Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
File: tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft (raw, json)
Hash identifier: n/rq8eFylQYURuRCkolgNgntJJNAW8e2IY0esU7ji8k=
Subject key identifier: D3:EB:80:F0:36:18:8E:D5:15:16:97:A7:9F:BC:EF:6E:DE:AC:07:7D
Authority key identifier: B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
Certificate issuer: /CN=b64e100c903d85c9661f21b41f641994903a45cc
Certificate serial: 0194C49A4C1F923DC06216F9D9550F99D309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
Manifest number: 92
Signing time: Sun 02 Feb 2025 03:00:33 +0000
Manifest this update: Sun 02 Feb 2025 03:00:33 +0000
Manifest next update: Mon 03 Feb 2025 03:00:33 +0000
Files and hashes: 1: kAdUvhi0iuHRl8HdWVSAKlJD5u0.roa (hash: 2XhzY5ktX3xFgvAerywPE4VwkhUGoOOVHNmD/7mSh84=)
2: tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl (hash: eIYJNUXAXH4Tz5JaK+BD/qYcDt0EMAbKQr40OSZs1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:4c:1f:92:3d:c0:62:16:f9:d9:55:0f:99:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64e100c903d85c9661f21b41f641994903a45cc
Validity
Not Before: Feb 2 03:00:33 2025 GMT
Not After : Feb 3 03:00:33 2025 GMT
Subject: CN=d3eb80f036188ed5151697a79fbcef6edeac077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:89:42:8a:a1:40:20:1e:d8:14:26:9b:30:
74:56:fa:3e:6d:4f:7d:c8:b9:8a:e0:f6:75:1b:f0:
c0:01:8e:58:7a:87:a7:47:40:f1:30:ba:b0:44:03:
a7:38:d0:ba:b7:0d:99:b1:2d:d7:b1:71:49:24:e7:
0e:51:54:28:de:08:4c:00:52:8d:02:f5:3d:04:bf:
30:77:62:10:27:7b:c4:8e:3c:ee:ce:82:8a:4e:18:
4a:f7:a7:ec:11:5d:c3:c7:03:2b:4a:1d:5e:6c:c5:
5e:a7:34:55:4e:e2:70:01:11:57:aa:f9:2b:b7:ab:
19:c2:7e:e7:cb:38:82:d0:fb:44:83:3e:24:bf:b1:
08:7d:dd:ef:4b:62:f0:64:94:62:f0:9c:ed:f4:53:
20:ab:31:2a:94:2e:49:c1:0a:e3:bb:ed:3f:f0:20:
b5:dc:7e:f2:58:9e:24:dc:74:69:13:06:7c:b3:c8:
db:be:1c:96:54:bb:8e:ad:27:ef:10:43:45:1a:a6:
af:0a:1c:fa:3b:b1:f7:4a:b0:b6:25:e2:80:77:71:
90:46:dc:f1:ae:37:f8:54:88:07:27:dd:13:86:25:
48:04:4b:3c:c1:9b:24:11:d8:73:be:02:d2:7b:6b:
38:cd:b1:c8:b0:1d:f4:66:97:ec:70:c8:17:df:26:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:80:F0:36:18:8E:D5:15:16:97:A7:9F:BC:EF:6E:DE:AC:07:7D
X509v3 Authority Key Identifier:
keyid:B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9f:21:87:e4:2b:72:8e:53:01:a7:90:58:c6:f0:88:6a:5b:
43:58:41:ae:73:6f:8b:4f:5c:b4:23:59:19:84:f9:23:59:35:
f2:6d:c1:98:70:54:5d:b9:d5:84:80:e6:2b:de:00:5e:bc:f3:
8b:c6:0e:27:90:12:4e:de:84:34:0e:e5:1c:1d:51:76:5c:9c:
86:0a:39:1e:2f:1d:f2:63:a6:67:15:68:dd:80:b6:10:b5:33:
07:81:21:64:60:39:49:a8:a4:ae:9a:96:7f:f9:c0:dd:b1:fd:
ac:ab:b3:c6:b7:f3:f0:50:01:1d:f6:f9:2a:7f:36:5c:10:8c:
a9:bf:77:7c:dc:0c:1a:f8:2e:48:d9:0d:fc:14:3c:67:76:45:
dd:94:89:0d:3f:3d:2f:3d:2a:11:25:d3:af:1a:0d:11:e3:f5:
b2:3e:52:df:57:9e:59:36:02:ff:b3:9a:25:80:aa:43:7f:bb:
e3:20:89:5e:2a:18:52:37:0d:6e:d4:3f:e6:6b:82:8a:78:ec:
23:7a:c4:33:b5:1c:15:e5:12:08:d9:f6:86:a6:b4:bd:33:43:
ad:3d:de:72:32:1c:e6:75:54:4c:9c:dc:79:4f:6a:f4:d7:6e:
26:6d:a6:eb:b6:ec:0d:34:b2:4b:66:6b:4b:96:39:cc:65:06:
d6:58:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:16 2025 by rpki-client