Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: n7rSgAzcHrsR/iwxkAU2u5VG74pf0gko7ezR4+dse5w=
Subject key identifier: 7D:89:BA:F7:E6:3B:89:35:70:FF:97:9F:19:46:30:F9:40:C2:A6:F5
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 0194C4D130FE758D6B40E1DAE470E96B8B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 111A
Signing time: Sun 02 Feb 2025 04:00:31 +0000
Manifest this update: Sun 02 Feb 2025 04:00:31 +0000
Manifest next update: Mon 03 Feb 2025 04:00:31 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: MhI9Jx0CxUXYOSL7dnxgvlC/czDC9thVfz2Oi5GY91k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:30:fe:75:8d:6b:40:e1:da:e4:70:e9:6b:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Feb 2 04:00:31 2025 GMT
Not After : Feb 3 04:00:31 2025 GMT
Subject: CN=7d89baf7e63b893570ff979f194630f940c2a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:d4:f4:7a:06:d7:87:ba:18:d6:8e:35:0b:
04:aa:39:e0:96:56:45:de:09:38:b7:f9:96:7f:e4:
31:61:d1:22:63:bd:d2:55:82:fd:6d:a7:fe:d1:b0:
46:f2:16:45:b6:7c:78:ed:ff:91:a3:83:27:17:13:
fa:17:af:a0:99:17:cf:df:6f:6d:17:9d:d4:64:c7:
50:2d:09:5d:14:f4:32:d2:35:65:f6:ac:88:82:7b:
14:bf:b7:58:1a:6a:38:00:43:59:2b:d6:b2:6d:00:
e1:cf:f5:72:7c:b8:8a:39:a6:e6:a0:ff:ee:c0:fe:
08:ea:3c:8a:8b:57:ab:a4:69:3e:7c:0f:ac:70:ac:
b7:aa:9c:5d:3c:f9:e6:72:be:06:b7:80:10:7f:7d:
e5:5b:9c:a9:48:6e:71:10:1a:9b:06:33:7d:f6:ba:
d2:1b:aa:09:34:7f:ed:c2:d1:9b:42:9c:fd:2c:2e:
9b:3a:92:a7:50:d4:d9:8b:60:0c:c1:c2:a6:aa:e4:
a8:3c:16:a7:51:27:5f:7a:63:9c:c5:4a:ef:ae:00:
76:ba:a9:4f:74:7d:c8:46:e0:08:99:39:23:55:4f:
ec:6f:3d:9f:de:c1:db:56:c4:01:20:43:24:8a:31:
88:58:7b:e4:36:cd:b6:01:f8:23:30:cc:dd:b1:6d:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:BA:F7:E6:3B:89:35:70:FF:97:9F:19:46:30:F9:40:C2:A6:F5
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:eb:6a:17:17:43:7e:69:65:b7:9f:35:07:17:c5:04:74:
7f:80:51:54:bd:f6:f2:e7:ae:e0:ff:66:af:91:59:fb:8c:a8:
8a:8b:e5:ef:ed:e1:1d:1f:34:e9:e0:04:05:59:f2:25:5b:da:
c3:92:a9:1a:25:e8:37:84:e4:57:75:31:58:7c:48:d9:98:46:
6e:07:bb:0c:49:a0:23:69:62:46:14:16:80:c3:e5:ef:6c:d3:
79:0a:f0:35:e0:94:60:29:53:24:b4:5a:5f:11:53:02:34:d2:
88:a0:dc:dc:d1:8c:66:a7:13:d8:07:11:a0:26:d6:26:37:67:
a6:99:15:7e:9c:f8:3a:bc:e7:d3:32:c8:60:ee:59:55:18:11:
68:62:cf:2c:70:b3:6c:a2:56:f3:ca:ad:73:2d:f5:37:c0:93:
6c:4b:60:ce:30:cd:b1:21:0c:5e:73:c4:0f:e3:e2:fc:73:36:
dd:bb:30:c0:f0:e6:d9:c5:83:41:02:ba:7b:9a:67:ba:82:b4:
c1:d2:35:c5:f0:43:8c:a8:81:6e:1b:85:5a:50:4f:40:07:3d:
43:b2:c9:76:f0:33:26:1c:88:a6:3c:e5:05:49:6c:a9:c3:e0:
b6:d4:9d:29:56:0b:35:d3:ab:3b:49:04:ce:61:25:ea:31:ff:
8d:d4:45:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0TD+dY1rQOHa5HDpa4tAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDcxZjVhMDA1MGY4YWU2NDQ0YzYzODc2OWJhMzc1ZmRk
YmNlMTkwHhcNMjUwMjAyMDQwMDMxWhcNMjUwMjAzMDQwMDMxWjAzMTEwLwYDVQQD
Eyg3ZDg5YmFmN2U2M2I4OTM1NzBmZjk3OWYxOTQ2MzBmOTQwYzJhNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+PU9HoG14e6GNaONQsEqjngllZF
3gk4t/mWf+QxYdEiY73SVYL9baf+0bBG8hZFtnx47f+Ro4MnFxP6F6+gmRfP329t
F53UZMdQLQldFPQy0jVl9qyIgnsUv7dYGmo4AENZK9aybQDhz/VyfLiKOabmoP/u
wP4I6jyKi1erpGk+fA+scKy3qpxdPPnmcr4Gt4AQf33lW5ypSG5xEBqbBjN99rrS
G6oJNH/twtGbQpz9LC6bOpKnUNTZi2AMwcKmquSoPBanUSdfemOcxUrvrgB2uqlP
dH3IRuAImTkjVU/sbz2f3sHbVsQBIEMkijGIWHvkNs22AfgjMMzdsW1bKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2JuvfmO4k1cP+XnxlGMPlAwqb1MB8GA1UdIwQY
MBaAFEzXH1oAUPiuZETGOHabo3X9284ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAt
NzNhMDFhZTVkZThmLzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAtNzNhMDFhZTVkZThm
LzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp7rahcX
Q35pZbefNQcXxQR0f4BRVL328ueu4P9mr5FZ+4yoiovl7+3hHR806eAEBVnyJVva
w5KpGiXoN4TkV3UxWHxI2ZhGbge7DEmgI2liRhQWgMPl72zTeQrwNeCUYClTJLRa
XxFTAjTSiKDc3NGMZqcT2AcRoCbWJjdnppkVfpz4Orzn0zLIYO5ZVRgRaGLPLHCz
bKJW88qtcy31N8CTbEtgzjDNsSEMXnPED+Pi/HM23bswwPDm2cWDQQK6e5pnuoK0
wdI1xfBDjKiBbhuFWlBPQAc9Q7LJdvAzJhyIpjzlBUlsqcPgttSdKVYLNdOrO0kE
zmEl6jH/jdRFKA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:30 2025 by rpki-client