Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: cdrak6Tz4E9b8NEh6beoKMyPQn2nqLAin0CFu2+wcCE=
Subject key identifier: 9B:0D:AC:B3:11:C4:F1:B8:52:BB:16:D9:50:DC:09:BA:10:7C:F7:B6
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019511D94FBC1E749311DA6E36140905132D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:09 +0000
Manifest this update: Mon 17 Feb 2025 03:00:09 +0000
Manifest next update: Tue 18 Feb 2025 03:00:09 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: 1p14UY2eSCdj7UeF+Z7fIFBwQjOAIjd4dnX/9Kbbuio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:4f:bc:1e:74:93:11:da:6e:36:14:09:05:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Feb 17 03:00:09 2025 GMT
Not After : Feb 18 03:00:09 2025 GMT
Subject: CN=9b0dacb311c4f1b852bb16d950dc09ba107cf7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:7e:c3:24:b2:30:78:89:20:74:47:e9:91:
87:28:3d:b7:ed:51:03:72:a8:34:1b:f5:51:79:07:
a5:ad:5b:fa:3e:9c:71:53:7a:ea:90:33:a1:ec:6f:
e8:a6:53:1c:a4:4e:a0:0d:fa:ba:9b:1f:12:ea:37:
47:08:88:b0:f3:26:ed:7d:a1:4d:9a:54:a2:73:1a:
5e:4d:c3:68:7b:28:42:9e:00:04:ef:6e:b3:60:08:
41:f3:5d:74:97:78:5b:ab:74:ab:6a:59:f2:6d:49:
34:75:bf:86:90:ae:ed:f0:01:04:8c:33:93:a3:de:
85:4f:8a:06:39:3b:bd:a1:65:9d:dc:9d:04:7a:ba:
2e:46:2b:51:ce:3d:03:fa:b0:f6:0d:b0:3a:88:02:
40:5c:94:c7:cd:c6:f7:6c:f2:80:5f:6b:2c:8b:72:
c0:01:31:81:1e:66:17:c5:a6:6b:c2:b2:d9:5a:a0:
7a:d3:e0:ae:2e:2d:4b:93:73:0f:82:ee:bb:3d:4f:
a2:2f:ed:b6:05:65:12:13:c2:7f:b5:e9:f4:76:3d:
c3:22:18:ed:80:b2:40:ef:63:f4:49:20:1a:52:87:
2d:31:79:42:51:5b:57:df:43:c5:8f:1b:ce:28:4f:
60:a2:1c:d8:38:40:58:be:5b:f2:49:b3:56:e6:00:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:AC:B3:11:C4:F1:B8:52:BB:16:D9:50:DC:09:BA:10:7C:F7:B6
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:6a:0e:a5:5e:dd:3c:fe:84:9e:f0:e1:98:1d:9d:d1:e3:
a1:22:fb:ea:41:bc:4a:b0:f0:d8:58:50:f4:fa:2d:70:f1:3e:
29:be:50:87:aa:0b:4c:f6:03:5f:34:65:d6:b5:82:4c:06:49:
d1:8b:8e:a4:8c:4a:1f:14:4b:39:60:20:6f:d9:b3:1e:c4:0a:
01:55:b3:0c:83:df:11:e6:ac:b6:2a:c4:79:86:64:fe:a0:09:
45:4d:f3:c2:4d:3c:18:17:80:b6:86:8f:96:63:55:4f:28:e1:
d8:7a:37:26:63:c7:84:b1:0a:8e:d7:dc:51:63:f3:2f:ad:1d:
12:20:9d:d5:57:18:1e:e3:5d:9b:43:c3:32:1a:1a:a5:4c:aa:
1f:52:69:9a:bf:bb:ff:90:bf:2e:ff:15:48:e0:35:17:dd:23:
44:4a:49:68:42:55:33:a0:6d:94:77:a4:01:f9:b3:67:a7:41:
83:36:a3:19:49:5a:fc:24:27:91:32:47:80:bd:c1:6b:dd:87:
cd:da:f1:19:0b:48:c7:65:3b:90:5f:d5:aa:8b:61:d1:7e:4c:
b1:38:d5:50:f0:af:70:7e:64:5a:47:6f:f5:46:59:19:fd:40:
09:65:a2:17:49:e4:0c:3f:48:e0:bc:69:03:12:f8:2a:c6:e4:
10:d6:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:28 2025 by rpki-client