Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: Qcflz2mPQo5qsTf/OXg11i13Fb1XbZMM1xebr085T0k=
Subject key identifier: AC:D0:B4:B5:C8:D4:FA:79:B6:A4:D1:E3:F6:59:30:E7:63:C3:D4:E5
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 0195116C017F5174360661AB3022E87A891D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 145B
Signing time: Mon 17 Feb 2025 01:00:45 +0000
Manifest this update: Mon 17 Feb 2025 01:00:45 +0000
Manifest next update: Tue 18 Feb 2025 01:00:45 +0000
Files and hashes: 1: 9tr6yx1y8_YEiVByZ-MjQoIJAHM.roa (hash: jRgj+xVS51Pyi7Ww5Lf3Hkb3VrgrulAoFq5wFotKWJs=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: 95IFyv0AENWNjF9VDZMagaOTWBiOqclTOvMYoyLG+mA=)
3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
4: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:01:7f:51:74:36:06:61:ab:30:22:e8:7a:89:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Feb 17 01:00:45 2025 GMT
Not After : Feb 18 01:00:45 2025 GMT
Subject: CN=acd0b4b5c8d4fa79b6a4d1e3f65930e763c3d4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:66:59:54:3d:32:9f:71:55:eb:54:b7:a6:
c0:aa:5f:71:4a:a5:6d:c9:37:44:33:74:7f:62:58:
55:ae:56:9f:4b:fa:51:36:72:b4:46:ea:6c:79:59:
3a:a8:fd:7b:e2:ff:7c:29:a1:80:de:e8:4a:da:b8:
e7:8b:08:b9:cd:9d:92:6a:8f:a4:79:52:db:3c:bc:
21:8e:9d:15:18:c2:09:9a:04:2d:86:79:3f:ec:89:
33:96:c5:99:44:ec:ac:2a:9d:7c:19:20:d9:d2:6d:
47:50:8b:85:ef:12:c0:a6:02:ff:a9:c6:a9:18:e7:
a1:b3:93:c1:88:c4:23:ca:d0:68:d8:f0:3a:6f:00:
b2:0f:f7:47:a6:14:d6:49:5b:f7:f4:9f:df:f5:73:
d6:c9:44:3b:c9:c2:2f:a5:3c:b3:dc:ed:c0:a5:e0:
84:54:9b:1f:ae:e1:8c:b5:f4:a3:a7:c9:55:73:4d:
b3:6c:87:89:2e:f8:9a:7f:f8:56:3c:73:03:63:46:
11:a6:15:78:f2:0d:da:29:e7:2a:7c:38:52:27:7e:
d4:fb:00:6e:fb:87:f1:b9:31:ad:1c:10:7d:7c:8c:
e4:7b:51:a4:8d:6d:08:c1:df:c4:99:e7:53:2b:3e:
b7:ed:d9:bf:75:26:e1:17:fb:06:bd:93:fa:a1:25:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:B4:B5:C8:D4:FA:79:B6:A4:D1:E3:F6:59:30:E7:63:C3:D4:E5
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:50:a9:39:a7:2e:a8:c8:82:b9:52:9b:00:85:6e:63:3f:95:
89:14:37:11:69:54:d8:db:ff:67:77:72:fc:32:b2:7a:0c:a6:
14:1d:68:bc:eb:d8:a0:85:da:6b:95:aa:ca:36:ba:74:9f:5f:
9c:1a:63:46:f8:b0:94:d9:41:c8:d4:1e:29:55:df:bd:d0:3c:
71:68:e8:d6:58:3b:95:08:60:3b:30:0e:cc:40:29:33:b2:2f:
2c:48:b1:b4:44:2f:79:5a:a1:80:6b:5c:08:f1:fe:7c:2c:89:
7a:91:ad:40:ae:95:54:1c:11:9e:86:cd:d6:2c:31:9f:cc:04:
8c:78:59:5f:f5:aa:42:7d:fa:9e:5a:02:7e:59:a8:82:12:2a:
45:ca:c9:3f:96:14:ee:54:8e:ae:82:39:29:4c:cd:2f:66:f1:
ec:ca:b2:56:90:cb:65:72:7c:96:ea:dd:3e:a4:d4:ee:3d:e1:
20:76:9c:ee:de:97:cf:c1:a4:1b:da:3e:c2:84:98:d3:50:6a:
a3:3e:cb:fd:3c:0f:0a:9c:37:10:f1:b4:3e:96:8a:ff:e9:6c:
d0:6a:d0:15:b7:fd:5f:f0:c2:8a:14:da:f2:db:13:2a:68:68:
57:86:6b:3a:62:2b:5b:72:73:5c:d2:2e:7f:8a:86:f3:ac:08:
11:af:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:19 2025 by rpki-client