Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier: FS/IesxQJAF3ujMA0/hTt12xBJJS3P/5yekk1O3UPV4=
Subject key identifier: F4:E6:0F:22:DE:38:7B:85:A8:BB:C1:23:E1:28:52:B1:18:10:6D:7B
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 0194BABBB5717FAA412D3C3D8B87535211C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 05:00:51 +0000
Manifest this update: Fri 31 Jan 2025 05:00:51 +0000
Manifest next update: Sat 01 Feb 2025 05:00:51 +0000
Files and hashes: 1: m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa (hash: 0ftdeq2I0Ls/OwARQ/FHezOkmfJrEt6ekfubL8KjG/I=)
2: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
3: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: 1bRVxZvCjJJm7RRw2XsYzsOG9dwsQ+YdRKgP1k806tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b5:71:7f:aa:41:2d:3c:3d:8b:87:53:52:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 31 05:00:51 2025 GMT
Not After : Feb 1 05:00:51 2025 GMT
Subject: CN=f4e60f22de387b85a8bbc123e12852b118106d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:e9:3a:c7:19:83:91:4e:ef:46:47:78:61:
67:bb:14:7a:aa:40:9b:ae:c4:72:5e:7c:f4:81:f5:
d1:2a:e4:88:fc:67:71:81:d8:32:eb:28:18:56:64:
38:1d:32:ca:f8:07:f2:3c:9a:6b:20:6a:e9:d3:34:
a1:36:24:56:45:8e:ad:e0:59:2c:18:e3:e7:9d:83:
20:24:3e:19:54:93:5f:1e:33:a6:eb:f6:25:f3:e6:
d8:94:a9:7b:8b:8f:24:32:38:8f:62:60:69:b1:df:
e1:09:46:a7:6a:4b:8e:cf:b0:b3:67:9a:43:66:da:
70:42:ff:b0:8a:f7:fa:51:06:2f:14:29:06:da:7f:
b6:f6:55:04:3c:b0:64:1a:bc:f8:a6:7f:09:87:a9:
5a:94:d3:32:ff:ce:2b:54:79:69:b5:35:43:e4:eb:
8d:61:8e:a7:1f:ab:90:aa:38:2d:25:e1:5d:1b:bd:
aa:85:02:7c:8c:5d:80:78:0c:9c:f0:27:b4:0b:63:
11:fd:6d:fb:9e:bd:34:08:25:1d:56:60:ac:a9:f3:
41:5d:65:81:18:86:ca:54:4a:66:e5:5e:16:13:81:
de:c5:6f:b1:64:ce:ca:7c:0c:eb:b0:f1:51:db:48:
4b:43:e4:de:62:d2:25:b9:64:ae:78:5d:ab:71:2f:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:0F:22:DE:38:7B:85:A8:BB:C1:23:E1:28:52:B1:18:10:6D:7B
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:27:b7:69:97:19:6a:a1:9a:40:8f:fa:1d:b0:6c:fa:a3:
cd:19:07:04:c2:ab:96:35:d5:da:3b:44:6c:be:15:39:bf:5c:
c4:92:28:9b:cf:39:8c:52:a2:8b:59:7f:31:85:a1:b0:87:3b:
29:39:de:de:3e:59:78:72:f6:d5:b9:04:8e:3b:80:4d:50:8f:
71:27:fd:78:7c:de:3f:55:75:5f:56:23:ed:d2:67:a5:e4:4c:
0b:dd:3d:c8:ee:8d:32:32:f4:5e:50:e8:da:43:5c:b1:36:42:
33:7e:97:17:68:34:f7:d7:67:41:b5:7d:4d:a8:f7:08:ca:28:
28:b8:16:fb:7e:1e:f3:bf:ba:90:d5:68:5b:43:48:90:2a:91:
6b:35:16:43:28:a0:ac:ae:b3:c1:00:10:85:34:92:96:5a:77:
8a:14:58:3a:7a:4e:29:8d:8f:e1:08:0c:01:6d:f0:45:e5:1d:
b6:5f:24:bc:9a:84:2e:f4:89:2d:b3:d2:c5:0d:2a:c1:d7:41:
f9:5e:52:1c:0c:76:0c:69:ec:4a:87:0c:20:8b:0b:03:c8:23:
5a:20:e7:c9:14:3f:49:14:92:d4:b3:8e:d4:24:b7:49:a8:9c:
03:71:e3:eb:70:6c:7e:dd:da:a5:fa:e2:96:93:c2:20:29:0f:
c4:55:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:45 2025 by rpki-client on console-fra.rpki-client.org