Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: +Kmz16T8tqt+Ki/p2lX9v+lMWKxj5iSYGdNk4VXDAPs=
Subject key identifier: 67:DB:31:CA:36:F9:20:41:83:4C:3F:83:F7:18:C7:48:8B:49:11:41
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 0194C4D164CA664AE9E82C89EC17E7C5C8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 04:00:44 +0000
Manifest this update: Sun 02 Feb 2025 04:00:44 +0000
Manifest next update: Mon 03 Feb 2025 04:00:44 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: 0yE2SjQ9vQXV3531q1wCEXqLC9lVxG14BMcqWWK8nys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:64:ca:66:4a:e9:e8:2c:89:ec:17:e7:c5:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Feb 2 04:00:44 2025 GMT
Not After : Feb 3 04:00:44 2025 GMT
Subject: CN=67db31ca36f92041834c3f83f718c7488b491141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:1c:10:9c:46:03:75:4a:2b:dd:45:94:b4:
41:c7:b4:bc:a0:ae:94:f8:62:4f:e0:c2:ef:cb:57:
b2:ba:bc:05:6a:db:28:d2:1c:7e:16:e4:52:26:ff:
23:d0:06:34:fb:6e:30:2d:c7:ad:5f:57:79:a4:ed:
76:d8:17:04:a9:1c:90:7c:8c:8f:f4:d3:75:1e:8b:
11:77:0c:f5:d5:e3:c6:aa:fd:88:78:0b:10:90:2c:
24:ff:f5:93:a6:c5:89:61:03:33:14:d6:fb:fb:83:
b5:c5:59:8b:bd:2f:0f:01:18:86:52:46:68:ff:73:
40:c0:da:cd:f9:3f:7b:2d:9a:e0:f5:08:45:c2:ad:
84:ef:06:e0:4a:31:cd:d8:cf:04:7c:85:83:7e:ce:
b3:52:70:99:db:91:03:e0:a6:02:92:a9:0d:c4:e4:
47:ff:1f:ce:a4:17:0e:da:83:ce:c1:f6:d7:83:5f:
de:d6:7f:46:71:c9:8d:d0:11:f4:56:c4:d7:bc:09:
e3:61:20:e0:9d:3b:91:53:d0:1c:09:7c:af:c0:75:
5f:03:27:d4:39:f7:db:01:61:1e:4c:f9:37:de:50:
5a:e1:24:c4:80:96:81:6f:7d:74:a5:97:41:25:bd:
2f:a6:cb:6a:cc:2e:57:bf:4f:fb:4c:b8:85:81:55:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:31:CA:36:F9:20:41:83:4C:3F:83:F7:18:C7:48:8B:49:11:41
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:50:60:09:16:71:c0:3f:16:1a:51:27:89:be:b7:33:7f:
31:dd:2f:fc:63:22:16:58:31:ce:51:75:2b:4b:8a:7f:06:93:
69:36:e7:6f:12:70:7e:ac:f6:aa:04:aa:78:65:0e:92:c9:92:
3e:12:cf:f0:90:eb:ac:0b:47:81:0a:24:c8:67:67:40:a1:12:
2b:e4:db:f2:17:26:e7:f3:e7:0d:28:96:8d:1a:7a:81:5d:f3:
c7:8d:b6:7a:c2:9a:7d:e4:bb:9a:08:22:c0:38:e6:8c:5b:26:
6a:3e:b3:73:f5:57:64:4b:22:f9:49:dd:54:5d:34:de:05:63:
54:c3:0e:ef:3e:a3:0d:3d:29:1e:1a:31:ba:80:7d:0e:03:71:
3d:97:58:2f:58:ff:17:e4:4a:b1:3e:ad:7c:37:c5:e8:f5:b5:
4c:4b:38:ba:d3:75:8a:c2:1f:5c:11:e4:19:51:b9:7a:8f:d9:
72:a6:f7:ce:3f:b3:6f:2f:10:20:13:e3:01:e6:5c:07:59:1f:
eb:70:e0:cc:e8:ae:29:7a:66:83:91:74:de:bd:31:a4:7f:db:
8f:65:ca:8a:80:51:34:84:cb:f4:de:30:30:cb:c0:c0:fb:ef:
0c:69:ec:cb:b7:73:27:8b:bf:c7:b6:ee:b2:2e:ae:33:fd:14:
d2:de:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:38 2025 by rpki-client