Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier: YGyE04c3RsjYbvUWcVB8Bx1hQQD6tloo+kP6bzK6s0Y=
Subject key identifier: 4F:7F:9B:D2:41:1E:6B:CD:93:1C:62:29:AE:B6:D2:51:43:A1:2F:A2
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial: 0194C3511DF4700F486D8974BDC6515929A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number: E9
Signing time: Sat 01 Feb 2025 21:01:00 +0000
Manifest this update: Sat 01 Feb 2025 21:01:00 +0000
Manifest next update: Sun 02 Feb 2025 21:01:00 +0000
Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: MNpSgH00MnaX6i+j/zCU9v4NIXfcfnCfKi/hr0EknsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:1d:f4:70:0f:48:6d:89:74:bd:c6:51:59:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Validity
Not Before: Feb 1 21:01:00 2025 GMT
Not After : Feb 2 21:01:00 2025 GMT
Subject: CN=4f7f9bd2411e6bcd931c6229aeb6d25143a12fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:2f:08:36:4a:1f:e2:e9:82:9d:ef:a1:dc:
b7:21:1c:63:cb:9f:5b:c7:88:10:3d:4f:60:28:df:
46:1e:c5:a6:84:9a:a5:a0:8b:fa:af:39:da:01:8a:
28:1d:e5:dc:04:b9:d7:98:70:8c:9c:3b:36:69:37:
fb:96:89:81:9a:14:55:02:80:64:36:87:e7:ad:d3:
58:2d:1b:cd:b5:b0:19:89:1c:99:63:02:e5:ef:91:
e4:db:bc:bc:b2:20:c1:b6:e7:ba:de:6e:33:fd:77:
b9:7d:13:cf:47:b8:c0:6c:2c:93:27:4c:a7:03:4f:
f3:e0:0a:91:f9:76:d6:38:36:01:96:2a:1a:fb:01:
1c:98:88:82:a7:29:3a:43:3a:41:9f:17:d8:0d:47:
2e:bd:56:38:37:ba:54:5a:bc:5d:fc:7f:95:f0:c9:
83:07:9b:38:3e:4d:7f:b3:f7:68:47:01:38:a4:e1:
21:38:26:30:4c:25:ea:f2:1a:36:24:5e:3a:3a:55:
0b:a7:ac:5d:90:5c:e3:36:9e:c8:bf:0c:26:cc:65:
95:d2:14:87:45:93:22:5c:c4:3b:24:a9:52:b9:33:
8f:50:97:5b:47:88:23:8a:a6:9e:68:57:d1:0f:b8:
82:ba:0c:49:61:eb:e2:90:5a:87:b0:d6:4e:81:94:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:9B:D2:41:1E:6B:CD:93:1C:62:29:AE:B6:D2:51:43:A1:2F:A2
X509v3 Authority Key Identifier:
keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:b6:d9:07:10:32:2e:a2:cc:9c:a4:c2:06:98:6e:01:69:
b0:65:a0:78:7e:99:39:2c:5d:af:c1:17:23:1e:d5:0a:69:27:
51:28:61:66:0c:d6:b8:20:c7:1b:fd:39:36:aa:4c:fb:2b:71:
85:63:08:8a:9e:f6:31:e5:c0:8f:f6:98:dd:1a:ad:6d:b8:34:
40:20:da:f1:2d:73:2e:20:07:15:b6:47:82:98:7e:49:25:0d:
34:73:8b:3c:b0:38:6d:30:12:10:a6:cd:e5:22:37:73:b3:fc:
80:fa:f3:9f:f7:35:de:38:7c:78:05:21:19:9b:a7:ba:79:65:
f7:3d:85:b6:03:3d:0d:11:66:04:d8:15:3f:34:c5:75:7c:3b:
41:0e:cf:0c:e0:ea:23:79:ee:80:40:ac:d0:dd:4b:37:62:71:
40:b3:f9:6d:82:34:80:b8:01:b9:c9:68:ad:f3:b4:8b:f3:a5:
20:d0:a1:76:41:07:57:7e:57:64:6b:65:b9:a4:00:76:46:49:
87:2a:eb:b7:04:32:7b:d9:bf:aa:1c:85:74:02:5b:c0:ce:f3:
0a:bf:b9:ae:cf:d9:d4:4b:8e:13:bc:a3:19:f1:9b:9d:29:8d:
bf:a9:8e:61:c7:36:b6:fb:44:2d:d5:5c:1a:78:23:50:a5:92:
bd:24:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:51 2025 by rpki-client