Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: 7KoCU8RCY3Wzj0+n3+IgueXfKssWV2o3N5SCSxlp+bw=
Subject key identifier: AC:52:37:D0:7C:B2:38:D2:17:77:1D:B2:BA:00:02:04:95:39:53:F3
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 0194BABBC2419AE255138253D0DE269174F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:54 +0000
Manifest this update: Fri 31 Jan 2025 05:00:54 +0000
Manifest next update: Sat 01 Feb 2025 05:00:54 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: 4+6maFoDp9Q9olg9tXYQ+LOthqa7yBvN7YKo4En06HA=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c2:41:9a:e2:55:13:82:53:d0:de:26:91:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Jan 31 05:00:54 2025 GMT
Not After : Feb 1 05:00:54 2025 GMT
Subject: CN=ac5237d07cb238d217771db2ba000204953953f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:2a:1f:ce:18:3e:a2:0f:78:ae:8f:63:66:
ea:95:6c:06:f0:9b:04:c0:80:19:55:a1:ec:52:a6:
55:e0:9d:95:ab:b4:b3:52:22:81:e0:f0:6d:d1:f2:
29:2a:cc:fd:8c:b1:11:6c:0e:00:20:7c:f6:8d:5b:
27:7f:c7:66:46:b8:2f:6a:2a:22:e0:68:04:41:e4:
67:ed:31:cc:a9:b3:32:e7:8d:ca:19:da:c2:a4:89:
29:1a:90:e4:b1:ff:cc:36:b7:13:ee:a9:c0:79:63:
fd:12:f9:b2:78:e9:8b:8d:3f:ef:a6:bf:5f:3a:b4:
5b:94:65:3f:0a:d2:97:48:23:f8:58:e0:2d:b7:d7:
bc:ae:e8:72:75:e5:c2:cd:df:57:65:cb:96:3d:9e:
06:73:61:23:76:f3:51:cd:13:59:c1:50:ee:6a:2b:
8b:58:12:ef:ca:21:5d:a0:21:fb:c6:da:3a:b2:1c:
3e:d7:70:de:86:d1:fe:e9:40:1d:bd:44:b7:e0:8a:
4a:97:1f:92:50:e0:04:1b:b8:f5:c6:2a:01:97:0d:
e7:c1:51:a8:b0:58:6c:28:ed:1e:31:be:9d:20:dc:
44:f2:32:d1:9a:64:95:40:a4:ce:bf:ba:48:57:85:
19:74:ca:01:30:24:88:7c:e1:ae:bf:50:d9:ab:09:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:37:D0:7C:B2:38:D2:17:77:1D:B2:BA:00:02:04:95:39:53:F3
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:25:d2:26:ff:8b:d0:82:c2:60:b0:75:77:f9:61:f3:31:9c:
b0:29:60:76:0e:09:95:72:e3:d7:15:5d:c8:89:f0:bf:6c:09:
76:14:1a:d6:77:96:12:f6:57:03:2a:e6:43:53:8c:fd:31:5e:
5d:80:f7:b7:c8:46:13:f5:ae:5b:35:d9:4b:8c:3a:da:77:48:
85:47:4a:87:c3:68:23:88:98:dd:a6:e7:5d:d3:f6:09:94:3b:
2e:16:70:7a:9e:0f:17:aa:d3:35:97:4f:51:80:ee:72:7c:c0:
95:0f:cf:ef:79:e0:66:22:6b:91:69:7d:53:3e:fc:c5:50:6f:
5e:13:9b:22:f5:a3:99:e5:5e:ce:e4:28:b7:77:55:f8:3a:42:
e0:f3:8c:1d:13:2c:67:9e:6f:93:e1:0c:c4:4a:72:17:11:20:
8f:d7:9a:be:2f:55:78:23:46:d4:a4:a1:84:af:c8:81:e4:ee:
04:6e:f9:e8:9c:03:61:13:93:6e:6b:90:6e:d9:a5:90:b1:43:
55:6e:48:26:cc:3e:43:48:a1:10:43:4d:9d:85:a4:14:a4:a1:
1f:02:81:1d:44:d8:39:4a:9a:0d:c8:d7:00:ec:f5:ec:0b:d1:
09:e6:d3:3f:a9:54:d9:96:04:68:0f:df:72:0f:41:16:af:96:
cb:eb:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:00 2025 by rpki-client on console-fra.rpki-client.org