Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: 5dhSxYCN1P156ieT7IRw+eJXXCsk5CWTfaE1JFWYVHQ=
Subject key identifier: 70:52:41:0B:B5:1E:48:10:33:CE:F9:2C:E8:2C:74:25:CF:16:A8:AC
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 0194C50833C720439ECCA4957F4B18A6B9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 05:00:36 +0000
Manifest this update: Sun 02 Feb 2025 05:00:36 +0000
Manifest next update: Mon 03 Feb 2025 05:00:36 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: 15qTmTeXGrql5HvA4Rq8zAvoC3pz5W6YsEdAVLQPVgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:33:c7:20:43:9e:cc:a4:95:7f:4b:18:a6:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Feb 2 05:00:36 2025 GMT
Not After : Feb 3 05:00:36 2025 GMT
Subject: CN=7052410bb51e481033cef92ce82c7425cf16a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:91:66:87:e6:f0:95:b1:b7:11:bd:d6:46:
9e:31:21:a8:ce:9c:3e:14:fc:4c:95:b3:fd:61:33:
d7:ab:4d:06:60:26:80:9b:2b:9c:65:b0:5b:be:b8:
29:2f:c4:be:73:14:27:28:40:6a:32:da:61:67:b6:
2a:db:98:6d:58:d4:13:97:6e:13:5b:01:a0:2d:49:
4e:e4:4b:0d:dc:71:bf:b5:84:43:78:a3:5b:ea:61:
0a:60:14:d7:a4:8b:b1:3c:89:66:45:48:05:ab:55:
03:48:cb:f8:0c:f8:5a:2d:ab:84:4e:36:ce:3f:e2:
22:3f:60:61:bf:88:3e:dd:9d:22:08:83:c2:30:10:
da:d4:f3:63:1d:63:64:7d:3c:e7:0e:54:8e:91:c5:
c2:9d:00:af:f6:a8:7b:7b:3f:b9:06:5e:62:e5:cf:
f6:d3:81:e6:00:cf:31:e9:ed:2c:c0:a0:52:8c:2c:
31:c6:32:56:cd:a8:80:e6:24:d0:68:0d:4c:b7:62:
e1:68:12:ab:cd:85:8c:47:64:78:45:bc:a0:1b:67:
35:6d:77:95:4e:63:1b:0c:ee:a3:2d:fb:16:6e:a5:
99:a5:23:dd:50:04:d5:f1:fd:4d:31:ca:ee:27:34:
9d:f6:49:d3:89:7a:80:64:2e:d5:f0:1b:ba:2f:4e:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:41:0B:B5:1E:48:10:33:CE:F9:2C:E8:2C:74:25:CF:16:A8:AC
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:a6:21:f1:a6:1c:f1:e6:b1:78:d5:49:91:2a:dc:40:4d:
6f:a0:0a:13:21:a9:62:4a:b8:8a:e8:e5:97:61:07:d2:d6:f7:
6e:29:d8:e4:43:aa:fb:b7:79:e1:a8:1e:8a:be:59:c5:da:95:
6a:3a:19:93:73:ac:a0:94:8c:49:f5:17:90:ef:45:2a:30:5a:
11:28:32:f4:c8:43:8b:83:d5:11:f6:07:58:0d:59:5f:f6:20:
d5:02:c7:1e:64:21:87:58:23:b1:bd:f6:05:90:d0:a3:85:f4:
1c:64:bf:96:2e:c3:78:c3:51:9e:f4:9b:48:f7:f3:d0:39:bc:
b4:6e:96:13:f2:40:51:c7:89:0f:40:7d:cb:10:1f:5b:4d:8d:
71:23:78:83:50:6a:dd:c2:00:fd:f5:7d:23:7e:5a:41:f9:43:
54:05:4b:7b:12:1e:ad:88:e4:2e:97:bf:7b:c0:88:7b:8f:16:
78:12:be:d9:2b:73:59:6a:41:0d:9e:a1:db:6f:9b:37:6b:cb:
f1:03:e8:3d:95:dd:8a:44:60:04:08:67:ad:35:70:7c:dd:2d:
4e:58:b5:42:ac:2c:72:7f:a2:46:b5:c8:10:1e:4f:1f:a4:50:
cd:2b:a0:d3:be:f8:db:cc:bb:ba:f8:fb:13:dc:2c:34:c9:28:
f2:6b:2f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:37 2025 by rpki-client