Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: aPW2BBy/W7eJ+uuJh4298M6JdSZ8GO9Dzg1L4aF3XTE=
Subject key identifier: 20:12:92:AD:7C:1D:F2:99:13:6E:F4:A8:1E:D5:D5:34:88:15:E5:6C
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 0194BAF24CDF5FF4ADFE63C3D2E0A4303E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 0509
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: dnL0AhkBz2fIlysp8sJyZrZadIAIqtOHRluRFYIiozw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4c:df:5f:f4:ad:fe:63:c3:d2:e0:a4:30:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=201292ad7c1df299136ef4a81ed5d5348815e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:13:03:57:aa:c3:9d:b0:02:d1:75:44:c0:
2d:cc:ec:c6:2b:d2:67:d5:59:31:d3:59:02:0e:b8:
65:a0:0b:ea:2c:20:e8:fd:5b:d4:e4:51:3e:78:c6:
93:1f:c2:8c:32:60:47:80:78:e8:29:be:11:a0:2c:
61:9f:13:54:c6:b3:7b:57:7e:d7:21:62:88:a2:44:
5f:9c:82:f0:d6:bd:a2:50:a4:59:ba:73:a1:f2:15:
0e:91:d9:7d:9d:78:f6:ef:ae:84:21:47:76:2f:ee:
72:8d:64:1c:e4:2e:da:56:23:1e:3c:d4:00:e1:25:
5f:bd:c8:47:00:61:1a:bf:09:37:33:ec:cb:8d:eb:
1b:f2:d2:bd:84:53:67:21:fa:79:2b:94:95:74:3e:
44:27:cd:09:e4:db:32:67:da:b2:f3:f3:da:6d:ff:
bc:05:b6:d5:1b:3d:4a:26:0f:e2:14:d4:a1:c6:b2:
74:97:b0:e6:ce:e2:0a:80:7c:5a:41:e1:38:18:cf:
5b:4e:ca:1b:04:1b:89:35:ea:38:d6:60:4b:58:04:
b2:32:32:4e:5e:6b:0e:b6:72:48:9e:44:5d:6f:5f:
d2:03:f6:eb:df:ee:f4:38:0b:39:20:16:e4:c7:7f:
e3:78:40:ea:bb:21:6b:13:f6:44:5b:61:da:22:de:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:92:AD:7C:1D:F2:99:13:6E:F4:A8:1E:D5:D5:34:88:15:E5:6C
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:72:89:68:a1:aa:0c:8f:27:74:e3:fc:38:48:55:45:4a:d1:
55:0d:72:4c:92:2b:bc:ee:d7:07:74:69:e5:6f:3f:c8:c3:c1:
2e:99:0b:21:0b:d0:46:33:aa:ef:e9:32:d6:53:68:6e:b1:4c:
30:b2:df:9a:80:f6:13:79:fd:4b:f4:47:3b:6f:23:1f:01:65:
45:2c:c8:11:44:5c:b5:cd:26:c6:ef:52:91:5b:f1:65:9a:ea:
c7:c6:38:09:30:19:7f:11:04:e8:86:5e:c3:b8:36:24:53:44:
f8:1d:e0:15:76:0d:a6:75:b0:08:fb:83:3e:eb:55:97:b3:f6:
d0:c5:c2:36:2b:8b:d7:e4:80:11:10:a6:93:68:03:50:31:b5:
7f:f4:d5:bb:c8:48:f3:7b:8b:c6:0d:a2:22:f2:0e:02:59:04:
18:91:90:94:77:01:3e:5f:f4:ea:8a:68:75:7e:7a:86:92:83:
22:60:91:a9:ca:9f:e0:96:c3:c0:a5:14:d0:23:6a:54:af:16:
99:40:d3:7f:f0:2c:7d:67:6b:f2:5e:8e:44:9f:b1:76:ae:ca:
47:21:57:9c:35:b2:ad:71:5a:ad:53:44:f5:30:3b:ae:53:27:
b3:05:ca:1d:a2:e9:bc:6d:23:1c:aa:46:07:cc:3f:1a:76:bc:
4a:86:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:05 2025 by rpki-client on console-fra.rpki-client.org