Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: T1H0CDtIM3F4Qk3qXEF4boEk3bCMz+saGyMgwv1dE50=
Subject key identifier: 9B:9F:CA:91:C8:6A:B2:65:E1:93:B3:8A:7A:6B:F5:EB:85:BC:89:B2
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 0194BB600B268F5C8F105FB13F50698F822A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1103
Signing time: Fri 31 Jan 2025 08:00:21 +0000
Manifest this update: Fri 31 Jan 2025 08:00:21 +0000
Manifest next update: Sat 01 Feb 2025 08:00:21 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: HCeFfWYiEjStUDVoPBY0rrp8fSh9UXFF0B/nVt+juIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0b:26:8f:5c:8f:10:5f:b1:3f:50:69:8f:82:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Jan 31 08:00:21 2025 GMT
Not After : Feb 1 08:00:21 2025 GMT
Subject: CN=9b9fca91c86ab265e193b38a7a6bf5eb85bc89b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:ac:3b:de:9a:03:a5:5a:10:47:35:0f:27:
8f:99:ba:a7:8d:8d:ec:f7:de:62:7b:4c:30:bf:56:
d2:c9:9b:14:0d:40:f9:cb:6f:79:c1:2f:c3:5b:69:
3f:36:c3:51:10:b4:88:60:cf:ba:85:0b:55:e3:04:
1d:31:16:42:78:ed:49:f4:f7:4c:69:23:15:27:2c:
e5:c4:bf:7a:d5:59:f0:70:91:f3:12:5b:40:88:c9:
6a:47:58:89:b0:0a:51:5d:50:6a:05:d3:3c:c7:83:
16:78:fc:8b:18:12:95:82:e9:03:81:5b:f7:f6:7a:
13:79:8a:4d:6d:e0:94:b0:a4:77:d4:34:b8:c7:e8:
0e:47:b7:cf:95:34:12:f0:6e:4c:f7:27:44:85:a1:
c6:79:1c:6e:36:8f:e7:c0:3a:e1:30:67:f9:bf:f3:
29:6f:e2:08:ad:5d:79:6a:1a:72:f0:b9:10:2c:15:
c0:ff:da:8e:ee:8a:d5:65:d5:9b:a1:e8:9e:6a:b7:
42:b7:69:ea:a2:cb:98:e3:02:38:5d:f8:88:67:7e:
58:8f:96:06:5d:2c:94:56:92:a7:a8:20:77:52:20:
8b:95:7d:ba:47:95:dc:3a:37:46:7e:61:11:5b:ed:
68:cc:9e:cb:52:df:87:92:ee:96:71:1f:08:4a:22:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:CA:91:C8:6A:B2:65:E1:93:B3:8A:7A:6B:F5:EB:85:BC:89:B2
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9b:15:24:ff:73:36:31:9a:b8:88:d9:9f:0b:81:05:ef:62:
52:a4:5b:4f:f9:f6:f2:97:ac:5f:0b:91:c5:0f:2f:e3:65:16:
3f:56:ee:d2:5d:c2:59:42:e3:02:fd:69:6b:11:d4:f6:a7:61:
0c:98:2f:ef:a8:55:d9:b9:18:66:a6:6e:d0:f8:07:49:24:ef:
6d:8d:fb:7b:d5:1c:25:a2:59:85:62:a6:88:dc:1c:d8:97:d7:
9c:a3:10:c3:de:3c:d7:e5:65:d5:68:8f:54:d5:29:c7:2e:22:
f8:04:bb:93:66:17:a5:9e:f7:59:97:5e:5c:03:44:38:2d:0a:
ed:d1:b3:48:8b:2e:0a:7e:14:33:c1:6c:da:19:b7:30:57:85:
37:28:bb:b3:7a:fb:d7:6e:54:07:40:aa:1d:09:16:6f:d9:2b:
35:07:e0:2f:d1:6e:6e:c3:af:49:85:b6:22:d4:b8:b4:83:ed:
bc:a0:8f:8f:46:ac:be:23:8d:f4:1b:6b:5e:94:a4:df:eb:c9:
19:47:39:2a:22:a4:3a:52:9a:0c:2c:d2:bc:89:23:b1:d3:e4:
2a:77:06:6f:f2:a4:90:ed:6b:12:64:cc:77:d9:ff:3d:59:13:
24:de:e8:8e:93:b4:d0:c5:99:7e:ff:7a:90:bf:78:bf:e7:0b:
c8:0a:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:31 2025 by rpki-client on console-fra.rpki-client.org