Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: RSEjYPjI2RtL89Ky3Z//taQVh2ByMRNBOZEupBSm+aM=
Subject key identifier: 5B:27:5D:C1:84:81:1E:F0:21:A7:00:FD:74:E2:A5:24:F3:78:BE:04
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 0194C46343AC46BD594B749BB1F516044860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 038D
Signing time: Sun 02 Feb 2025 02:00:27 +0000
Manifest this update: Sun 02 Feb 2025 02:00:27 +0000
Manifest next update: Mon 03 Feb 2025 02:00:27 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: zkocfmQAha/Xm3WukwUn/yD1jPcyRtJJrvw86++2law=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:43:ac:46:bd:59:4b:74:9b:b1:f5:16:04:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Feb 2 02:00:27 2025 GMT
Not After : Feb 3 02:00:27 2025 GMT
Subject: CN=5b275dc184811ef021a700fd74e2a524f378be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:a3:d8:da:1a:f2:9e:7a:b2:01:59:f9:9e:
60:b2:97:ab:21:ee:27:45:53:d3:89:3f:0f:cf:b0:
00:29:26:7f:af:c5:55:9f:1a:a2:e9:48:78:ef:6d:
e4:6e:f3:f2:ec:1e:f4:9f:38:a2:c7:ed:3b:04:94:
1d:78:1a:90:25:f9:c4:e0:a8:0e:7c:1c:90:98:ed:
ef:d3:41:d7:a5:99:e3:c5:3e:54:13:80:4b:d7:ac:
ed:5c:5a:e1:a7:87:8a:0f:f5:a2:24:a0:51:2f:19:
bd:4c:b3:d4:2b:cf:70:c8:f5:3b:2e:42:82:39:c9:
b4:ce:6d:ea:96:e0:a0:d7:e5:51:27:70:f0:5a:b2:
19:9c:ad:31:22:0f:ec:9c:f7:3f:4c:8e:09:c7:3c:
e9:3d:98:39:d6:75:64:f1:ab:05:46:d8:3e:d0:0b:
61:ae:80:25:20:95:5e:1a:a3:d5:a1:51:92:81:6f:
99:51:35:6d:34:21:da:c2:47:ea:43:37:ca:c7:66:
e4:25:5f:dc:89:86:3b:f1:8c:c8:5e:16:e3:a7:01:
01:0c:37:a7:e2:13:0e:24:87:24:90:a1:50:a1:59:
33:f9:d4:49:93:05:ff:32:a7:be:a8:6f:90:41:0a:
d6:43:2a:1a:bd:2a:42:44:6f:f2:5d:d5:05:e2:7b:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:5D:C1:84:81:1E:F0:21:A7:00:FD:74:E2:A5:24:F3:78:BE:04
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:19:5a:16:9e:49:1c:e3:a2:57:1b:18:ae:9d:2a:68:76:
e2:8e:95:80:dd:f8:cc:a2:d1:cf:21:05:f4:7f:d9:7c:1f:bc:
72:57:57:27:b8:a2:df:7d:da:fb:6d:eb:a1:1c:1f:51:76:aa:
83:93:7e:11:0e:d4:07:b5:26:95:1a:07:d8:6b:b2:80:f6:00:
b8:02:6d:8e:ca:24:60:a7:80:7f:7c:45:a0:22:b1:be:a8:e1:
ef:66:a1:17:8f:16:aa:dc:37:ae:5d:0c:de:b2:27:84:3f:a4:
04:bd:e4:1f:33:ce:88:35:37:d1:4b:ba:44:7b:6f:60:92:b3:
42:64:74:bb:7c:fa:c7:c2:6c:47:9f:9d:14:af:ab:78:f5:76:
d5:44:cf:64:7c:27:5f:74:1f:60:ad:cc:0f:fe:22:ca:ca:1f:
3d:24:59:0d:dc:5d:9e:10:79:11:30:81:22:61:2b:cd:8c:8a:
c0:f3:9d:c8:77:49:29:ed:55:12:42:7d:c4:15:c0:b0:ad:e8:
b1:3f:67:1a:68:1c:b8:ee:c9:68:f1:38:6f:66:21:99:03:62:
75:66:82:b9:7d:b9:bc:1f:61:2d:13:38:38:9f:1c:da:23:73:
89:66:a0:32:8f:c1:02:66:b0:a7:d2:30:8f:fe:ee:79:10:35:
07:44:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:17 2025 by rpki-client