
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: nahBYcCyXXub7YPZga6NpMJBjKFPJ/xEsXwngpjgffY=
Subject key identifier: 63:71:5D:C0:5E:DE:2B:4C:34:11:EB:D2:29:01:05:34:98:12:DE:78
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0194BABB37CE768A1F7EAFBD495E7F1887E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0952
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: YWe4Vr+KzawwGRl5TAbzPGuvQqRom6P9BEMZdTuVJtg=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:37:ce:76:8a:1f:7e:af:bd:49:5e:7f:18:87:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=63715dc05ede2b4c3411ebd2290105349812de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:d4:19:18:ba:ba:2d:e4:80:de:03:3c:78:
07:ae:db:26:12:d0:ed:9b:ad:1f:e8:05:4b:1a:c3:
69:2f:7d:e3:a5:41:cb:cc:8b:da:95:8f:53:80:bd:
33:c4:1e:96:85:eb:f1:1e:c0:e8:9a:94:46:35:30:
ce:1f:bc:6a:36:a0:fa:7c:5d:a5:5b:b8:18:ac:ac:
eb:a2:8a:b0:40:f9:3f:b1:54:ca:46:6c:0c:92:c8:
f0:d0:54:1f:c8:d1:bf:c5:32:9d:db:80:ed:7d:6a:
12:21:8d:dd:b0:b5:1c:dd:75:3d:d2:25:bd:99:df:
e4:43:d4:f5:fb:25:92:d3:a0:94:51:11:6f:2e:cb:
7e:74:dc:11:27:95:c8:82:b0:8c:66:be:9d:ec:f3:
64:0e:9c:e1:f3:84:b8:e8:9a:cf:da:88:9c:db:23:
cd:4b:c0:a9:b4:75:1b:ba:17:c4:73:1c:a9:58:36:
ce:09:e6:31:d0:7f:d3:36:68:29:fb:dd:80:a2:0e:
a3:3e:cf:52:ef:b1:93:de:dd:cc:73:23:d4:04:05:
35:fb:f9:81:85:7d:39:3d:a1:f0:4c:e1:69:4a:0c:
9a:6e:6b:b8:2d:c9:b7:cb:c2:b0:d1:fe:18:dd:29:
1d:56:a1:af:f9:4d:0a:6c:6c:92:f0:ed:4a:5b:3b:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:5D:C0:5E:DE:2B:4C:34:11:EB:D2:29:01:05:34:98:12:DE:78
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:37:21:ac:c1:27:c6:ac:86:1f:21:85:cd:61:b6:61:75:
48:d8:2e:b2:20:cb:bf:dd:df:ef:ab:02:39:44:4d:f3:65:98:
4d:21:0a:d6:3b:2d:50:5f:2c:0f:b9:dc:15:f3:d6:89:ac:0f:
d2:2c:7e:56:0d:e4:1a:2b:38:23:4b:4a:bf:95:d9:09:26:68:
a4:5c:9c:12:9f:46:9f:1f:40:2b:e3:ed:5f:c4:f4:d4:87:b1:
f8:92:d3:c8:ef:c7:62:96:09:2d:76:b2:f8:e8:65:55:41:f0:
55:71:46:44:42:df:0b:53:f7:2c:ed:61:a2:7f:15:ca:a0:5c:
63:71:20:f0:74:15:64:13:85:af:95:6c:4a:c8:56:3b:9b:c5:
1d:be:84:4f:4d:45:7f:f5:cd:45:7d:f4:46:58:0e:b5:79:03:
ea:f2:65:54:44:45:ac:96:fd:62:09:e1:e6:98:49:8c:f8:5b:
11:f5:bc:aa:5d:45:7e:e6:d4:04:df:65:2d:e2:28:61:55:8f:
16:e2:54:a9:37:5f:77:63:d3:fa:8f:ec:af:3b:85:42:10:f1:
e2:31:83:33:9d:b5:d2:ed:df:63:d6:10:49:c1:90:84:bb:ab:
3b:87:5c:d0:72:4d:f4:b3:8d:2e:46:fd:40:b2:13:8a:96:e5:
dd:91:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:26 2025 by rpki-client on console-fra.rpki-client.org