Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: II2tAE1J268qsi2lPTfzNlSRfXodJO0cWDDSB5iJtc4=
Subject key identifier: 8A:4B:8E:C4:07:02:B3:0D:81:FC:38:7A:8A:4A:18:97:D9:87:CB:5E
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0194C42C32A834200912FA3BFAE42E05D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0377
Signing time: Sun 02 Feb 2025 01:00:18 +0000
Manifest this update: Sun 02 Feb 2025 01:00:18 +0000
Manifest next update: Mon 03 Feb 2025 01:00:18 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: UlXxUjtRNytAQPSYrT8kht5THxfmye4MFaGMo8Ilb5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:32:a8:34:20:09:12:fa:3b:fa:e4:2e:05:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Feb 2 01:00:18 2025 GMT
Not After : Feb 3 01:00:18 2025 GMT
Subject: CN=8a4b8ec40702b30d81fc387a8a4a1897d987cb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:34:b1:cb:7e:f7:fc:22:e0:71:13:14:18:
bd:71:a6:27:e8:2b:4e:45:8e:59:c6:fe:ad:ab:b5:
d7:4a:21:b6:6d:31:a6:4e:ac:2d:1a:71:3b:34:27:
b7:ea:40:fc:a7:a0:13:8d:f3:bc:d8:a2:b0:30:7c:
68:e5:d1:b0:0f:21:d9:93:67:de:5c:e6:d3:66:d5:
1e:41:65:13:31:cc:f6:cd:db:a4:10:c1:b5:42:5f:
b9:f1:1f:23:56:71:62:91:8b:76:5a:a2:e3:36:02:
c7:09:3c:64:c0:73:03:2a:d3:b1:f0:1a:9f:ce:0e:
0c:64:20:99:87:c6:a7:f5:d8:ce:b4:3b:4c:b9:0b:
d2:35:f4:aa:7b:48:8a:9d:45:1c:42:3e:19:96:ae:
0e:dd:e3:58:53:08:1f:1d:f1:9c:31:69:69:62:fc:
81:ef:d1:76:f0:f1:14:4f:5d:80:05:43:bf:4e:d7:
e2:d9:e9:17:5f:a2:41:43:09:43:ef:22:40:1e:46:
7c:29:85:fe:1a:81:ba:5c:a7:1d:dc:d3:c7:11:0c:
ba:a9:a8:60:2d:89:9a:92:96:7f:23:47:6a:77:33:
fc:04:c8:58:5f:b0:90:e3:c4:8d:00:07:4a:e6:65:
5f:ec:c5:b8:0a:14:fa:78:dc:cc:fb:2c:bf:1c:fc:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4B:8E:C4:07:02:B3:0D:81:FC:38:7A:8A:4A:18:97:D9:87:CB:5E
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:42:cd:7a:e3:6d:53:ab:a1:e3:a7:81:24:82:b0:13:40:06:
86:4f:f8:ac:f9:67:79:71:20:8d:3a:d9:00:e4:3a:2c:15:7f:
70:17:51:c1:7a:75:b3:31:9f:54:e1:27:0b:6c:49:13:6e:ac:
8a:a0:9e:70:92:9b:45:23:a8:87:ca:50:a3:85:d8:59:c7:26:
fb:e4:7c:90:95:9a:62:7f:02:01:9c:4f:21:17:10:de:70:04:
9f:0c:df:55:f7:b0:1a:59:1e:66:cd:53:72:05:68:71:84:2f:
89:82:1b:68:b0:af:65:f9:e0:54:b0:71:65:53:83:48:59:ce:
dd:3c:57:0f:6f:b1:a3:11:8f:89:83:8a:3a:85:f3:83:ea:c1:
51:db:27:55:76:1a:11:99:36:e2:38:c8:bc:1c:19:ee:ec:35:
bb:f1:cd:78:07:df:1e:7b:e6:0d:09:25:03:dc:94:74:35:cd:
99:04:da:35:78:53:a4:1e:f4:47:2d:cb:ce:1f:97:3b:9d:86:
94:31:f8:42:65:a4:a0:16:71:f4:f3:a0:a2:54:70:ee:4d:6f:
c7:99:d9:a4:a1:a9:b3:21:55:42:6a:16:04:b9:d5:b8:b0:07:
e1:58:03:b2:f4:8a:65:13:c9:84:fc:4a:dd:2f:6c:77:11:08:
04:8c:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:17 2025 by rpki-client