Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: Hl2TaHix6W2bTn34SP+9x3qgsWJrZrJV4MHAdiyI2zw=
Subject key identifier: 8B:CD:B1:C1:B7:34:1D:FD:1F:DF:2D:6B:E1:0A:64:26:13:DC:8F:6A
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0194C49A6FDE355AF99051BE6821FA9F8A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 10
Signing time: Sun 02 Feb 2025 03:00:42 +0000
Manifest this update: Sun 02 Feb 2025 03:00:42 +0000
Manifest next update: Mon 03 Feb 2025 03:00:42 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 7oxCRYscUXxQbT4OmtggFg2aTNfc5ToEqoADG1LqIBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6f:de:35:5a:f9:90:51:be:68:21:fa:9f:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Feb 2 03:00:42 2025 GMT
Not After : Feb 3 03:00:42 2025 GMT
Subject: CN=8bcdb1c1b7341dfd1fdf2d6be10a642613dc8f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:37:95:4b:6f:61:1f:f2:fa:05:aa:b4:95:
72:c5:17:61:0b:64:f4:36:ac:39:6b:90:13:31:25:
76:f6:e6:4d:3a:0e:82:46:24:5c:ec:ec:ee:88:c2:
e0:b5:71:a9:a8:9c:3b:40:ef:97:e8:9c:ae:b7:e7:
aa:eb:73:eb:43:12:28:e8:50:a7:c6:aa:cf:7d:52:
e4:b8:66:2d:f8:62:7d:b4:a1:a0:51:49:51:e2:86:
6f:72:43:11:31:51:70:68:0f:6d:3d:62:bc:20:4c:
7e:0f:1d:90:15:8a:e4:86:4a:26:19:6f:e9:43:17:
ad:a3:7f:2a:88:79:0a:28:04:8c:56:2e:3d:ed:dc:
70:51:44:48:57:98:25:30:9f:13:e2:21:20:de:f9:
14:5f:26:73:51:e6:4d:44:68:fe:42:b3:68:52:0d:
37:7b:8f:ee:8e:41:8c:b2:14:f4:c0:12:5c:60:1b:
37:e3:39:7f:dc:54:33:b4:99:61:15:ed:25:e5:a3:
7a:a7:fe:71:f5:43:23:ed:54:aa:dc:3f:0c:02:5b:
24:8e:86:d1:9a:a2:6b:03:95:5e:1e:ca:c4:81:2c:
8b:ff:50:ce:3a:48:73:d5:67:f3:ac:5a:94:d1:5d:
08:45:df:5d:81:9c:0c:80:1e:d9:7a:cb:4d:88:f0:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:B1:C1:B7:34:1D:FD:1F:DF:2D:6B:E1:0A:64:26:13:DC:8F:6A
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:19:e8:a8:a3:af:7e:6a:80:6f:76:c3:01:e0:37:59:aa:41:
80:90:d1:6f:3e:52:fb:c0:ed:60:ba:e7:f2:c5:58:42:81:09:
7c:59:88:4a:13:70:70:43:e3:b4:26:90:79:06:87:23:f4:02:
e3:76:52:a4:f7:b1:46:d5:bf:0b:8b:15:8d:7d:69:c6:a5:bf:
7f:1b:9b:b0:c6:43:6d:5a:af:15:b0:48:6e:5d:5c:67:27:bf:
10:4f:3f:a2:52:e3:8a:57:80:c8:61:0e:a2:79:87:47:eb:fc:
13:9d:f1:16:36:6a:5a:bf:06:e0:ac:0a:e2:27:9d:bc:ae:d7:
83:b6:90:df:68:57:82:39:42:09:23:26:95:9d:11:ea:69:f5:
35:83:59:1b:1e:7f:79:3f:ad:df:f2:64:67:89:2e:9b:27:e8:
c1:30:1a:d9:2e:2f:34:e8:72:d0:b8:fd:51:5a:26:54:27:5a:
70:ee:a2:70:ab:8a:98:74:c6:81:3b:bb:bc:65:a5:34:16:18:
e4:59:88:bb:79:5b:e7:34:a0:26:d7:63:68:c7:c5:a0:11:cb:
ec:e6:d7:03:ad:a7:4b:fb:80:3c:f9:16:11:6c:82:4d:2b:92:
f5:9b:0a:a3:b0:ef:d8:15:15:3c:38:bb:72:e8:2f:d8:5a:29:
b3:d1:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:47 2025 by rpki-client