Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: tHkz/AsjxR9elHnqfTVId/SlHuUunN9SgC0pZAQ5Sqg=
Subject key identifier: D5:FD:35:19:A5:30:4A:B0:AA:87:59:CE:5E:90:E5:B6:97:7D:EA:46
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0194BB975377BF309E123373044FF23714B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 09:00:44 +0000
Manifest this update: Fri 31 Jan 2025 09:00:44 +0000
Manifest next update: Sat 01 Feb 2025 09:00:44 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: Y6CyC7ZeUSvgu3anKSeoftAlBEA/3aBYtJ4LqDBP1n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:53:77:bf:30:9e:12:33:73:04:4f:f2:37:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Jan 31 09:00:44 2025 GMT
Not After : Feb 1 09:00:44 2025 GMT
Subject: CN=d5fd3519a5304ab0aa8759ce5e90e5b6977dea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:9b:ae:f1:8e:42:74:c3:1e:7e:34:e1:14:
fc:e8:a4:5f:e6:65:3e:46:ac:94:35:2f:01:44:a5:
0c:50:82:aa:1a:db:ef:2e:7e:0a:cc:3e:65:37:48:
62:63:22:5c:13:06:05:e6:ae:16:d6:aa:75:60:a5:
9a:e1:b2:04:f3:fb:7e:2e:b7:1d:ab:b4:ab:33:dc:
29:91:e2:b8:8e:7d:7d:d0:72:db:36:61:84:de:3e:
1a:a5:54:e2:29:27:6d:75:60:93:eb:03:2d:67:dc:
9b:3d:2f:17:10:4e:3a:d3:80:f6:52:b6:c7:fd:ae:
a5:bc:0f:3a:6b:31:c8:45:1f:52:40:b1:ae:21:60:
9f:69:48:77:c4:37:75:76:b2:3a:4a:dc:0e:d5:d7:
1f:88:0f:b3:1b:48:e1:e0:cb:4a:fe:45:bb:98:09:
85:65:bb:8d:50:b4:50:04:d0:4f:00:ec:70:20:b7:
ef:89:53:3e:6e:2c:e0:8e:95:b6:ce:da:1e:53:28:
1c:e6:f1:50:2d:99:57:29:47:4a:f9:40:f5:b9:de:
94:c9:87:2f:77:34:bc:5e:ba:5a:96:37:d9:85:ad:
43:18:c5:87:f4:02:8e:dc:aa:26:3b:79:16:5f:b5:
f3:77:d5:56:62:74:0e:db:b6:b7:a7:d1:8c:b3:07:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:35:19:A5:30:4A:B0:AA:87:59:CE:5E:90:E5:B6:97:7D:EA:46
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:0f:81:d2:da:e8:e3:32:a4:36:5b:13:c6:d7:0f:13:67:
4a:7d:0f:f2:91:8c:e8:fa:e1:ed:5a:ab:9b:60:b4:7a:47:9e:
e1:f9:68:cc:8e:3e:09:15:12:e5:fd:1a:7a:6d:0e:ed:b9:02:
ab:70:3c:c2:b8:ad:7e:6e:28:5f:40:49:27:1a:e5:55:74:7b:
9c:c3:2a:71:75:e6:69:9d:d7:8b:2c:4d:40:26:85:27:1e:86:
1a:22:f6:ab:0e:e4:f3:3b:59:d8:bb:88:e0:f3:de:8d:d6:9a:
02:cc:a3:02:dc:fc:57:8d:2e:fd:e3:b0:b5:11:08:23:32:99:
d6:88:be:9a:06:fb:fd:d8:38:45:4d:d4:1b:7b:70:a9:cc:e8:
04:51:0d:95:66:cf:63:f4:53:6a:13:ea:94:8e:b3:81:f0:9b:
eb:27:45:df:c2:3c:73:62:a9:7f:c2:48:fd:d8:a6:78:1e:eb:
37:d1:b3:6e:e5:17:d1:e2:df:c1:31:79:4a:77:d1:e2:96:61:
7e:f0:ed:a0:91:e5:bd:e7:f4:5a:00:4c:c9:71:7e:7f:20:15:
18:2d:3c:7c:60:cd:b8:24:c7:bf:33:8c:8a:9e:55:ad:25:e3:
56:71:b7:c0:db:9a:5f:e0:60:d4:e2:82:a9:0c:c4:df:97:0c:
c3:0f:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:03 2025 by rpki-client on console-fra.rpki-client.org