Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: 57alF5FgUMS+1MBLHEq8LnGtLBHalH7KACltmGFO9ek=
Subject key identifier: 14:B4:72:49:92:3F:2B:56:E6:C9:C4:76:A5:B3:FF:30:31:02:6F:A7
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 0194BBCE4400C9058AE3F14C5BD514CA70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 0E5C
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: kvJhh5sJp+TNJIvZ4CnQ72OwQAQdKSWLmTexua7Odls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:00:c9:05:8a:e3:f1:4c:5b:d5:14:ca:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=14b47249923f2b56e6c9c476a5b3ff3031026fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:3e:d2:e3:2b:3d:ae:be:d1:eb:2e:f9:b7:
2c:e6:fc:4b:68:0b:6f:67:e0:af:b9:64:a9:93:3a:
c5:b7:43:c9:25:10:40:4c:2f:ea:09:09:36:e2:9b:
04:a7:b7:5a:6c:f0:54:29:52:2e:99:9a:14:08:17:
ea:75:9f:93:1e:71:2b:04:7c:93:60:6e:32:1d:c8:
06:a6:30:4a:d8:48:f6:65:85:17:ce:20:00:2c:d2:
e2:88:21:fa:bf:9e:26:a1:92:b1:df:ca:72:2b:0d:
c6:ef:b9:5e:28:52:11:f2:6a:67:de:29:24:52:41:
7d:70:2c:05:0d:9e:92:79:ed:09:97:5d:c0:67:09:
43:f0:95:44:e3:08:9a:b6:d1:f2:02:bd:a1:13:67:
fc:3f:d1:28:82:ca:7e:38:d8:3b:41:ad:4d:73:3a:
8b:74:72:61:49:6c:18:8e:2d:a3:6d:7f:4d:b9:a6:
b3:24:08:09:8e:17:52:a4:bf:f6:73:5e:22:c6:db:
a2:ca:3f:fa:c7:74:3a:6f:9b:1f:a2:8c:26:ff:d5:
29:10:16:69:1d:60:13:d1:40:65:d0:0a:39:e9:6a:
f4:f6:0e:cc:bb:b5:20:58:16:f6:ae:86:5d:f9:24:
14:68:67:0d:c5:7e:cd:a7:03:71:b4:06:9b:d1:06:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:72:49:92:3F:2B:56:E6:C9:C4:76:A5:B3:FF:30:31:02:6F:A7
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:d9:c3:b9:cd:41:d1:e1:d2:51:46:e6:29:88:6b:e6:7c:
5e:e1:ea:3b:27:b9:63:c9:5d:cb:45:2a:5d:9e:c2:31:a7:a7:
4e:2e:7c:a4:72:9c:2e:2f:c6:80:d2:ce:d5:62:70:17:0d:62:
1e:1c:00:55:fc:29:c1:5e:8f:71:b7:2c:09:01:a1:47:01:e2:
9c:7b:e4:38:e1:10:4b:d2:84:74:27:12:e9:5b:65:ed:84:43:
21:b9:ad:8d:fb:83:fe:1d:36:d4:1e:a3:81:a0:46:f3:97:c6:
83:3d:58:83:8a:77:fa:8b:90:cf:bf:a8:6f:35:51:82:ff:f3:
8c:03:a2:49:f2:e5:6e:1c:46:c9:08:58:d5:83:76:c6:81:05:
81:16:10:d6:a6:aa:e3:66:80:d4:0f:a2:fd:d1:09:bd:c0:3f:
e9:6c:02:74:ea:06:d5:d3:40:2f:2c:e7:57:fe:a0:da:59:b5:
ba:8e:70:de:e2:e8:7d:36:9e:65:f5:56:de:a9:ad:0f:fe:01:
6c:2f:43:27:4b:ed:63:c7:dd:42:06:85:27:20:bb:d0:3f:41:
2d:42:37:5a:6d:e8:9b:42:d6:94:18:91:b7:fe:a7:06:d1:46:
da:f3:20:8f:ac:af:be:aa:78:67:d2:97:01:1c:aa:d0:39:ea:
13:83:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:04 2025 by rpki-client on console-fra.rpki-client.org