Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: lqvlif7R1mbHq+80XqXKGDbQ5WsY8lCgAz5HCLx/2v8=
Subject key identifier: C6:4A:25:C5:6C:90:7C:34:C4:8E:CC:AF:58:EF:2D:50:C7:22:EE:38
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0194BB60450F55E6F899B428ADFFB2C47845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 08:00:36 +0000
Manifest this update: Fri 31 Jan 2025 08:00:36 +0000
Manifest next update: Sat 01 Feb 2025 08:00:36 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: 1J4OYa0kV9yLgvsR4vpGAOBUT+z00llK0I5kNQVPU2w=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:45:0f:55:e6:f8:99:b4:28:ad:ff:b2:c4:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 31 08:00:36 2025 GMT
Not After : Feb 1 08:00:36 2025 GMT
Subject: CN=c64a25c56c907c34c48eccaf58ef2d50c722ee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:8b:ec:20:6d:a8:cb:39:06:cf:e2:de:86:
a3:bf:fa:8b:76:3b:08:09:eb:81:b6:8a:0c:22:97:
67:4d:ed:2e:95:9f:5d:8f:83:29:0f:ca:99:bf:24:
e3:b9:e5:43:1a:58:bf:8f:d8:c3:4d:5a:d6:85:45:
34:17:51:e3:2d:46:0d:9f:9b:ba:87:7d:8b:3a:20:
7c:c8:02:bd:c2:ae:9c:04:85:ae:83:39:be:1a:b6:
fc:05:af:aa:fa:5e:8e:be:be:1a:21:6e:a3:64:2c:
e9:b2:06:f2:35:a6:7a:ce:c9:e4:b4:4f:0c:39:8d:
eb:98:33:6b:40:44:b9:35:06:56:33:c6:f6:63:60:
06:6a:9f:e8:58:54:fb:80:79:67:c5:55:4a:43:e4:
d4:2a:bf:a8:42:4e:d0:38:ca:e4:1c:d5:52:73:01:
a6:e4:4a:8d:ab:28:2c:cd:d4:97:80:71:f4:50:be:
31:85:8a:bc:fb:78:c3:eb:f6:53:50:cc:3b:b4:3f:
96:2b:5c:38:a6:ed:45:57:27:8b:78:d0:aa:c8:27:
c9:8d:0e:b2:90:74:84:e3:16:84:8f:9b:8a:6e:e7:
52:4b:48:de:86:f9:e5:4c:aa:68:c0:57:5e:2c:6f:
e8:1e:99:f4:3d:93:25:b8:3e:3e:09:b7:2f:e3:ba:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:25:C5:6C:90:7C:34:C4:8E:CC:AF:58:EF:2D:50:C7:22:EE:38
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:93:47:b8:62:3b:51:b4:59:93:b9:d4:6f:8a:7a:21:31:
a3:fb:a6:ce:cd:40:5f:5c:8f:f3:17:29:12:f1:67:5e:e9:83:
d7:9a:ae:b7:50:fe:c6:b3:30:d7:bd:9d:f0:2a:4c:4f:68:eb:
5b:ec:e6:d2:ef:e6:60:04:36:47:50:9c:f3:52:88:af:e0:d4:
dd:f6:1e:cc:a9:75:4f:5e:64:4e:a9:4b:a2:7f:a1:bb:ed:f5:
26:4e:ce:07:b5:af:c3:d6:d6:6b:08:0f:52:1f:be:7f:81:f6:
2e:13:fc:0c:86:08:31:9b:9d:9a:e8:41:74:94:88:9b:1d:65:
0c:91:fe:a3:54:78:bf:0e:a3:98:a1:44:70:46:d6:6a:66:dc:
08:3d:f8:da:fc:e8:d6:92:49:3a:f6:41:04:b1:af:a1:dc:f3:
9a:53:4c:41:be:9c:00:be:86:82:21:18:11:6b:dd:22:69:7e:
ba:04:eb:e2:2a:e4:fd:6e:1e:8a:7c:1d:0c:1a:66:86:e4:f8:
5c:43:cd:18:66:a0:be:e2:7a:57:f9:3f:48:9b:27:82:0d:9b:
b1:17:9b:7c:fe:ed:f1:db:ed:7c:a4:67:18:3d:54:6c:a7:6c:
fe:b5:ed:ba:1a:5a:b1:a8:a4:58:39:dd:55:a7:da:90:ef:30:
33:62:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:25 2025 by rpki-client on console-fra.rpki-client.org