Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: kYUuMwmBQ9LI6zJiHGdSoCv7GooJAIrTPb5zTL0puVM=
Subject key identifier: 1D:6A:C9:D9:79:C4:84:0F:88:D9:F4:78:2E:AD:AD:9E:45:12:31:47
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 0194C42C515D36E5E0A5EA83CF8D3CD0F01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 142B
Signing time: Sun 02 Feb 2025 01:00:26 +0000
Manifest this update: Sun 02 Feb 2025 01:00:26 +0000
Manifest next update: Mon 03 Feb 2025 01:00:26 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: acCUYt98XW0tUGKyL8ouZQMscqXBgUkd2RUxxYLpuoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:51:5d:36:e5:e0:a5:ea:83:cf:8d:3c:d0:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Feb 2 01:00:26 2025 GMT
Not After : Feb 3 01:00:26 2025 GMT
Subject: CN=1d6ac9d979c4840f88d9f4782eadad9e45123147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:0a:51:7c:c0:a8:a2:44:83:2e:99:e5:4c:
2e:5c:17:92:15:5a:90:80:e7:aa:12:95:93:bf:9f:
dd:ad:ef:22:5b:91:e9:c6:0e:19:d3:c4:f3:7f:86:
a8:bb:38:48:79:96:f0:f9:db:cf:4b:b5:c7:e2:18:
5b:32:49:ac:a6:68:c1:d5:22:21:03:22:58:cd:69:
ff:4f:d3:29:72:15:0e:40:dc:13:dd:71:6d:86:71:
87:6d:e0:bd:89:94:4a:c2:28:f8:aa:15:39:5a:fc:
2d:5d:82:19:1f:98:ee:64:09:b9:03:90:dd:23:49:
d5:ac:8c:f6:01:1e:c5:b8:3a:91:d2:86:f3:4f:77:
ed:7c:36:1b:e1:94:03:e5:8f:d0:4f:f3:a2:0f:fd:
ee:dd:d4:28:2e:38:44:d2:c3:21:ed:1e:f0:bd:da:
a2:af:c6:65:55:a8:4e:8b:e9:b8:bd:ae:6c:5c:91:
df:41:ef:91:85:c1:9d:70:5d:8c:61:56:1a:93:b7:
21:71:3f:64:64:dc:c1:9f:e4:11:64:41:54:79:82:
46:6a:6b:4e:de:70:7d:13:17:93:c5:b6:4b:f1:a6:
fb:c7:85:24:26:c7:58:06:f9:27:22:c8:2f:38:83:
49:c7:ad:ac:96:f7:04:57:a5:85:55:71:bf:f6:82:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:C9:D9:79:C4:84:0F:88:D9:F4:78:2E:AD:AD:9E:45:12:31:47
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:63:ed:59:73:23:86:e4:dd:50:da:35:7d:48:be:9f:5a:3e:
36:fd:72:c5:03:b6:88:dd:26:11:1a:9e:91:65:8b:44:52:ca:
0f:88:0f:9e:0f:53:4d:a8:96:ff:a2:a9:08:80:89:ee:bb:15:
d6:3f:7d:39:fa:cb:cb:3a:10:18:41:62:1d:b4:c8:75:94:99:
13:64:54:38:9f:9f:6e:b3:09:b7:3a:a9:3e:18:25:df:c8:5c:
e9:52:d2:81:32:84:40:7c:a2:cb:80:06:ba:83:90:f7:7b:ed:
af:ea:90:1f:25:03:33:bb:e6:3d:53:73:c6:08:c5:1f:cb:97:
53:75:50:dd:9e:98:1c:19:2d:0c:96:6f:bd:13:05:42:4d:d5:
6b:4f:40:4e:3f:8a:52:00:e3:dd:b2:ba:4e:9f:3a:70:0e:ed:
b9:38:b0:f5:0f:5c:a8:6b:e9:6f:0a:bb:3f:fb:89:05:fa:11:
fc:31:1a:29:e2:5d:4b:6f:cf:2b:48:6f:f9:b3:d7:e6:a1:f1:
e2:33:86:5c:66:f6:f6:f8:c4:60:fd:0c:4e:00:0d:da:7f:32:
fd:fd:a3:28:d4:ca:2a:a0:12:3f:c5:eb:94:b6:ac:bf:40:80:
62:ff:18:d2:e6:01:12:78:75:54:38:b0:c3:67:51:96:19:4d:
1f:0a:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:02 2025 by rpki-client