Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: uTP9/oiQni8EC5d65dl1J9ga5PAyAnPru6n1FhUwzUQ=
Subject key identifier: 1A:9B:B5:9F:49:4A:78:B7:43:F9:86:01:9E:39:08:BC:B1:02:33:CE
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019510C7B0EE3699D5774BC1C45A5D29D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0BDD
Signing time: Sun 16 Feb 2025 22:01:17 +0000
Manifest this update: Sun 16 Feb 2025 22:01:17 +0000
Manifest next update: Mon 17 Feb 2025 22:01:17 +0000
Files and hashes: 1: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
2: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: 2Lw6Xai/Velk9znR8y98QSvCsGhr5HNCBM6F2so+sII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b0:ee:36:99:d5:77:4b:c1:c4:5a:5d:29:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Feb 16 22:01:17 2025 GMT
Not After : Feb 17 22:01:17 2025 GMT
Subject: CN=1a9bb59f494a78b743f986019e3908bcb10233ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:42:00:06:e3:8a:01:1d:8d:2c:d1:c9:55:
4c:f0:82:7a:e5:31:c1:3d:2d:6a:c4:72:ee:e1:37:
21:42:7f:2f:37:a4:87:fd:c9:e4:72:33:be:82:12:
7d:78:be:ae:60:5e:44:a0:e9:64:e5:32:48:85:44:
ce:a8:72:01:8d:6b:47:f4:2b:70:ef:aa:92:ba:2b:
ea:e9:d5:ff:27:e4:f9:56:8b:04:22:d7:07:40:3a:
4b:96:d7:8d:44:9a:f7:12:a5:dc:4b:97:4f:3d:6b:
1c:b1:3e:18:6d:54:c8:fe:b4:a1:0a:a0:ef:ff:43:
5e:d4:07:26:c3:ea:84:7e:32:b5:ad:b4:8c:e3:fa:
fb:2b:b1:ae:68:5d:d1:66:9d:08:29:6c:0f:ae:a8:
ca:38:9a:ed:0e:37:66:4a:3e:ff:93:08:5b:a4:7e:
54:dd:ef:32:f1:40:d1:47:ba:2c:a7:ed:26:ae:c0:
05:f0:fd:8e:e1:39:89:02:ce:22:b5:70:4e:e7:c8:
d2:9e:20:f3:31:b9:1e:2e:73:65:1d:06:c0:41:a5:
53:6a:31:28:b2:16:25:1a:89:bc:7e:3c:4d:c3:65:
89:82:6b:54:2d:20:2f:c2:f2:eb:27:66:4d:20:a9:
b0:f9:a3:37:6e:f2:5c:5a:23:85:58:c3:c0:ef:fd:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:B5:9F:49:4A:78:B7:43:F9:86:01:9E:39:08:BC:B1:02:33:CE
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:bd:ed:68:0a:2e:d1:e4:a2:e8:ce:96:5e:3f:b5:93:73:
7e:83:b2:4e:2e:03:66:6f:91:d4:e3:e1:80:5a:41:11:b9:b6:
fa:d2:b3:77:30:af:3a:ea:fa:8f:7b:7b:cd:c2:b0:9e:27:93:
0e:1e:df:09:b5:2b:06:78:42:54:41:ee:13:8a:e0:36:51:00:
ad:45:ae:74:98:77:95:21:53:fd:4d:0b:bc:bf:c4:c8:d1:e3:
db:ef:29:69:bb:2f:14:b1:23:3a:07:44:94:32:5c:f7:0f:d1:
31:41:d0:c6:dd:8e:59:a0:1d:16:32:9a:8f:fa:1c:57:55:4e:
45:1a:2a:f6:85:85:53:9b:5d:77:d8:6d:0f:80:f3:a2:c6:77:
b6:26:95:a5:db:d9:34:34:77:e1:58:25:c4:fe:3f:50:05:24:
3a:c4:6f:e9:2f:fa:d0:f3:4a:83:71:b3:f0:82:39:ff:f6:3e:
24:83:13:51:99:8b:b8:6f:00:ef:6f:20:f8:da:36:0d:7a:8a:
e9:0e:87:29:73:85:89:68:f6:59:ab:f2:ba:d4:6f:0c:08:88:
64:f1:ae:e0:2a:22:55:4a:7e:7d:1b:79:b8:aa:62:52:8d:4f:
e5:1c:8e:b9:df:9c:80:3a:26:82:40:fc:4b:22:77:fe:b9:4f:
0d:42:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:54 2025 by rpki-client