Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: zFMsLgrQzVf803V2bNVZaCzC/4EEpdRhDJFz9bvKtGA=
Subject key identifier: A4:EF:3F:8B:80:27:DD:B0:E1:05:95:71:24:22:48:36:54:07:26:62
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 019511A2A50137F0B2952B481B429B86A49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 1018
Signing time: Mon 17 Feb 2025 02:00:26 +0000
Manifest this update: Mon 17 Feb 2025 02:00:26 +0000
Manifest next update: Tue 18 Feb 2025 02:00:26 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: KKzau4tqzhQi2wagiuZj1BhMORwLkRiZSmc+DSdQw74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a5:01:37:f0:b2:95:2b:48:1b:42:9b:86:a4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Feb 17 02:00:26 2025 GMT
Not After : Feb 18 02:00:26 2025 GMT
Subject: CN=a4ef3f8b8027ddb0e10595712422483654072662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:7c:e2:bb:c4:1b:7f:53:6c:50:01:a5:42:
83:5f:19:bc:3d:6e:00:c3:46:d7:5b:62:f1:8a:5e:
87:95:d5:91:b1:da:69:39:df:4a:73:44:74:7e:fa:
b9:14:73:c5:a0:70:c8:9d:2c:a2:9f:b9:ba:6a:66:
5e:b5:b9:54:59:c2:3d:7d:ca:c8:67:ac:57:35:f3:
13:5e:18:e6:e8:fc:de:78:00:8f:fa:35:ce:a5:0c:
ff:ac:ab:b4:59:f6:a6:22:db:eb:29:4b:25:39:fc:
2e:70:a2:2e:75:c8:e8:a4:ab:5a:7a:ca:57:41:4b:
9d:fe:1b:20:83:36:7b:19:4b:86:bf:53:c3:1a:5a:
a2:33:3a:09:40:ba:e5:75:2a:ba:cc:08:44:ed:06:
59:92:3a:34:fe:83:20:f7:15:cc:9e:95:80:49:8c:
fb:9a:b3:91:fe:e1:79:b2:e9:c6:c8:90:5e:a3:c7:
6c:0c:1b:48:33:2f:83:26:c4:d4:57:1f:fc:17:5f:
37:36:e1:78:0b:03:21:46:e8:2e:9b:c7:2a:b6:ad:
68:72:f2:b6:20:60:31:a8:43:e6:b0:7c:cb:79:6c:
1f:4e:da:bc:f2:47:e2:ba:1c:14:7f:0a:44:13:a5:
64:8c:8b:85:4f:ed:e3:7d:69:cb:52:5b:82:4d:bf:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:3F:8B:80:27:DD:B0:E1:05:95:71:24:22:48:36:54:07:26:62
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:32:b1:ca:e8:a1:cd:a0:14:5c:d4:f0:ba:6b:00:68:36:aa:
a1:b2:86:18:e6:87:b2:94:39:31:c3:3a:79:ac:7c:79:04:5e:
60:27:94:07:2c:21:1e:33:27:eb:29:fa:27:c6:ae:fc:9a:41:
df:fb:ff:86:40:1c:ef:48:02:b7:99:78:28:8f:26:c6:72:ce:
16:82:f4:d6:30:76:e7:10:68:97:d6:cc:de:50:81:94:dd:50:
d1:43:03:7c:f5:89:23:0c:ae:8b:93:8d:c2:f1:b4:22:60:15:
7e:5f:72:87:df:c8:f0:91:08:2f:58:d3:14:f7:57:1b:49:c7:
a3:a0:24:8f:d8:08:a6:d7:1e:1b:2e:eb:33:83:55:92:2e:20:
e3:85:b7:c4:1b:d2:b3:1b:d3:ec:f8:a3:0a:c8:ea:80:a2:35:
5a:77:db:c5:f5:27:c5:ba:d2:03:85:81:99:16:7d:31:2b:62:
59:7a:ac:0e:83:22:4e:d9:7c:9d:d9:33:3c:e5:c2:0a:95:a5:
7a:7a:c5:59:5d:51:3b:63:ff:f3:1d:01:09:f7:dc:c2:3d:44:
92:8f:c9:38:cc:e7:65:00:e9:d2:af:c7:dc:7b:92:5a:24:22:
48:41:11:d8:35:90:90:4a:dc:2c:29:ee:3e:41:f5:b8:76:0e:
06:3a:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:33 2025 by rpki-client