Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File: TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier: JSGOx4GU7MondVhwbOJCQUT8GJur+PYS5lmqmt1+MdQ=
Subject key identifier: 5D:CF:87:AB:AE:EC:87:A6:A5:45:10:E5:40:60:5F:9C:E0:7B:A5:6B
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 0194BAF27852D5783A485F0ACBE09ED36755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number: 03D6
Signing time: Fri 31 Jan 2025 06:00:40 +0000
Manifest this update: Fri 31 Jan 2025 06:00:40 +0000
Manifest next update: Sat 01 Feb 2025 06:00:40 +0000
Files and hashes: 1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: A8+tzhbEwmripLMZRyAxqvslLIIQKn7woCf04O17+CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:78:52:d5:78:3a:48:5f:0a:cb:e0:9e:d3:67:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Jan 31 06:00:40 2025 GMT
Not After : Feb 1 06:00:40 2025 GMT
Subject: CN=5dcf87abaeec87a6a54510e540605f9ce07ba56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:5d:90:8c:d3:70:0c:6b:f0:55:67:1a:e9:
d2:b6:a4:5e:95:e2:4a:4d:f4:f7:40:6e:60:a1:40:
d4:64:12:70:10:04:ed:43:27:cd:8f:a6:d2:aa:b9:
e8:5a:f7:b6:0d:9d:c9:d7:83:01:b8:4b:c9:e9:fa:
f1:b5:d2:a0:99:45:74:60:af:db:9d:7b:af:4d:c7:
ce:3b:49:db:6f:af:cc:af:ed:74:f3:00:96:5a:ac:
f5:f2:9c:d6:ca:c9:61:27:c4:1b:7e:a3:89:15:fb:
41:ee:12:a2:8a:18:b8:16:77:9a:1b:e2:d4:c7:48:
cb:06:39:79:c7:da:cf:b2:04:11:9d:9a:48:c2:32:
1a:86:fa:0a:f2:0e:bc:a8:0f:8c:2a:93:8a:dd:1b:
67:d6:5c:8e:b9:52:8d:94:a3:58:e6:f1:34:01:9a:
a9:6f:8c:39:60:ea:7b:ee:c1:ee:4c:97:68:1c:08:
6f:f3:b6:d4:93:97:42:05:31:0a:f3:5e:36:b8:0a:
c4:ce:73:17:9b:d8:70:84:51:b1:68:db:42:8e:db:
b7:8b:c7:6c:af:50:1d:44:00:4f:3e:c2:8d:7d:d3:
35:39:a9:22:c0:49:96:99:d0:12:8f:1b:4a:79:05:
28:2b:6b:e8:2e:2d:8f:d3:87:ef:aa:77:5a:56:de:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:87:AB:AE:EC:87:A6:A5:45:10:E5:40:60:5F:9C:E0:7B:A5:6B
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:64:eb:c1:cb:4e:e5:d1:56:6d:27:9a:7e:dd:e2:c7:07:
6d:c9:ba:57:76:91:26:34:8a:5b:3a:db:96:29:78:ff:c2:fd:
f9:e2:a9:87:30:68:af:0f:81:58:0c:29:6e:70:f5:46:6d:1f:
7c:8d:b9:48:ae:f9:78:00:fd:50:37:a9:34:e2:88:aa:fa:dc:
68:6c:ea:14:0a:39:c9:b5:b9:2c:dc:62:db:e0:21:2d:0b:d1:
cb:ae:95:a4:01:af:4c:d1:c6:d6:10:b7:75:d3:52:35:b4:be:
ec:e1:e6:84:e8:b5:c3:97:fa:72:5e:05:d0:2e:52:bb:54:dd:
60:b9:17:82:0b:75:5c:9e:7f:da:e2:6c:67:4f:53:a5:0f:f0:
5b:66:37:56:33:f8:cb:96:34:2d:a6:9f:5e:76:ba:82:e2:a1:
e2:c9:67:16:02:46:e3:d7:c0:e1:68:90:dc:08:e4:d0:be:46:
35:47:03:56:bb:3b:2d:f4:8c:88:01:75:f3:b6:75:c4:bd:1c:
ae:72:30:0e:5e:1b:95:63:a8:32:58:1a:b0:ca:63:14:42:aa:
e5:b3:19:cf:97:27:ee:e9:70:f1:ca:d4:90:dc:a1:03:be:f9:
55:f4:bc:e7:31:df:6b:4b:68:7e:f2:14:d2:5b:55:4c:f2:83:
a7:e0:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:19 2025 by rpki-client on console-fra.rpki-client.org