Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: HBZ1/cl1Cy8CyGrCCA2n8IqxPmM2i4uksgp0DQuqKNE=
Subject key identifier: A0:6E:2E:1A:20:63:A6:5F:8E:2C:0A:72:68:2E:9F:12:BD:A9:BF:84
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019511A286C8D60CEC54B2F4508D6F638B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0DD4
Signing time: Mon 17 Feb 2025 02:00:18 +0000
Manifest this update: Mon 17 Feb 2025 02:00:18 +0000
Manifest next update: Tue 18 Feb 2025 02:00:18 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: Xn/Lo5K5Wv7/E4fMqsJPXa4UFQr/xPP+PflrWQGNeo0=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:86:c8:d6:0c:ec:54:b2:f4:50:8d:6f:63:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Feb 17 02:00:18 2025 GMT
Not After : Feb 18 02:00:18 2025 GMT
Subject: CN=a06e2e1a2063a65f8e2c0a72682e9f12bda9bf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:d1:0d:d6:fa:45:18:17:5e:7f:5c:2c:18:
6c:69:0e:f2:33:89:af:bb:84:ec:5c:57:71:4c:6c:
84:33:42:f3:23:6e:ad:9d:07:61:17:82:3c:3e:79:
da:90:32:32:b4:72:8c:38:80:dd:d2:6c:6b:8c:5d:
06:71:0e:62:d8:24:1d:b2:07:a1:00:50:c9:17:fe:
c1:3f:e0:be:9c:a4:3f:c2:0e:eb:50:2b:9f:ad:3b:
5e:14:3b:c8:07:5e:a4:cf:27:76:68:f9:19:58:7f:
4e:78:8f:cc:91:0e:02:bf:21:3f:a0:69:e9:34:0e:
34:6f:a5:03:36:f5:d8:3e:9d:c5:56:af:2e:7c:22:
51:2a:ca:de:4d:62:96:d5:98:d9:f8:4b:d3:42:10:
14:dc:8a:85:93:61:94:25:e3:03:af:d1:a9:ac:5e:
fa:f7:aa:35:68:9b:d0:8a:e4:9c:b5:15:98:11:a8:
25:56:ff:5b:ed:5d:43:47:9e:7b:ac:46:d6:f9:d9:
5d:da:86:dc:92:27:72:2b:0b:57:e4:c6:b3:b0:81:
c1:c1:36:0d:8c:22:63:d6:f3:32:c8:f3:0e:34:6b:
75:58:f5:3f:49:89:ae:e5:c4:f8:4e:cd:97:da:00:
90:3b:c6:bd:65:3d:5f:cb:ea:42:86:d0:c1:4e:67:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:2E:1A:20:63:A6:5F:8E:2C:0A:72:68:2E:9F:12:BD:A9:BF:84
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1b:41:c4:4b:73:82:ca:d8:42:5e:df:2d:cf:24:9a:a3:5f:
bb:32:6d:c6:1b:0b:61:37:b3:ee:c3:b2:0c:44:8b:f7:ad:34:
d6:8b:90:8b:b7:18:5f:2f:7d:a5:91:4c:d0:cb:d4:42:dc:a9:
1e:a9:b7:a6:5c:bf:58:eb:3b:97:8a:58:9e:e1:78:29:c1:39:
0a:c6:cf:0e:08:1d:e4:57:04:37:1f:f5:2a:9b:a7:68:aa:c9:
9b:e3:ee:9b:12:28:ad:7b:5d:08:c5:1a:47:45:89:d5:e5:4d:
5f:03:9b:01:d7:74:54:18:0a:33:f1:36:7f:75:2b:0e:d7:84:
74:1d:b3:f7:07:08:f6:b7:98:4c:ba:c5:e8:b5:f3:2c:9c:ad:
06:63:23:66:d5:4a:32:78:84:b7:ee:74:ec:47:66:a3:0f:c8:
c8:ed:0b:35:d0:79:35:c7:a6:a3:aa:d1:1b:f7:9c:50:95:4f:
6c:8a:ef:00:b7:8f:23:8d:80:4d:f9:7c:31:4c:02:8d:d1:79:
b7:17:fd:3e:d4:87:b8:af:b9:7a:e3:b9:0d:58:f2:3e:fd:f5:
6f:e4:07:3e:b5:14:70:70:0e:17:64:21:7a:03:46:84:43:bb:
a3:84:a6:7e:eb:25:75:37:29:ee:d8:3c:00:ca:da:6d:21:9e:
2b:4a:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:15 2025 by rpki-client