Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: I4f2lQR0Q7b5aa9ulF7ayBH57euzW0R6JpfKW7TDr7M=
Subject key identifier: 14:BA:E8:2D:AB:21:81:DB:5D:4D:BA:85:40:C3:E5:CE:5D:2B:7D:D4
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 019510C7067B20237D76C7C012BB1037F195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 0727
Signing time: Sun 16 Feb 2025 22:00:33 +0000
Manifest this update: Sun 16 Feb 2025 22:00:33 +0000
Manifest next update: Mon 17 Feb 2025 22:00:33 +0000
Files and hashes: 1: SUUG2kKjexSvWz7hisQBB7MKXJ4.roa (hash: bTiVKxnx7l7XrKQSBNs5e26ay+4FQ9U506Q1Nlisl1M=)
2: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: bMOv0qzgVpiPqS2lfPDrXvJ8lI6CSzRM75H5FMToP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:06:7b:20:23:7d:76:c7:c0:12:bb:10:37:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Feb 16 22:00:33 2025 GMT
Not After : Feb 17 22:00:33 2025 GMT
Subject: CN=14bae82dab2181db5d4dba8540c3e5ce5d2b7dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:b4:44:da:ce:df:69:d2:8b:d4:4c:27:82:
d7:86:4a:88:4f:b9:10:09:e1:82:29:04:a3:01:e8:
d2:68:db:fc:11:4e:72:9e:a5:ae:17:f0:b7:5a:8c:
30:3a:b7:1c:a5:24:22:f3:75:cc:3c:b6:13:c7:4e:
67:a3:32:61:fe:83:a8:5a:14:fe:b7:78:d0:0c:36:
5b:19:08:f8:90:9d:84:3f:52:9f:30:73:b9:a9:80:
52:5c:d4:8a:73:51:bb:11:03:25:62:fd:2e:92:7a:
f1:ea:a7:03:37:97:5a:75:58:22:0d:ef:4d:21:1c:
22:88:ae:cd:3b:8e:e6:9a:58:a0:3b:54:92:c7:d7:
f4:39:ae:28:cd:8e:26:e4:18:cb:72:7e:d8:b6:99:
5e:72:30:0f:92:30:1b:79:0b:d5:32:02:2c:8d:e3:
cc:a8:62:e0:ed:de:7c:ce:6d:fe:b0:f1:05:7b:a5:
9d:c5:4d:cb:12:04:0c:b1:c1:d8:4e:a9:f0:d1:e1:
1e:80:7a:22:92:f7:28:30:5b:81:ea:5f:6a:b5:42:
9e:75:a2:7c:fb:d7:8d:91:2a:7e:1e:ef:53:e0:89:
37:a8:82:bb:30:95:11:93:b5:24:87:c0:05:fa:dc:
88:9d:01:dd:b9:fd:86:75:73:29:56:44:bb:ab:8e:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:E8:2D:AB:21:81:DB:5D:4D:BA:85:40:C3:E5:CE:5D:2B:7D:D4
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:31:60:d7:78:42:8a:81:21:34:90:a9:bc:1f:f0:c9:47:db:
91:d4:35:a8:96:66:76:41:c1:18:95:19:12:70:46:db:2c:12:
dd:14:c9:35:57:13:b4:5f:71:f5:cd:df:b8:02:74:69:9a:0b:
a9:dd:2e:3d:30:6a:88:ab:da:60:9c:24:0e:3d:7a:b7:d2:15:
39:c1:60:88:bc:ba:70:cb:2f:d9:12:28:5a:56:1e:d4:fd:97:
20:93:6f:6a:5c:85:09:b6:fe:35:59:82:42:81:68:0f:3f:a7:
fa:b4:5d:ff:b5:7e:33:eb:f1:06:72:5d:d6:30:9b:b0:72:f8:
00:de:05:86:23:44:1d:9d:42:42:76:be:8b:08:49:e7:c8:cd:
c5:34:81:21:45:02:24:db:ac:6e:b2:ee:87:0d:e6:81:ef:82:
38:ed:6e:bb:45:44:60:6a:83:aa:49:bc:24:5b:19:4f:ba:66:
a2:de:bd:91:7e:15:62:3c:8a:b1:3a:e0:19:7a:77:14:17:cd:
95:96:e7:53:85:4e:1c:eb:bf:44:fd:64:d9:60:4d:4c:14:11:
30:60:8c:ec:84:b0:39:12:ca:82:20:30:b9:88:fd:13:d7:39:
bb:85:95:b4:ae:28:69:f2:48:7b:6c:1b:b0:76:ac:a9:4a:da:
37:4d:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:27 2025 by rpki-client