Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
File: tKW-MwcSDmXjxBZcnI50jBwSp6I.mft (raw, json)
Hash identifier: 7qW4aN6NgZCGTCeIOmNpKSywvZd6D3N5Y25PxT61eGc=
Subject key identifier: B3:B7:A3:03:91:D1:DC:DF:81:65:AA:E0:23:8A:62:3F:F2:D0:8A:FA
Authority key identifier: B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
Certificate issuer: /CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Certificate serial: 0194BB971E41CDD33CB54F6D9D47CC6A8BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
Manifest number: 037A
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: pHJ5oRo1kF5oiX8KeKirS42gdJI.roa (hash: pWmX7zoUYI3ChoG1HELYfAkOPLPYyR79PMNSLK6H1B0=)
2: tKW-MwcSDmXjxBZcnI50jBwSp6I.crl (hash: bS4uiBb1Ednfd/u/I2G1iewXdhC3sswq2HlbTTO/LFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1e:41:cd:d3:3c:b5:4f:6d:9d:47:cc:6a:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=b3b7a30391d1dcdf8165aae0238a623ff2d08afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:cb:28:1a:7d:0b:d1:bb:f7:b5:4d:5a:b6:
f8:a2:28:a7:08:b9:1a:95:55:28:e0:2e:ef:5d:03:
0d:97:32:cf:ec:b9:a7:85:cd:64:19:21:ed:fe:50:
bf:7a:4e:51:17:69:e0:a1:7f:fe:cf:62:f5:28:ca:
b7:c0:c0:55:f9:9a:48:7e:8a:f9:be:93:f5:bd:bc:
5d:7b:56:a1:6f:8d:67:24:ff:0d:d3:fd:94:49:10:
28:eb:65:12:68:ed:92:03:e4:17:75:2d:e2:0d:77:
6a:15:71:97:41:09:e3:92:4a:88:d1:1d:8b:31:f2:
4e:12:30:1f:1e:43:6b:26:08:54:49:a7:83:d1:e7:
cb:8d:17:aa:68:93:7c:f0:7a:59:59:db:50:68:e7:
04:65:40:c5:73:05:93:6a:20:fb:28:7a:b7:4c:a2:
79:dd:cb:f8:83:ed:d7:2e:60:1f:52:7f:83:ff:ae:
8f:3e:55:d8:46:c0:fe:6b:e8:59:c1:e5:08:bd:02:
9c:0f:38:4e:f1:20:da:6c:f4:1b:88:53:5d:d0:31:
00:8f:fd:4f:e3:6b:40:b1:2f:71:ef:e2:89:42:ec:
9c:c5:cc:e6:50:ae:bc:fd:98:12:02:4f:5b:86:3f:
31:45:8b:db:c9:18:de:c5:c4:ef:ab:85:7c:67:13:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:A3:03:91:D1:DC:DF:81:65:AA:E0:23:8A:62:3F:F2:D0:8A:FA
X509v3 Authority Key Identifier:
keyid:B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a8:2d:2e:9f:0b:27:8f:8b:5c:f6:62:e3:42:e6:43:6d:6f:
03:38:be:09:e7:6a:82:f0:be:c4:9e:4a:e4:25:01:5b:81:89:
47:b5:87:91:5f:4b:39:65:fb:a0:64:ae:3d:b1:70:a7:e3:12:
d6:2c:be:17:c7:9e:1e:a1:d6:65:51:21:94:1c:be:f6:a6:4a:
43:23:66:98:98:a0:d1:cf:41:e6:0e:80:cf:41:30:27:da:51:
1e:92:d9:43:c4:aa:bc:04:68:b7:b8:16:6b:04:e1:4c:0d:e6:
3b:64:09:8e:af:f3:81:f6:80:5e:11:48:c0:99:39:97:72:fa:
af:d3:86:d9:14:6a:e8:b7:47:85:bd:75:fa:f7:0f:de:fe:b1:
a5:af:e7:9f:5b:81:58:4a:64:9b:6f:e5:ea:10:c6:6c:a2:ef:
86:cc:3a:a4:0b:29:82:c9:00:91:6c:e6:e0:f3:e4:4d:da:47:
bc:71:19:6f:45:6e:ef:34:d8:23:ca:3d:90:4c:90:55:98:e8:
44:6e:fd:6d:29:3f:9b:c7:b1:08:c5:b9:e8:25:4c:67:63:6b:
6a:4b:33:e4:12:d7:44:8e:39:30:d8:93:6e:b4:70:1d:1e:d2:
b8:b8:14:e7:2b:52:d7:10:0e:39:57:21:4c:52:9e:07:88:b8:
d7:4c:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:30 2025 by rpki-client on console-fra.rpki-client.org