Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier: Eq8uFwO8a6ZDsg3dbFZV2QLbHWAPSmhOwgqsXngK6zA=
Subject key identifier: C1:A8:92:91:FE:B9:A5:0A:DB:B0:14:9B:19:D6:0F:30:C6:4F:DB:F1
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 0194C4D1655F6A6B80336661F7E1ED394BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 04:00:44 +0000
Manifest this update: Sun 02 Feb 2025 04:00:44 +0000
Manifest next update: Mon 03 Feb 2025 04:00:44 +0000
Files and hashes: 1: 2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa (hash: KMD/ALL2N2LqU8y7+1f9YpFqy5OsmhRXi+hfcZ2aIxY=)
2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: HGkjfz9zZ1RtO34jrkDuUWgWXkKeJF/o8l1RIqQ+Wkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:65:5f:6a:6b:80:33:66:61:f7:e1:ed:39:4b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Feb 2 04:00:44 2025 GMT
Not After : Feb 3 04:00:44 2025 GMT
Subject: CN=c1a89291feb9a50adbb0149b19d60f30c64fdbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:d3:5f:2a:2c:3c:cb:f0:72:7a:cc:a3:69:
32:19:02:ee:c1:31:dc:0c:76:fb:3b:fd:09:43:ae:
28:cb:03:4d:98:22:11:e2:85:71:e0:26:8b:0d:77:
86:3a:09:34:f9:ca:75:0a:03:ce:b6:19:5e:e1:4a:
ae:35:e9:02:da:42:2c:56:0b:43:1d:67:66:e8:c4:
01:d9:7d:91:a3:ac:44:9e:04:06:9e:8c:6b:ed:89:
94:85:e5:27:cb:9c:83:4b:f4:4f:85:f4:50:a8:f9:
ff:63:3a:33:cd:8a:61:63:32:0b:69:a1:93:3c:f6:
12:83:64:fc:05:89:0b:5b:68:1e:24:bc:fa:c0:90:
0d:18:1f:16:51:24:1a:00:7c:a3:99:ad:4b:c1:7d:
02:0e:bf:1b:1c:23:d1:39:cd:96:4f:53:79:13:7f:
38:f5:18:95:cb:6f:01:c0:d7:fd:56:b6:95:cb:63:
91:d1:10:84:f8:ee:1b:d7:b3:63:f7:17:89:f5:ae:
70:1c:55:1e:15:74:4a:53:dc:04:3d:97:d7:55:a5:
94:b5:b4:27:af:27:34:11:67:0c:65:60:d6:a3:6a:
4f:91:5b:94:ed:dd:cd:ae:9a:d0:e8:82:d8:25:db:
a5:07:fa:53:8e:a4:7a:fc:9a:79:64:ef:01:5e:6f:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:92:91:FE:B9:A5:0A:DB:B0:14:9B:19:D6:0F:30:C6:4F:DB:F1
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:bd:b8:bc:e2:88:42:1d:a4:d9:1b:a2:8c:fe:e0:ce:b2:
d1:4c:4b:db:c4:9d:85:e5:2e:b0:11:5e:92:96:3f:93:c2:4d:
be:c8:f5:cb:04:ea:21:b5:67:59:20:5f:ce:74:87:3e:c7:c1:
56:1e:c1:29:e8:4b:00:b8:ca:ec:6e:48:e9:bf:ed:e0:fe:85:
75:03:37:24:cf:ac:0a:b8:02:bf:77:1d:e9:d0:a6:29:42:83:
92:67:20:40:74:6c:ed:69:a2:62:08:2a:c1:fb:20:31:fa:d4:
bb:a7:83:8f:35:b9:5b:25:10:08:7b:ff:bc:b7:fe:0b:7e:aa:
1c:8c:96:32:de:3b:22:29:09:95:6e:85:b1:e2:39:8f:13:68:
a7:8b:27:d9:94:57:1e:b6:fe:4d:8b:c8:30:59:03:82:54:2e:
3a:db:f5:69:27:ab:95:31:03:5b:df:3d:4f:1e:b3:e4:b7:76:
30:33:d0:f0:ac:cd:e9:2c:53:5c:86:0a:a3:86:c3:f2:fc:ab:
80:4c:e4:56:86:5f:4a:26:0f:3d:b9:3c:79:cb:35:b1:e9:23:
ba:a6:86:8b:7f:0c:06:ab:61:4f:dd:04:ca:95:c1:52:1d:83:
1d:1b:8d:3c:4c:a8:a0:3b:d6:3c:98:d9:1c:dc:5b:d8:8b:ef:
78:82:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:25 2025 by rpki-client