Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: GzQtoPsp6WxC9Vva2nilrRxTRSOISbEyhji/oKj3b7o=
Subject key identifier: 78:77:FD:05:42:57:F9:EE:DC:1E:1E:D2:1B:15:32:B7:72:AA:71:61
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0194BB97493A61BC624882722D3806327457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 01EB
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: e8GeIW2j9BDvEwNRIWnezE+0NEvDE4qPIolngPWqYxw=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:49:3a:61:bc:62:48:82:72:2d:38:06:32:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=7877fd054257f9eedc1e1ed21b1532b772aa7161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:96:9f:69:58:19:ff:48:8a:10:c6:36:29:
ed:eb:1f:1f:dc:04:34:be:39:98:9a:e0:23:d3:b3:
c4:78:e7:fa:db:8f:89:56:63:33:2a:8c:ce:9e:b8:
41:8d:5a:1f:e4:22:19:8c:01:43:9d:70:a3:45:cc:
0b:c7:f8:48:94:9b:54:db:dd:2b:0e:bc:24:89:4e:
07:a8:c1:64:06:99:81:9a:4a:60:43:f9:f0:85:06:
70:43:e5:39:eb:4d:ab:07:e4:2d:71:1c:4e:34:df:
8e:d5:a3:73:e4:be:1c:93:25:39:70:64:db:42:d7:
73:32:69:04:1f:32:4a:f4:2f:51:8a:c5:0b:68:37:
db:a8:34:8d:c4:fe:9f:d3:21:46:2b:55:8c:ff:b3:
a2:fe:0f:27:d0:50:53:b4:cb:a7:bd:2c:74:4e:42:
a9:8f:80:f9:05:01:a9:d3:0b:33:1a:fe:47:10:1c:
e8:ce:7c:f5:6e:6f:2e:24:8a:29:b0:8e:40:20:2e:
e5:04:c4:ad:2a:38:44:2b:78:cd:68:34:49:02:44:
fb:aa:9a:f7:a8:1d:5e:22:1f:f6:eb:2c:f5:3b:0c:
08:9e:cf:8b:09:2a:09:13:92:b4:8b:97:e3:9f:9b:
a0:34:d9:b6:d9:d6:c9:d7:70:36:99:e7:bc:9f:5e:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:FD:05:42:57:F9:EE:DC:1E:1E:D2:1B:15:32:B7:72:AA:71:61
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d9:18:03:31:3f:7a:f7:6c:53:b1:83:5e:e0:cc:ca:29:f5:
3c:73:ec:35:12:4d:18:ed:ed:00:1b:93:a8:59:82:5a:c8:e8:
bd:6d:2a:9e:cb:c7:b7:c8:85:c5:7c:43:80:84:f3:09:9a:39:
45:99:15:32:5b:db:09:22:36:ea:98:7b:50:11:1c:e7:e6:93:
6c:e4:36:32:da:60:f3:fe:54:b8:b8:0c:c5:e2:f0:47:08:9c:
a1:ff:87:6c:42:8d:20:3f:4a:97:57:87:3b:d5:a8:34:81:4e:
69:11:1f:f4:e6:4c:74:03:91:0a:55:4c:20:7d:5d:7b:55:cc:
13:ec:47:78:21:bd:2a:c3:23:d0:7c:9f:c9:20:da:3b:2f:a8:
8a:0e:c2:85:eb:1f:a9:53:ea:88:49:40:17:98:4e:d2:8b:08:
b1:5d:1d:37:2e:4f:de:f1:55:8b:34:2d:66:12:ea:98:c8:b7:
23:9f:0d:fe:0f:28:87:6f:f5:b0:df:68:ea:f1:9a:4f:d8:13:
bb:9f:ce:c4:67:03:17:b1:d0:fd:e3:71:bd:07:1d:d3:ff:2c:
e5:e7:a5:f7:e8:45:80:7c:1c:29:5f:f2:41:3d:a9:10:b2:77:
32:3d:f3:80:51:bd:b2:4e:ba:47:76:c7:ce:c2:4e:6a:70:0f:
07:79:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:30 2025 by rpki-client on console-fra.rpki-client.org