Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
File: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft (raw, json)
Hash identifier: R5tUFYeYjhIejR5cXejJ4MSQoFj5KPL2yxtnO6+nYdc=
Subject key identifier: A5:53:BF:96:CA:49:18:9C:DE:31:FB:35:E0:FE:A1:C6:9F:A6:00:26
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Certificate issuer: /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial: 0195124743EAD7B6F265B2850F66680A6ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
Manifest number: 037B
Signing time: Mon 17 Feb 2025 05:00:15 +0000
Manifest this update: Mon 17 Feb 2025 05:00:15 +0000
Manifest next update: Tue 18 Feb 2025 05:00:15 +0000
Files and hashes: 1: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl (hash: hBk/iqqr391FMmhIbxtmC4FlnA8gYck379tZynFrXfk=)
2: VWcJP68R1iCD75ssSwFn6hz8CZY.roa (hash: 9It7diBDuI5/L54Ro2RJcj4yvJavFWDdkkIXSsptI6U=)
3: aSHknzRfo3ut4IdP4sDFiOtG6lo.roa (hash: P3VJRH2gCdGbd9jiYKekQElrMo005p0FNDq0qs/ZIaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:43:ea:d7:b6:f2:65:b2:85:0f:66:68:0a:6e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Validity
Not Before: Feb 17 05:00:15 2025 GMT
Not After : Feb 18 05:00:15 2025 GMT
Subject: CN=a553bf96ca49189cde31fb35e0fea1c69fa60026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:44:36:4b:cb:f7:31:4c:95:8c:92:df:15:
c5:61:59:cf:1a:60:0f:3b:96:83:74:cd:ac:f4:90:
e6:e6:af:8b:2c:ff:a6:ec:c1:e9:98:61:ae:87:66:
1a:35:2d:fb:f9:e5:a6:8f:bd:14:a6:40:52:68:f4:
b7:33:26:3d:6d:a0:16:0f:b7:2e:9e:db:8e:dd:10:
c3:27:3c:da:f7:9f:eb:05:ec:54:fb:af:6b:69:cc:
33:e8:e1:fc:31:ab:92:26:d6:1b:58:19:f3:26:7d:
01:3c:a3:46:34:f8:ab:4b:e2:98:08:4d:ba:9f:be:
bb:3b:40:a1:5e:05:43:00:df:50:5b:9f:a1:8b:e8:
b0:b0:55:48:6a:af:c5:49:03:64:15:a8:b1:0a:7e:
03:2b:f4:c2:b6:fe:d9:5b:eb:2b:fe:f0:39:f9:07:
14:f1:e9:e3:8e:a3:a8:d9:02:d4:65:d2:01:ff:89:
c2:70:fc:9d:d8:c6:04:3c:74:f9:a1:d3:b1:57:82:
aa:12:9c:16:af:a7:92:9a:5f:ea:eb:99:60:13:8d:
ed:a1:7b:e8:90:65:c7:d7:4b:16:c2:e8:56:50:0a:
5c:1e:70:84:00:fd:7b:e3:1d:c4:55:16:ff:fc:67:
07:ef:e7:62:7d:b0:5f:0e:9f:9d:96:bf:c3:99:2a:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:BF:96:CA:49:18:9C:DE:31:FB:35:E0:FE:A1:C6:9F:A6:00:26
X509v3 Authority Key Identifier:
keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:c2:a9:42:ee:f3:d0:84:10:2c:3a:d5:7c:bb:1c:8e:39:
9a:89:82:e5:3d:a5:c9:60:56:96:ec:f1:eb:99:fc:bc:2e:75:
9d:c1:70:21:db:da:1a:90:99:9d:7f:cb:9f:f2:0f:97:99:8f:
6a:00:bb:10:ec:bc:99:1d:1c:7e:4c:01:97:ef:ff:48:24:b0:
62:1a:e5:21:c5:b9:f3:45:57:4b:26:21:aa:f9:8b:ce:ff:04:
81:83:0e:94:bd:01:04:6d:4e:7c:7c:80:bc:24:b0:9d:a7:cd:
64:59:f9:93:e7:38:bb:1f:06:81:80:54:1c:8e:f5:70:7e:a2:
0d:f5:f3:50:37:d4:a2:45:75:77:f5:5d:74:b6:fa:21:9b:52:
85:c3:a5:95:74:b6:0f:30:45:5b:81:38:a9:01:db:4c:a5:f0:
cc:f8:8f:05:a0:1c:00:f0:05:28:75:1b:4f:b3:1f:6e:8c:ec:
9f:e7:cd:b1:b1:d3:66:da:c1:8b:63:21:83:da:dd:f8:d2:11:
16:69:0d:34:d4:a8:d3:6d:56:f5:da:3e:43:ef:c7:87:4b:75:
35:54:4a:80:92:5d:43:81:a9:ed:a2:f1:13:00:0b:fa:de:18:
21:58:14:c4:7f:f4:58:b7:fd:31:11:2a:8d:c8:6c:8e:f4:69:
10:71:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:38 2025 by rpki-client