Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: bqx+wbZFJdNIsI5WNLR39GRLnaMTlzFHzkVJZv4DJA4=
Subject key identifier: DA:4A:BA:0B:D7:14:4C:75:3C:5D:47:AB:48:26:3E:A7:EA:E3:28:0D
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 0194BB6036CE577BF0FEB3FDF520ED9E8858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: BXrDdYZTYF8ZCVqE3T9Z1B9uBL46nYDBpf4MzE3a7WE=)
2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:36:ce:57:7b:f0:fe:b3:fd:f5:20:ed:9e:88:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=da4aba0bd7144c753c5d47ab48263ea7eae3280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:2f:13:40:3c:68:25:e0:c4:03:b9:14:91:
06:ef:53:89:1d:f8:89:fd:78:5d:84:3f:5e:dd:ea:
a8:d1:cd:c7:8b:a5:8a:0b:f2:49:ac:d1:05:75:fc:
5d:a4:a6:4d:54:77:5c:87:df:b3:05:23:20:7b:85:
03:ab:71:c4:6d:a8:19:9d:77:f6:f7:b1:99:c9:bd:
0a:2d:6f:01:6f:ba:a3:a0:9f:e9:ea:55:a7:04:af:
b0:a3:ad:9e:04:10:32:10:02:03:24:2f:2c:79:8d:
22:3a:d7:93:17:29:ed:5e:64:a0:74:8a:fb:90:4a:
02:98:7b:b4:c3:04:b8:16:ba:91:34:9a:b9:76:ef:
43:66:5c:f5:aa:85:5a:e2:ad:bb:2d:63:ea:b2:81:
f1:f5:f7:64:44:c6:22:9d:21:51:62:a7:d9:0a:bd:
d3:48:80:cb:80:04:49:cb:b8:dd:9f:a9:b1:e0:4e:
cd:79:7a:be:fa:60:09:33:21:9f:6a:18:f1:ac:45:
a7:c3:87:21:a1:72:1d:d1:3c:70:56:3b:fa:d7:a8:
8f:f0:4b:e3:7f:70:13:2b:b6:a2:0a:2a:2e:6c:de:
2b:ee:be:ad:f2:92:4c:41:12:e5:20:bd:55:ea:ce:
ff:5b:f4:2b:03:c9:66:e2:dd:22:fa:46:c1:e1:74:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:BA:0B:D7:14:4C:75:3C:5D:47:AB:48:26:3E:A7:EA:E3:28:0D
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:63:cc:aa:f4:3f:4a:6b:34:f1:8f:57:3b:97:70:fb:ca:
a9:d8:8e:87:7e:60:e1:cd:da:54:99:7e:a5:3b:c6:7c:56:23:
7f:59:5a:90:b4:20:3d:14:62:3a:db:0c:8a:59:fa:c5:7f:73:
e4:25:19:c1:f2:d0:8f:58:4a:8a:21:37:44:fe:ec:fa:b5:59:
c5:ef:62:23:2b:1f:2d:61:94:bf:7a:da:48:39:7a:cc:53:3d:
f5:1f:ca:cd:e6:b0:6e:83:51:5e:3b:9c:c8:65:3e:8c:90:59:
f8:a8:ff:73:9c:6f:66:f5:95:9e:b7:c7:57:a9:ec:fb:08:61:
e7:de:1c:b1:79:ed:11:d5:88:96:56:16:54:43:8e:2c:ac:a1:
75:72:c0:33:3a:b3:78:41:70:2e:c1:39:b8:88:44:a3:37:e0:
82:12:8f:c4:06:8e:35:9a:e7:58:f3:39:0a:5f:cc:6e:3c:92:
b3:b8:49:65:24:27:a6:39:a5:52:be:a1:3a:8e:f0:7d:57:8d:
99:a3:81:4e:6e:ff:3f:d8:f9:a7:78:4f:c3:0f:c2:89:8b:8f:
a5:91:30:41:c5:8e:c8:38:ec:c4:12:3d:5b:4b:f2:90:09:96:
6a:a9:eb:e9:77:ba:3a:52:8c:4e:13:87:ad:65:0c:fa:fb:29:
b7:ee:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:45 2025 by rpki-client on console-fra.rpki-client.org