Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: 76aCr+vfynSBwc27NjkwYeenRqwsfd1yIJue/Auadxw=
Subject key identifier: F2:0A:A0:8C:E6:1C:AF:F7:6D:D1:01:67:DC:F2:55:40:0B:81:D3:81
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 0194BA849C7BB03EA9DFEED8B1F2DC6FCDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0B86
Signing time: Fri 31 Jan 2025 04:00:40 +0000
Manifest this update: Fri 31 Jan 2025 04:00:40 +0000
Manifest next update: Sat 01 Feb 2025 04:00:40 +0000
Files and hashes: 1: UKm_UMtvpGrkU1Nu7y__DDnEPuk.roa (hash: s8C+wz9gxxRZtvljlAJGIx8hAPJhRLZF/TFKsZo9Kz8=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: wwS9utq+iLBHAMcULPgricjMkSdm7+gIQ/SFG/XC9dM=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:9c:7b:b0:3e:a9:df:ee:d8:b1:f2:dc:6f:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Jan 31 04:00:40 2025 GMT
Not After : Feb 1 04:00:40 2025 GMT
Subject: CN=f20aa08ce61caff76dd10167dcf255400b81d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:79:32:1a:6e:06:2c:ed:6b:e2:7f:3d:2d:
f6:65:f6:44:48:6c:15:7c:61:fc:5a:8c:14:a0:d1:
63:86:87:11:85:d3:6b:54:94:d0:6c:74:b6:12:ef:
44:5e:7d:5d:98:bf:5d:ec:05:9a:a1:27:a4:2b:12:
3f:0c:43:e4:30:eb:07:93:1b:a9:36:c2:39:ac:3c:
d7:00:d2:20:3e:a9:ab:3a:1d:bb:ee:99:41:00:41:
7e:5b:17:7c:5e:88:45:28:0b:bd:1a:e2:aa:d3:4c:
38:88:d5:30:48:87:ad:ed:5c:1b:4d:76:84:a6:d5:
8f:ac:0c:e0:e0:29:26:ae:46:06:7b:99:14:af:95:
f6:20:7f:0a:67:be:e7:f2:01:99:4d:d2:59:c5:f5:
a9:75:6f:35:ab:31:3e:a5:c1:2a:2e:08:84:a9:78:
b8:60:83:e6:5c:5e:5e:25:80:a3:17:aa:5a:7a:39:
f7:39:68:89:b7:50:1b:e2:23:ef:05:1f:83:0f:98:
79:9f:52:ed:27:12:22:00:1e:d7:db:18:a5:d1:98:
02:fd:4c:e0:03:89:14:d7:3f:ad:6f:9c:a7:b1:30:
e3:03:4f:02:d0:d8:5d:c1:d5:c5:81:53:1f:40:ac:
a6:82:4a:3c:ce:f7:e1:e4:a7:66:57:7d:97:aa:c0:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:A0:8C:E6:1C:AF:F7:6D:D1:01:67:DC:F2:55:40:0B:81:D3:81
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:89:46:e0:c2:ff:16:40:7c:b8:5b:b9:20:b0:e7:35:5d:
47:2f:03:62:78:5f:60:f6:12:5b:e4:e4:2b:10:4a:e3:f0:31:
8a:6a:97:dc:d6:43:d0:f5:43:6a:65:44:2b:ec:78:08:63:8d:
23:1f:c3:cb:f8:2b:3d:17:6a:78:6c:70:a0:3f:16:62:e9:7e:
8b:47:fd:8b:64:81:11:42:9b:7b:b8:8f:3c:dd:9d:37:ce:f7:
9b:d0:d1:3e:cf:91:89:4c:78:18:ee:91:92:9f:0b:d5:6d:17:
30:52:3a:11:69:d3:6a:e2:62:2b:95:7f:ff:89:78:47:d8:35:
43:3f:73:d7:a5:6d:38:92:c7:77:f6:d5:ed:49:2f:18:c4:7b:
4d:ff:b0:99:8f:76:8f:6c:b1:4d:f2:9c:72:a1:e9:3e:0c:70:
5f:66:0d:9c:bc:13:a6:f3:6f:d5:89:b4:08:d4:63:1a:43:35:
72:51:6c:86:71:7d:2e:f2:84:be:b3:ee:51:f2:37:92:da:5f:
4e:2d:4a:78:af:cf:fb:b1:8e:5b:a2:8d:30:05:fa:f7:88:c3:
8c:f2:12:1c:62:f6:6d:27:7e:f2:2b:4b:24:02:ed:d8:11:2b:
6b:14:a4:93:38:6b:64:be:e9:ca:0d:e2:4f:79:53:0b:a4:f6:
28:8a:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:05 2025 by rpki-client on console-fra.rpki-client.org