Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: BXe0kwoVRIV2Cqm78gHnAKCc77UtMmUhEy0R5Bzfh5c=
Subject key identifier: 56:1A:E2:28:42:4B:00:2C:AC:CA:6F:D6:E4:DF:B5:D5:7A:41:7E:73
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 0194C3888B6D64C259D715E434B275533FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:01:33 +0000
Manifest this update: Sat 01 Feb 2025 22:01:33 +0000
Manifest next update: Sun 02 Feb 2025 22:01:33 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: BX3xBvWoYkoJW3Ia3qYwSVrPj8RX+tL4gvfMOyMMJes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:8b:6d:64:c2:59:d7:15:e4:34:b2:75:53:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Feb 1 22:01:33 2025 GMT
Not After : Feb 2 22:01:33 2025 GMT
Subject: CN=561ae228424b002cacca6fd6e4dfb5d57a417e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ee:55:2b:41:2c:10:62:5e:5b:4a:b3:38:09:
0f:f6:a6:c0:2c:4f:40:0f:1d:f0:8e:42:83:a3:3a:
f4:e6:69:53:f0:78:eb:d0:71:75:87:f7:5e:17:ea:
ce:fa:a4:90:0e:e5:4d:f5:f6:cf:e3:33:02:6e:aa:
02:31:f0:56:52:fb:81:67:96:4e:75:33:ae:93:80:
95:fe:07:5d:d9:22:4a:32:71:43:00:b7:cf:64:3f:
67:ca:96:a3:c4:e9:fe:b3:f9:a8:d2:3b:1a:32:e7:
6b:cb:f7:e1:cb:6f:4c:ab:53:73:4e:9c:95:dc:8c:
b0:7c:0d:b2:3f:f7:c5:9b:44:df:20:b9:f7:86:f2:
e8:51:03:73:c3:07:fd:94:47:d1:fc:53:5f:74:a3:
60:ec:d4:55:5f:d0:8d:48:84:ba:8b:fb:22:51:d9:
87:3c:b3:72:9b:af:e5:7e:53:d5:bf:2f:15:b1:ac:
e2:c5:b9:6e:3a:da:53:68:77:aa:54:83:ab:6c:14:
e8:84:ff:20:0d:d4:39:3b:e5:b4:68:af:69:f9:3f:
42:9c:20:6b:a1:ca:ed:00:e0:8b:04:ee:56:a7:ab:
be:a1:95:b6:88:bd:14:e7:a7:f3:e2:20:3c:99:94:
77:d0:39:e7:b8:ee:d0:da:c5:39:d1:6c:16:4b:9f:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:E2:28:42:4B:00:2C:AC:CA:6F:D6:E4:DF:B5:D5:7A:41:7E:73
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4a:31:6c:00:fc:3e:d1:10:d4:1a:c5:11:c2:3c:43:42:41:
ab:e7:04:b2:8f:b6:d5:78:ce:45:b2:26:6d:99:db:1a:ae:fd:
e3:26:7d:ff:be:d8:74:ba:1b:a5:4b:93:d9:72:9c:e9:23:f8:
46:b2:24:3d:ce:9e:97:1a:a7:3b:dc:86:7d:c2:72:ce:05:65:
f0:93:c1:55:91:d0:4c:04:58:81:84:4a:42:d4:e1:69:d6:ce:
40:a7:79:ac:a4:3e:e5:0d:ec:a3:f6:c0:1f:c0:d3:8a:d9:67:
88:64:b3:f5:26:a2:48:85:c9:7a:b4:bd:51:1d:2d:49:47:ea:
22:17:8e:c2:b0:9f:14:39:9f:bd:18:3d:4a:f5:28:6c:42:c1:
97:0d:56:08:ef:72:3d:67:48:12:3a:ba:75:89:6c:0e:36:43:
f6:6a:d3:72:f9:58:a2:3d:bf:b5:72:2e:d0:c7:03:47:25:15:
80:d1:18:c4:a8:ae:fd:20:8b:5a:2f:f9:54:20:84:e6:9c:14:
5d:99:fd:79:2a:29:2f:6d:b1:11:ac:a8:00:28:6b:c5:b3:be:
a8:72:50:e2:12:14:8c:c0:61:bc:e9:8d:ed:7f:bd:2c:cc:63:
ef:13:71:c2:33:e7:12:30:83:81:44:9f:c4:63:fe:5a:8b:c7:
d9:9e:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:56 2025 by rpki-client