Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: GCkJOchcv/GohhVLjHRg1VTOqWrfjHrsba667UIwnso=
Subject key identifier: B9:FB:C8:34:59:B7:49:88:45:8C:48:C4:65:9E:D9:36:B0:ED:33:F1
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019511A2C859A08E9CD1F6BA459E31A2AB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:35 +0000
Manifest this update: Mon 17 Feb 2025 02:00:35 +0000
Manifest next update: Tue 18 Feb 2025 02:00:35 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: G4wCtLCYcRjAAIxjZAzcjLzN48od1w0ArYHSnSfrgdU=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c8:59:a0:8e:9c:d1:f6:ba:45:9e:31:a2:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Feb 17 02:00:35 2025 GMT
Not After : Feb 18 02:00:35 2025 GMT
Subject: CN=b9fbc83459b74988458c48c4659ed936b0ed33f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:68:1a:67:91:22:d0:60:4b:d0:e5:8a:19:
a4:29:56:e4:e8:b1:ad:f7:31:a4:61:b6:df:a1:3d:
04:42:29:e2:fe:ae:f9:39:fa:01:7d:ee:33:b2:32:
e4:01:bd:67:d5:38:12:4c:a9:6b:dd:04:3b:e2:be:
25:99:d2:cd:7f:5e:df:e7:f2:72:9d:9e:23:9e:ba:
12:67:db:11:87:5d:12:9a:b5:75:f1:c5:70:1b:99:
cd:c2:10:2b:3a:3e:64:72:0a:80:59:01:91:10:8c:
4b:93:3b:ff:21:54:9d:c3:66:a1:29:e7:2e:70:51:
81:1f:7d:54:c8:91:50:99:c1:80:fc:86:77:df:0d:
ae:8f:9f:3a:2d:d4:55:aa:03:b2:a4:54:6e:5c:67:
3f:c1:6d:dc:1c:94:95:74:bc:cf:ea:71:73:7f:40:
f2:b0:a5:86:b3:3e:32:3e:d0:a7:8b:2d:08:67:2c:
84:20:80:3e:3d:ff:1c:d1:11:69:d5:bf:9d:b4:68:
c1:8e:07:d2:ce:71:09:55:ea:25:1f:8e:4c:f6:03:
fa:be:f8:d3:21:39:3d:77:cd:49:51:d7:55:d8:4d:
40:8e:ae:4a:f9:7a:ba:b0:54:81:7e:d8:bc:45:20:
4d:d7:09:45:34:aa:1a:7b:b3:f9:64:ba:74:08:2c:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:C8:34:59:B7:49:88:45:8C:48:C4:65:9E:D9:36:B0:ED:33:F1
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:95:fd:fe:b4:de:d9:04:a4:8b:65:30:7f:7a:72:3d:93:ee:
08:3b:45:5d:b3:7f:ab:32:75:84:fa:a6:51:50:aa:bc:60:6d:
2e:b1:cd:f6:0f:21:84:13:1d:b1:db:75:fe:58:fb:c5:e2:af:
bd:de:22:9b:db:bf:a2:ce:4f:5c:29:ff:60:3c:be:be:dd:e5:
54:df:58:94:df:03:4a:7b:12:59:3a:d9:9b:b0:02:f3:e0:64:
63:f6:92:25:78:8c:fc:42:02:cb:71:af:ca:e5:23:bb:fb:5f:
36:e6:ca:45:30:23:2d:56:aa:dc:c1:cd:32:85:26:f0:1a:4e:
b7:54:2c:2b:bc:be:2b:cb:64:ce:f8:91:5d:f0:0f:cd:9b:50:
ed:a9:77:3c:8d:d5:af:7c:e8:ba:3d:fa:79:51:b0:f6:bd:1e:
95:09:75:28:09:03:97:76:3a:f6:13:55:68:43:a9:fc:58:a3:
4b:df:36:9a:e2:21:b9:ca:68:34:31:55:b3:a2:05:b4:51:26:
8f:bb:2f:3a:19:46:eb:5b:68:00:76:99:ec:93:5c:72:69:55:
b5:39:dd:40:80:9d:63:c1:d4:0d:d0:f4:e5:a2:c5:bb:89:49:
06:94:6d:74:f1:91:4e:cf:32:65:9a:ae:66:05:5b:c4:f1:0c:
7f:f8:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:25 2025 by rpki-client