:c4:b3:f2:cf:81:de:91:29:
a9:10:1d:01:e2:db:65:23:d9:33:f5:0d:98:9f:b3:
6b:ea:e0:d8:cf:40:20:49:7a:10:6f:cb:d9:1d:a3:
1c:43:ad:fb:e2:6d:ac:df:b4:04:2a:ff:36:98:95:
d0:c0:df:c7:1e:36:b8:19:95:8a:eb:8e:57:5f:c2:
5f:47:a6:49:90:ca:f0:82:41:38:22:3e:96:47:7f:
ee:37:56:bd:43:d8:80:54:40:7c:42:29:bc:77:b2:
06:3d:34:3d:c0:c6:99:71:67:57:bf:2b:13:34:7e:
3e:bc:4d:71:f8:15:49:17:e6:70:46:7c:e8:a5:2d:
9e:5c:d6:92:48:fe:7c:61:f5:7d:23:25:8e:dd:ae:
bf:95:cb:b4:87:4d:3d:c7:e6:7c:47:f4:9f:f2:ed:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:B9:33:F6:90:ED:F8:69:4E:D0:6D:72:A2:88:54:8D:BB:66:09
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:ee:f5:77:6d:b0:3f:af:18:67:b8:7f:cc:07:c2:04:e8:
ce:2f:65:9d:7a:76:c8:e5:ac:4f:a0:16:53:b7:a6:d0:21:a9:
27:80:cc:28:39:b7:ca:d7:6f:12:41:d3:01:b0:2d:47:39:ca:
4b:86:1c:4d:c3:77:78:4d:10:b3:b0:bf:5d:aa:3c:07:2a:dd:
ed:ce:71:a5:72:0e:a0:35:68:44:22:2a:f9:90:54:b4:f3:c2:
0e:f9:1c:e7:5f:59:39:d1:c1:ec:cb:77:e5:05:1e:d7:01:67:
7f:d3:2e:f6:1e:00:9d:d9:a0:f0:ff:85:71:51:2a:4b:fc:d8:
93:e9:00:b6:b7:8d:4b:dc:5c:70:3d:c3:9d:1f:88:62:6d:5c:
70:7f:88:d7:11:28:81:19:62:17:2e:6c:df:21:45:ee:2f:47:
9c:62:5a:34:7c:5d:1e:8c:be:93:94:27:d8:2e:62:ee:62:23:
0d:0d:fd:a5:56:26:eb:10:1f:d5:36:f9:64:04:c9:e7:ea:10:
32:f6:27:4c:61:de:f7:0b:2a:b7:55:98:80:2f:f7:dc:a4:62:
7b:88:fe:49:56:b5:b0:b9:bb:39:e0:de:7b:0d:5d:dc:00:7b:
c1:1d:77:44:f2:24:2d:62:58:90:47:ef:65:bd:3a:c9:01:7a:
de:0d:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:19 2025 by rpki-client on console-fra.rpki-client.org