Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: UQ5/aRczBKVk/VFrca59VU/xUGpVKMSK0gHxzqyvVr0=
Subject key identifier: 19:53:29:84:0B:C8:67:4B:C7:27:21:E8:E7:93:58:04:9D:5E:3A:39
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0194BA842726B7E716A3BA9F1EA9A3483E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 05ED
Signing time: Fri 31 Jan 2025 04:00:10 +0000
Manifest this update: Fri 31 Jan 2025 04:00:10 +0000
Manifest next update: Sat 01 Feb 2025 04:00:10 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: aLVn0ozLyfHWyLOzVaQeNenlpMSQffFxq5XQGUAqM7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:27:26:b7:e7:16:a3:ba:9f:1e:a9:a3:48:3e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jan 31 04:00:10 2025 GMT
Not After : Feb 1 04:00:10 2025 GMT
Subject: CN=195329840bc8674bc72721e8e79358049d5e3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:21:f6:a0:02:74:c6:9d:a6:cb:bf:ad:6a:
5c:bb:02:d8:30:43:bc:6e:1e:11:89:ce:b1:86:6d:
dd:ed:7f:3e:bd:84:c8:66:7b:ca:55:7d:5e:f6:d5:
5e:65:bd:3b:78:e6:b6:2b:2f:59:f0:4c:8f:d5:05:
83:1c:57:60:a9:86:73:5c:ae:8b:c5:33:b9:b2:08:
69:a0:51:99:dd:c6:33:ec:3d:c5:43:cf:a2:49:e0:
51:35:ba:75:af:06:ed:68:f9:85:01:dd:89:fe:cc:
ba:fc:79:90:6d:d7:1b:fa:8a:c0:a0:ee:52:5a:90:
e7:7e:9e:d0:50:9b:99:a6:4b:c3:63:1f:1d:29:ff:
37:db:67:7d:61:ca:ae:f5:94:17:03:f1:be:04:d2:
57:a1:26:21:3f:b2:92:3b:a7:ee:82:25:7e:6c:26:
8b:6e:cf:21:e9:4d:58:50:7c:c4:24:11:23:54:33:
3d:6c:49:56:cc:a4:58:f1:e6:59:a5:de:59:19:49:
47:4d:7c:23:ae:69:d5:ea:6d:59:63:31:b9:33:9a:
17:59:b5:3e:47:e1:e8:c1:a1:b7:a3:46:ee:fd:97:
2d:29:71:15:8a:18:85:5e:60:51:49:bd:c6:3d:cb:
4a:75:08:5f:16:b7:eb:19:b5:ce:53:da:04:27:da:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:29:84:0B:C8:67:4B:C7:27:21:E8:E7:93:58:04:9D:5E:3A:39
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:3a:1d:7f:3e:45:f8:94:01:73:76:87:59:b6:20:96:19:
f1:6d:34:f7:d0:c1:84:66:d1:a9:a1:21:3f:9f:5f:ef:7c:46:
de:6a:19:4f:b8:a2:f1:8f:4b:10:50:fa:62:0f:fe:dc:ed:3d:
0a:a1:73:d9:a6:f8:85:da:41:8c:ee:60:c0:31:5a:c2:4d:32:
d1:6b:ab:6f:05:93:ba:1e:e0:90:dc:9d:90:fa:8d:8c:a8:4d:
77:2f:ad:e1:c9:6c:a3:7e:4e:c5:b1:01:0d:d4:84:ba:6b:e7:
6d:1e:0a:0d:5f:3f:ec:4b:4f:ff:a8:7f:75:13:95:d9:f9:78:
3e:83:af:f0:6b:99:9c:95:37:79:28:f2:28:de:2f:2e:15:f1:
f5:7a:7f:96:d8:82:23:ea:2d:37:01:ea:33:0c:5d:7f:c5:a7:
20:a5:16:ee:65:2d:2e:5f:58:0c:25:24:2e:10:4e:c2:93:85:
6d:3e:97:42:f0:2f:9e:06:7f:f1:c2:ea:06:3e:37:8b:84:0a:
0b:46:ec:8c:c2:79:67:c8:c9:27:dc:f6:1d:96:d5:67:44:25:
5e:eb:05:7d:f9:34:c3:50:42:25:89:3f:3c:50:b5:45:65:d3:
45:15:b4:30:a7:f1:3d:be:98:09:16:e2:ec:f9:cd:34:0e:e4:
b7:53:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:33 2025 by rpki-client on console-fra.rpki-client.org