Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File: TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier: 0F0FKZfTp/D3hIUhZ/RdDAJ7p9sNsCDx6JJQSP8UPMI=
Subject key identifier: F1:FF:69:13:3C:DD:AE:7A:E2:A1:16:6C:F5:4F:9F:1E:98:26:B9:A4
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer: /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial: 0194BABB27A9A2101D9F7242F46349E108F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 05:00:15 +0000
Manifest this update: Fri 31 Jan 2025 05:00:15 +0000
Manifest next update: Sat 01 Feb 2025 05:00:15 +0000
Files and hashes: 1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: jv2v6DFBQ7BWpVodhf1OeMzmdqqqeR1oz8K6GZ2/jmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:27:a9:a2:10:1d:9f:72:42:f4:63:49:e1:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Validity
Not Before: Jan 31 05:00:15 2025 GMT
Not After : Feb 1 05:00:15 2025 GMT
Subject: CN=f1ff69133cddae7ae2a1166cf54f9f1e9826b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:2d:27:38:26:91:99:54:d9:6b:4f:f0:05:
9b:82:cf:4a:b9:94:2c:93:84:ad:87:f5:69:c4:62:
6b:99:b3:58:57:ce:ab:cb:7f:d8:90:50:f1:cd:65:
5d:11:6d:ad:f2:9f:54:7c:37:82:30:40:4f:86:74:
57:c3:dd:c2:6c:38:78:4c:bd:75:88:14:8d:40:df:
a2:84:65:d7:2f:65:01:89:65:5f:4a:ac:b7:e3:30:
d0:a8:7b:33:44:f2:9d:03:a6:9a:cb:0d:c5:77:95:
44:f7:5f:0d:c7:0d:a9:07:9a:c8:f0:29:3f:07:44:
0f:77:01:5b:b9:20:e6:14:1f:29:c7:f7:31:7e:d5:
48:1e:78:01:2c:d5:59:43:a6:25:63:02:7c:30:39:
0c:2e:c2:58:b7:d6:ac:4d:16:b5:42:f2:ea:6e:df:
55:82:e3:38:ce:b8:c0:45:7e:51:bc:7b:a5:15:ad:
59:f3:02:8c:5c:a7:43:91:d2:a2:97:fa:60:98:ac:
1a:22:04:73:1d:20:4d:6a:ca:79:f0:37:9f:96:5d:
5e:3a:59:56:55:49:c5:ac:23:3a:b2:f8:07:e5:b9:
4c:2b:f5:7d:08:ed:cf:01:19:de:96:17:f4:93:fc:
da:43:ef:97:14:b0:bd:ad:04:4a:24:59:41:e5:58:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:69:13:3C:DD:AE:7A:E2:A1:16:6C:F5:4F:9F:1E:98:26:B9:A4
X509v3 Authority Key Identifier:
keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:f5:70:71:6a:7f:50:24:e3:fb:a8:7c:4a:f6:b0:03:9d:
88:15:3f:29:48:98:ea:3a:c2:36:1f:7e:06:66:37:47:bb:81:
52:5c:ea:5e:12:c3:fa:3f:35:8b:fc:38:45:a2:58:a3:de:65:
b7:2c:fa:56:68:ee:43:6b:7e:2b:aa:94:ce:6b:07:f7:40:1c:
18:86:72:2d:d1:00:ca:7c:1a:0f:45:26:db:72:86:73:24:89:
dd:37:7d:ca:f2:c8:62:18:0d:3f:bc:ee:f7:9e:b9:c5:fb:6b:
1f:65:9c:ff:e6:f7:5b:a0:9d:ad:f7:60:06:fb:9a:34:bd:47:
21:ff:ee:96:93:2d:ff:7c:da:19:62:26:74:54:2a:e9:69:8e:
3b:0c:4e:4e:74:17:76:b0:00:5e:ed:93:84:23:08:98:95:39:
7e:95:05:46:bd:79:ac:4d:8d:35:fb:f3:58:f5:c9:bd:b4:dc:
24:e0:c9:b0:16:40:31:db:2f:45:20:8d:c8:ca:32:b2:0e:f5:
70:ea:9d:7a:92:2d:13:9a:03:d2:1b:50:ca:5b:09:55:c7:4e:
f2:a4:db:2a:ca:5e:d1:8f:23:82:dd:9c:4a:41:1a:fc:5a:ff:
84:a9:1a:89:3a:e4:1f:d0:48:d3:9d:3a:3d:d9:ab:f2:d4:54:
4c:c8:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:28 2025 by rpki-client on console-fra.rpki-client.org