Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: Xk3p/y8bx/CXehlb4jwbxOdh2UK777/B5/Ko+3pZXYw=
Subject key identifier: 72:16:CF:00:D9:2B:C3:0D:6E:85:BD:6C:79:7D:6C:DE:25:EF:47:9A
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 019511A2D5483EEBD8567B5AC7C7550F2EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 138A
Signing time: Mon 17 Feb 2025 02:00:38 +0000
Manifest this update: Mon 17 Feb 2025 02:00:38 +0000
Manifest next update: Tue 18 Feb 2025 02:00:38 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: SaF77FUVjMKCAHSdw0+/93lZvY+wJnPDmvMz58p0rwQ=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d5:48:3e:eb:d8:56:7b:5a:c7:c7:55:0f:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : Feb 18 02:00:38 2025 GMT
Subject: CN=7216cf00d92bc30d6e85bd6c797d6cde25ef479a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:91:ea:40:c0:ec:5f:22:fc:3a:23:ca:63:
11:32:9b:db:66:29:e7:69:79:29:4d:17:6c:be:c1:
1b:88:b7:20:61:a4:c9:d9:35:1f:01:c0:1e:95:bb:
bc:03:a9:18:3a:f5:3f:c4:d0:2b:69:88:45:ad:e9:
7c:de:3f:13:1c:e1:88:02:05:38:36:ee:87:26:c2:
4a:14:67:e1:11:bd:e6:82:9b:78:6d:6c:38:05:74:
51:d8:e2:c4:72:d2:a6:a5:ff:06:76:ea:c3:03:88:
ee:f9:1b:8f:24:82:95:a3:d1:a9:3e:07:9e:76:73:
8d:5f:8e:3c:b3:54:5e:35:f9:f7:b9:8d:d2:df:79:
db:5b:64:1c:74:d2:4a:d1:b6:8e:c1:5c:13:59:5b:
36:92:cc:83:e8:2c:f4:a4:5a:36:4f:96:50:a4:84:
cc:ee:68:ff:25:e4:a3:fb:bc:28:b6:d8:6c:85:4b:
5c:76:06:50:33:1f:65:cb:f2:ec:9a:93:57:50:1d:
84:fa:f3:66:6a:70:44:44:ae:54:64:8f:8c:dc:e7:
69:fb:80:20:8e:5c:f5:54:a6:f5:2f:c5:39:d6:7e:
d0:52:f2:90:21:cd:03:5d:be:4f:ed:b3:2a:4b:3c:
f6:5e:55:c1:ea:51:7f:40:34:e3:dd:5a:56:98:5d:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:CF:00:D9:2B:C3:0D:6E:85:BD:6C:79:7D:6C:DE:25:EF:47:9A
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1f:22:0e:ee:6e:87:b4:1a:fe:75:03:04:09:8a:f6:f5:64:
d6:a9:c9:ab:b4:27:a3:da:56:fc:2a:fb:ee:de:7f:fd:8f:91:
89:80:2e:ce:c3:57:be:1c:71:a5:f4:83:4c:da:a8:bd:7b:f6:
da:96:15:8c:3e:78:63:a1:45:c2:0f:ff:5c:65:f7:0c:a8:66:
4c:b6:93:68:c5:a9:bd:52:b4:78:c6:80:f0:f3:f2:3b:0e:ad:
0e:3e:4b:96:a3:a9:b0:2b:4a:2a:21:bf:ea:9c:7c:2a:48:ac:
cf:82:ac:13:6a:f8:7b:5a:e0:38:d0:a9:e5:9e:9a:58:ea:87:
c4:8d:89:ab:14:7a:e7:03:9d:15:84:6c:9d:43:7d:10:65:71:
0b:03:7c:8b:5b:ec:ee:9c:36:19:db:bf:1b:44:7a:b4:56:ca:
dc:51:ae:0c:30:50:83:55:32:ef:70:d1:6e:11:de:a1:20:fb:
de:73:97:a3:3e:27:0f:19:d3:82:c8:23:e1:31:54:be:82:42:
0b:1e:e5:36:a1:16:ad:88:42:bf:02:16:7b:06:16:9f:a2:25:
fb:17:3f:45:4c:7a:57:1c:b3:27:f6:07:9b:3c:8f:1f:eb:19:
ae:13:59:1e:d4:d6:16:51:6c:45:dd:21:a2:67:b0:0c:d7:a3:
d7:74:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:32 2025 by rpki-client