Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: KCmHkE6PC+7L4Ykgoaw5ikDdXXWj/mofgrqZ3Iz9Fk4=
Subject key identifier: 3C:E9:22:AB:4A:EA:CD:5B:33:28:6E:C8:D9:1C:6C:58:56:F2:7A:F7
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 0194BAF21AE1D51049675DA14FC8BD408C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 06:00:16 +0000
Manifest this update: Fri 31 Jan 2025 06:00:16 +0000
Manifest next update: Sat 01 Feb 2025 06:00:16 +0000
Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: JojBSPEptcMVBbFuZcGMGm9CyBTFsH+vqfQBSf8GcUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:1a:e1:d5:10:49:67:5d:a1:4f:c8:bd:40:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Jan 31 06:00:16 2025 GMT
Not After : Feb 1 06:00:16 2025 GMT
Subject: CN=3ce922ab4aeacd5b33286ec8d91c6c5856f27af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:7a:0b:59:b6:03:41:ce:31:92:6c:46:0e:
c1:7f:ba:d5:60:b3:31:b0:82:1c:e8:3f:81:df:14:
3d:24:c0:bb:89:c8:5f:7c:91:46:96:be:bd:0e:af:
57:c0:40:35:36:d6:01:7f:26:9a:71:95:c1:00:4e:
da:40:0d:5d:95:83:e8:b9:5a:75:5c:1a:c6:38:18:
1a:b4:3d:33:25:fc:46:06:1c:a7:95:87:3a:f9:e1:
13:16:77:cb:a7:74:e6:87:2d:5a:8e:94:a7:65:1b:
fa:9b:77:4d:1f:07:3b:fd:55:97:51:9f:fd:bb:24:
2d:92:f9:00:2c:fb:25:ab:00:50:4c:fd:79:85:a5:
6e:ff:34:37:89:97:d6:ce:87:e8:51:fb:71:8d:84:
3a:5e:dd:ac:09:95:5b:ef:b4:fc:d4:62:59:95:5d:
fb:db:8b:d7:f6:1c:0c:e7:86:24:41:16:7a:48:20:
db:b9:74:59:d6:f6:88:5e:97:5d:72:64:6b:fc:2c:
d5:9f:4b:6b:a0:46:14:7f:26:d0:17:b7:58:bd:f5:
5b:f9:12:9b:7d:cf:9c:8f:b2:e0:3a:a9:81:a1:19:
fb:10:81:82:c8:c1:dd:eb:34:8f:6a:32:a3:e4:01:
84:bc:da:c8:fa:90:f0:2d:cf:2c:68:1f:ff:28:f7:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:22:AB:4A:EA:CD:5B:33:28:6E:C8:D9:1C:6C:58:56:F2:7A:F7
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e2:b2:a2:ff:17:2d:e5:63:df:27:03:fa:17:c4:37:10:f6:
79:25:1d:82:d2:35:44:ab:14:c2:ed:33:9c:9b:ef:75:48:a2:
75:ef:a0:5e:8f:37:b6:6b:36:74:6b:20:49:4a:06:46:30:2c:
ee:7a:e4:31:9f:19:9c:fb:0a:2f:9e:28:44:b2:58:41:5b:c3:
38:76:47:43:af:da:84:b2:9c:8d:2a:d4:a9:fa:f2:1b:9e:5b:
7d:cc:c9:ac:1e:d0:e2:45:07:94:2e:b8:c5:e6:3b:a1:a6:c6:
7f:4c:0f:6d:7a:ef:7d:50:5a:2f:b6:fc:5c:74:8e:2f:e6:58:
49:dc:3b:2d:9d:e8:a2:84:47:c2:38:90:7f:7f:0e:b6:c1:02:
04:f6:0d:53:81:17:19:ca:7f:fd:20:c3:bf:f9:6f:73:1f:d1:
fe:3f:32:82:f1:3d:3c:33:85:91:cc:90:64:10:fb:62:d8:3c:
db:4f:3d:f9:42:1c:0f:a0:0b:ef:be:e6:52:8e:00:af:c5:5a:
99:e4:a6:f9:c0:bd:4b:fb:31:aa:6f:4c:97:87:45:db:c3:f0:
c1:cc:c6:3f:41:70:0d:62:de:c2:da:22:7c:3c:a7:ed:30:f9:
43:12:ee:2d:ff:4d:52:2c:d1:a4:c9:3e:1b:07:b1:b5:65:e9:
ca:34:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:50 2025 by rpki-client on console-fra.rpki-client.org