Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: K9heL48GbFk+ElaIUbkDUNA78Yc95R7CyJefxFKKIGg=
Subject key identifier: AD:6A:9F:00:74:57:DD:72:AF:A6:6A:C8:21:88:B9:AA:C1:F9:FE:09
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0195127E7F71F359683ADB1E617E1672981C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 06:00:34 +0000
Manifest this update: Mon 17 Feb 2025 06:00:34 +0000
Manifest next update: Tue 18 Feb 2025 06:00:34 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: zwPhiyvE7LJiAjKvrOwNmCGzKCSmeeb0JmdOSk67FTw=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:7f:71:f3:59:68:3a:db:1e:61:7e:16:72:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Feb 17 06:00:34 2025 GMT
Not After : Feb 18 06:00:34 2025 GMT
Subject: CN=ad6a9f007457dd72afa66ac82188b9aac1f9fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:78:fc:26:e0:7b:a3:63:b3:00:39:54:7f:
dd:8d:1c:d1:4f:be:d3:ef:2a:cb:11:eb:11:6a:71:
c8:e9:97:64:4f:e2:79:c3:35:f9:b0:58:e5:59:fe:
46:7b:c1:81:c3:94:ea:90:59:ca:ed:1a:18:24:05:
1a:9e:9d:fa:ae:0b:80:9b:30:d1:2a:8e:0a:fd:ce:
bd:a6:5f:db:96:9b:aa:be:75:44:50:c0:98:39:89:
9c:1a:4a:22:1a:bb:e0:65:5c:40:e4:eb:dd:62:cb:
85:ac:d8:c4:a9:6a:ec:a6:f6:a4:ba:c8:6a:1f:69:
c1:6f:87:34:aa:03:4f:2e:b8:7e:57:98:26:b8:0b:
d0:c1:8e:c2:f1:bb:e0:ec:f9:f7:d6:61:93:ed:7c:
a8:70:55:2f:2c:40:e9:27:6e:09:74:35:1d:af:75:
3e:33:e1:f5:a4:58:68:07:e0:b3:cb:c5:60:76:03:
51:a3:e4:0a:66:cf:de:a8:62:85:5a:6b:3e:ea:ab:
6d:47:84:9a:75:64:54:8d:53:f3:f7:2c:46:8f:75:
19:22:ee:5c:70:6e:60:4a:64:4e:00:ee:e6:f8:95:
f1:b2:35:c5:66:d8:a9:d2:a8:24:6a:43:f7:a5:24:
90:a6:e4:08:8d:81:bd:60:8d:64:f8:95:19:e9:fb:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:9F:00:74:57:DD:72:AF:A6:6A:C8:21:88:B9:AA:C1:F9:FE:09
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:a8:75:a6:d8:5a:46:5f:2c:6a:7f:8d:eb:d6:a9:5a:cb:
8f:cd:39:64:e0:87:ed:40:86:8f:47:65:11:59:ca:e3:8b:77:
09:a0:8b:6d:ff:34:b5:52:c8:c3:6f:9f:1d:4b:c4:71:05:fe:
66:17:24:4a:b2:cc:21:f5:19:7b:b9:b1:ea:d7:e4:72:f4:c6:
ed:77:0e:c8:60:b7:10:85:25:a5:b0:9f:1d:39:c7:49:e9:23:
ce:dd:9d:cc:35:2c:5e:eb:e1:e4:14:b1:95:29:df:bb:9c:e0:
de:ee:25:dd:a2:ab:1f:c0:10:fc:22:db:f3:39:4b:0d:fa:d6:
9b:be:7c:b7:fc:24:e8:78:5a:1b:b9:24:c6:f4:f0:ef:d4:42:
98:42:16:0b:d2:8f:b0:f4:a7:3a:bd:33:3c:20:9b:e6:b5:6f:
50:07:af:3e:53:7e:7a:48:f9:7a:d4:f7:45:ec:df:32:42:00:
9d:93:2a:e2:5d:ad:40:ee:77:c3:a8:35:30:98:c3:06:7a:76:
00:86:10:72:ab:3b:c7:ac:d7:0d:fc:c1:92:7f:c7:65:46:76:
7f:53:c8:b1:1f:66:e9:06:9c:66:18:63:fb:46:2d:64:c1:fd:
82:d6:9c:ed:e2:8b:6b:ac:48:5b:1b:76:c2:70:57:ac:e2:e0:
d2:f9:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:37 2025 by rpki-client