Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: ppT7jTA5A2C4B0A2NuO9vDWrK4kspf1ScYXuwLQSrpA=
Subject key identifier: B5:E2:C5:30:C7:BC:9B:0C:D9:BA:F1:FB:D1:1E:48:9F:B3:47:3F:2F
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 0194C4639C4BDA7976ED2E5272EDF7B60D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 133C
Signing time: Sun 02 Feb 2025 02:00:49 +0000
Manifest this update: Sun 02 Feb 2025 02:00:49 +0000
Manifest next update: Mon 03 Feb 2025 02:00:49 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: fqIxnXZys8uJz5k4RvyNj0PQzntAuSLMDrrXwUN5bX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:9c:4b:da:79:76:ed:2e:52:72:ed:f7:b6:0d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Feb 2 02:00:49 2025 GMT
Not After : Feb 3 02:00:49 2025 GMT
Subject: CN=b5e2c530c7bc9b0cd9baf1fbd11e489fb3473f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:45:34:9c:c1:df:ac:dc:9f:cc:95:e8:fc:
85:6b:40:ae:56:07:44:6a:f5:73:ba:38:38:78:01:
97:ae:1a:df:db:5a:0d:90:da:a7:09:bc:9c:e2:6c:
e2:d1:e2:a3:26:d3:0b:eb:20:f8:50:80:88:34:85:
b1:aa:4b:86:d6:33:f0:ed:68:39:b2:56:22:68:5c:
36:2d:b3:c7:5a:eb:18:88:5b:8a:66:48:eb:a9:79:
64:da:bf:47:d5:80:a6:a4:f2:88:00:b1:83:89:33:
43:f9:c5:ed:b1:a1:05:a6:f8:ff:ca:06:1b:48:f8:
3f:f4:e5:58:c0:4d:09:af:be:8c:8f:59:a5:37:3e:
28:eb:9e:db:f1:a4:50:38:c2:af:03:8f:a2:3d:28:
20:df:ac:6b:bc:a3:58:42:75:f6:64:ef:30:7e:e8:
4b:f5:8e:75:ae:24:68:60:13:03:a1:3b:71:be:91:
70:68:5c:5b:fa:11:18:45:5e:f4:c1:3a:ad:d2:47:
88:4c:40:65:43:25:04:fa:79:ad:51:f0:ca:d5:c3:
f4:fc:96:55:76:13:f4:36:cd:ed:c1:b0:63:10:c4:
08:5d:45:bf:1b:72:25:96:ef:58:ee:3f:c7:b8:a4:
ca:fb:2f:e6:36:67:3c:3f:08:e8:08:09:37:61:95:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:C5:30:C7:BC:9B:0C:D9:BA:F1:FB:D1:1E:48:9F:B3:47:3F:2F
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:38:a0:33:cb:f2:b3:8b:74:90:59:ef:3f:2b:c1:2c:8a:
04:8a:5b:c4:20:29:ca:ba:e3:e6:e6:76:3b:1d:c7:5d:59:07:
0a:9e:5e:c4:88:9c:f2:f9:ae:6e:06:8b:8e:86:e3:84:71:68:
10:02:61:19:80:9f:19:23:ad:f6:fa:b7:44:92:c4:d2:ea:b8:
70:e1:38:ff:c9:f6:13:95:52:f4:15:4d:54:7d:8c:b9:3c:ba:
be:8d:f2:cf:2f:af:47:ab:fb:67:57:37:be:27:c1:c4:61:46:
c0:51:ff:61:24:90:4a:bb:a7:8e:52:56:91:02:7f:02:79:8b:
81:13:ef:28:0d:e2:c1:c8:91:94:0d:d0:6c:da:e1:b6:25:75:
a6:49:d9:4d:5c:01:fd:cd:dc:23:cc:3b:7a:63:70:4a:da:23:
33:e7:f7:00:2d:64:1d:ce:f8:d9:00:3c:d0:7a:a1:89:52:e2:
de:1b:52:cb:84:fb:b7:a7:7d:35:ab:80:64:15:b2:1a:dc:a8:
65:7a:a9:79:bb:4e:75:99:ce:8f:ec:66:3d:01:df:e4:68:97:
1c:59:5a:a2:97:3b:68:32:59:33:3b:6f:ab:cb:c5:4f:79:0a:
03:ab:3e:f3:21:40:8e:00:e3:49:bd:80:0b:96:ce:5b:25:5b:
2c:44:fd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:38 2025 by rpki-client