Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: vMt9H/iaSBP0kTOC6DzkUjNRalCgTZQcl2uIgmL8AwM=
Subject key identifier: D6:D5:C4:C4:73:87:CC:42:6C:4A:B5:2B:CB:71:81:2E:47:57:57:2A
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 0194BABB48F435FFA59FD428876E72DA38B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0D25
Signing time: Fri 31 Jan 2025 05:00:23 +0000
Manifest this update: Fri 31 Jan 2025 05:00:23 +0000
Manifest next update: Sat 01 Feb 2025 05:00:23 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: qqZS+XDarwqAJBp57gtWKWHg1gKca0P+b1PjtUdpkPk=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:48:f4:35:ff:a5:9f:d4:28:87:6e:72:da:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Jan 31 05:00:23 2025 GMT
Not After : Feb 1 05:00:23 2025 GMT
Subject: CN=d6d5c4c47387cc426c4ab52bcb71812e4757572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:e2:de:e4:89:7a:2e:d3:52:85:8c:2c:6e:
3a:9a:88:61:b7:25:30:ff:f6:89:35:3f:d2:1c:42:
f1:b2:d9:7f:8b:b8:6f:06:6a:1b:fa:a6:6a:2c:97:
53:c2:de:58:69:c2:fe:a8:43:d7:ab:cc:04:05:4a:
7e:2b:34:c9:c4:32:82:ae:9f:ca:e7:f9:83:4e:e7:
f6:52:21:eb:ef:e8:eb:ef:9d:cc:79:60:f4:05:c2:
90:56:b2:ff:2e:2c:42:7c:02:dd:25:fd:4c:bd:74:
4e:ea:f1:bf:36:6e:c1:10:ad:8a:4b:a7:c2:8d:f8:
b0:15:fe:a8:7c:c0:b0:b0:09:dc:d3:39:60:cb:e4:
cc:b4:e8:3b:d5:d7:f3:47:49:82:3d:df:4b:e3:a1:
47:ff:1b:78:fb:fa:33:47:c0:5c:44:a5:ac:a8:59:
61:28:c6:87:a6:1b:a8:24:30:09:ab:5d:57:99:69:
66:f7:ed:16:01:fb:cf:a0:14:76:df:3b:d9:26:bb:
62:9a:c2:9c:db:e0:c1:59:3e:eb:92:83:bb:03:34:
e0:a6:3b:f9:ee:ad:e7:ef:06:53:8e:96:53:c8:85:
16:91:3d:c2:a6:50:f1:dc:a9:0d:76:d9:ff:25:d2:
a8:5a:50:ad:22:22:88:1d:ca:7a:6e:47:25:c9:7d:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:C4:C4:73:87:CC:42:6C:4A:B5:2B:CB:71:81:2E:47:57:57:2A
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:22:41:00:72:ae:24:f4:8b:e9:dd:ff:cf:ca:54:1c:32:
8b:84:8b:8a:86:e8:8a:12:c7:45:83:55:a5:80:5b:ed:86:83:
5d:a0:30:92:34:37:c0:4e:63:67:11:08:90:a8:09:5c:f4:73:
b6:61:30:03:9d:5d:77:b2:22:8e:b2:41:45:f0:0c:78:0d:a7:
98:1e:40:0d:f1:31:ef:34:7c:a0:74:a4:d3:47:5e:67:7e:59:
b7:31:17:20:1c:82:90:7e:61:ec:bc:14:e5:9b:d8:c8:54:90:
c9:bd:a2:c0:19:d7:17:25:34:c4:27:e3:26:7e:59:1c:ac:c1:
c2:ad:54:35:a1:67:06:e8:e4:09:b9:ef:df:5a:ec:77:e8:55:
26:80:e3:39:5a:28:09:1e:7a:f7:c8:28:76:3d:6a:5c:b4:c8:
f8:14:7a:83:56:be:2a:88:99:48:1e:66:c5:6b:bc:95:d0:59:
d1:b0:79:df:a6:15:9c:8c:ce:39:37:55:94:30:82:e4:5e:f6:
bc:4a:2c:44:f0:73:a8:71:f9:35:73:7a:63:05:36:bd:98:ae:
7a:2d:2e:de:66:a9:d4:1c:25:0d:12:a7:da:aa:97:cb:60:89:
92:ea:5a:3e:8b:6c:ba:29:29:f1:0e:63:be:62:0a:e5:38:c1:
27:fc:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:20 2025 by rpki-client on console-fra.rpki-client.org