Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
File: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft (raw, json)
Hash identifier: khNkmGPmAlBwogMgnciwc0l5akKAvHyt8VgU+LwQM/w=
Subject key identifier: A4:90:AA:50:DB:32:30:19:52:4D:B4:0F:4B:D4:18:3A:30:4B:43:90
Authority key identifier: 4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
Certificate issuer: /CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Certificate serial: 0194BBCDC8B9BF7B7BB9E20C58F336AE5594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
Manifest number: 059A
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl (hash: XU7/K+AGCpgyxVmeCCD4lb8nYZqIdc5KS+wagdr0Gqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:b9:bf:7b:7b:b9:e2:0c:58:f3:36:ae:55:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=a490aa50db323019524db40f4bd4183a304b4390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:3f:63:6a:93:0b:15:b6:cc:15:fd:97:67:
33:e4:d7:a0:97:18:02:12:2b:d4:a4:93:c2:22:15:
b6:1e:b2:9f:37:8f:1d:0d:72:a0:8a:f1:97:9e:fd:
02:cf:67:65:74:88:86:07:97:ab:c8:dd:f7:e5:47:
aa:16:e9:2a:f1:ba:af:8c:2e:e1:55:be:f5:e4:25:
68:80:72:f5:b5:89:73:df:c0:18:e4:8d:a7:50:12:
38:ef:50:30:58:5e:4e:58:63:28:fd:4e:e0:73:67:
dc:57:94:07:3c:5f:6d:3c:8a:76:03:c3:42:35:34:
7f:5f:c2:21:22:91:f2:0c:6d:89:89:91:96:8f:ec:
e0:bf:61:c2:3b:88:c3:b9:00:5b:47:54:a5:2b:ed:
46:f7:45:52:fe:2b:62:8a:dc:e7:7e:84:28:55:f1:
87:21:db:75:7e:52:3b:31:40:91:c3:71:6a:06:60:
f7:37:a1:b7:02:d3:35:6e:f6:b5:05:d9:8e:67:8b:
16:c3:5e:1d:6b:e6:62:33:93:d0:77:66:83:c7:16:
ee:94:b9:93:6d:9c:54:e9:0d:26:0f:89:08:4d:06:
a6:75:8c:29:db:e9:e0:a4:8e:91:97:a4:5f:3f:06:
6a:a3:a5:05:0f:37:6c:2d:72:f9:22:e0:26:15:ae:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:AA:50:DB:32:30:19:52:4D:B4:0F:4B:D4:18:3A:30:4B:43:90
X509v3 Authority Key Identifier:
keyid:4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:02:aa:d3:4d:65:76:af:3e:62:74:a3:36:bc:b0:27:a4:
ca:eb:8b:3a:fa:14:3e:b6:a5:f4:24:d0:b1:c9:db:10:1d:27:
73:96:46:8b:20:01:57:0f:4a:4c:1e:57:dc:bf:b1:b8:01:ad:
33:2a:bc:63:36:40:cd:28:46:1f:37:34:59:2c:ad:b8:b8:d8:
cd:cb:fd:c1:83:e8:10:ba:87:bd:8d:d9:82:20:99:48:62:05:
2a:c3:c1:42:e8:aa:b2:ba:c2:2f:ff:e3:10:6d:de:4a:4c:a2:
a5:17:51:89:0b:c5:b8:34:1b:d1:03:cf:98:90:a9:f9:08:07:
25:3e:70:dc:84:e8:0a:0e:58:b0:c2:24:7a:77:95:91:b6:e8:
04:15:cb:37:8d:1d:d3:59:3b:81:e1:51:ff:59:60:fc:5e:4a:
fd:b1:d4:cd:64:b1:40:cc:3e:6b:53:77:db:81:4b:5e:3c:a6:
67:0e:43:f5:d5:3b:63:d2:77:3a:c2:63:5b:9a:96:bf:f2:85:
ae:5f:ed:ad:30:3f:e1:4a:19:8e:60:7c:f1:8d:10:14:96:e0:
00:af:67:4b:3e:5e:41:c7:0d:38:65:b4:97:db:39:c2:58:17:
91:9e:c8:c8:64:3c:58:36:30:f8:94:bc:45:b9:bf:16:87:84:
83:e9:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:01 2025 by rpki-client on console-fra.rpki-client.org