Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: k2u5MShCiWQ6qgIvxYVBVfTCNUVIjCs+fJX6Ubr2qaE=
Subject key identifier: F6:6F:D5:F0:39:05:56:F9:A1:C5:DB:76:04:F7:56:9A:36:5F:E4:A3
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 0194BB290502314A0BD04CE33C45E18A9A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 07:00:15 +0000
Manifest this update: Fri 31 Jan 2025 07:00:15 +0000
Manifest next update: Sat 01 Feb 2025 07:00:15 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: aOwVKjZ5bYfBmmoXTA8f7hHb6YPMMcg+ocrjMG0DMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:05:02:31:4a:0b:d0:4c:e3:3c:45:e1:8a:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jan 31 07:00:15 2025 GMT
Not After : Feb 1 07:00:15 2025 GMT
Subject: CN=f66fd5f0390556f9a1c5db7604f7569a365fe4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:a6:1b:71:9e:a4:98:86:6d:7b:59:1c:21:
13:9c:aa:f3:9a:9c:ec:15:2f:6a:fe:3c:82:5b:e7:
53:f6:db:3f:c9:5c:9e:7f:b7:0b:55:28:f7:59:be:
da:fa:88:2d:3b:70:3e:45:95:02:44:54:84:b1:09:
e3:7f:f2:8f:0c:38:16:15:47:64:b6:a3:ba:2d:5f:
c6:dc:f7:70:de:61:bc:fc:35:95:25:ce:66:00:97:
fb:a3:c1:21:86:c2:45:2e:70:89:c6:9b:25:8e:a8:
a3:13:c8:61:e7:f7:68:f4:da:88:2e:58:fd:7e:8d:
82:cf:3b:1a:86:ef:d5:6a:92:9a:4b:62:3c:2f:5a:
d3:20:b7:5d:f9:d8:2c:a6:bf:98:66:d7:67:fe:7e:
00:89:d7:c6:e4:22:8e:d7:da:b6:19:e5:fc:a3:fe:
8b:59:82:11:49:52:db:6b:a7:97:4c:55:ca:2c:08:
ca:18:f8:4d:6a:e1:2b:df:5a:1f:3e:1e:a7:eb:2a:
e6:e7:7d:97:8c:5f:71:07:f0:41:9d:91:9e:c9:78:
ae:58:8e:78:9f:1e:84:50:24:62:3f:57:f3:f5:5d:
8d:56:bf:3a:75:40:1a:8c:69:f7:07:d2:5e:0b:08:
e0:fc:b2:d9:22:78:29:a4:06:d1:31:2e:d4:37:61:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6F:D5:F0:39:05:56:F9:A1:C5:DB:76:04:F7:56:9A:36:5F:E4:A3
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:85:ad:a5:f0:0d:23:25:a0:87:a0:9d:23:0a:98:9c:a3:
90:71:de:73:97:36:a9:1b:6b:40:8f:02:58:9a:08:42:79:91:
ae:a5:21:f3:06:12:1b:b8:be:cf:46:62:9d:34:5e:75:26:ee:
1d:39:3b:8b:f7:01:09:c6:02:af:53:f7:b0:0e:25:f7:08:5d:
fc:5f:64:71:cc:29:d0:1d:a5:2b:a7:ee:a2:2c:a8:05:e0:18:
5b:64:1d:22:9d:23:bb:f3:e6:36:ee:f4:18:b7:37:8d:06:59:
39:10:9f:f4:b3:22:47:29:aa:60:aa:a7:92:75:f8:e7:a6:69:
30:a8:0b:b6:22:21:d6:0b:ee:cf:1b:d9:94:3b:65:12:48:b0:
15:40:cc:39:eb:f1:bb:16:ec:38:7a:d8:21:41:73:6f:63:e0:
bb:96:b1:61:cf:f0:11:63:61:ad:55:de:e5:32:2d:f0:e6:0f:
69:01:27:3c:1d:99:43:dd:75:be:f1:8b:b0:f9:65:7c:b5:a4:
da:cf:2a:fd:e3:0f:be:d1:50:3c:1e:d5:60:28:39:cd:d0:56:
22:2e:a1:d3:9a:40:1e:82:10:af:9d:29:1e:5d:33:db:73:48:
99:54:0b:f5:e4:7c:18:02:ee:f5:d5:86:8e:82:83:8b:df:04:
ad:04:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:55 2025 by rpki-client on console-fra.rpki-client.org