Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: 1cMDL4hAij62VHJK2BC93h6TVL/gx+9Fs39Q9ISx+v8=
Subject key identifier: 1A:29:46:75:FF:CB:96:E6:FF:57:E2:9B:47:47:A9:8B:81:5E:8B:08
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 01951210484A86B2EBFCD5FBBE4BCD4A3CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 0FA5
Signing time: Mon 17 Feb 2025 04:00:11 +0000
Manifest this update: Mon 17 Feb 2025 04:00:11 +0000
Manifest next update: Tue 18 Feb 2025 04:00:11 +0000
Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: OsxIFt2/F+gkvV6A3P07iyYhFUl8a43HXHos2gD7gbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:48:4a:86:b2:eb:fc:d5:fb:be:4b:cd:4a:3c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Feb 17 04:00:11 2025 GMT
Not After : Feb 18 04:00:11 2025 GMT
Subject: CN=1a294675ffcb96e6ff57e29b4747a98b815e8b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:be:03:a1:57:b6:2a:2b:d3:15:2a:9d:8f:
92:81:58:63:cc:5d:0d:01:88:53:f0:94:43:d3:5b:
19:c0:7a:87:9a:34:f3:8b:f5:3e:00:12:95:1a:79:
97:17:af:18:b7:38:fa:9a:5d:41:c0:f8:75:f2:00:
2e:79:ca:e0:de:be:67:76:81:2b:40:f7:8a:74:60:
40:a5:38:05:00:2b:05:3e:ba:cf:4b:a3:08:8b:f3:
c7:aa:5a:67:57:99:21:e5:b0:2b:10:c6:8b:ee:15:
e6:87:35:36:be:2b:40:74:8a:b1:e8:87:d4:dc:9a:
c2:88:87:b7:fc:4f:0a:1a:5c:b8:b9:46:a3:3e:c8:
60:0b:24:6f:60:e0:cd:e0:02:5d:0c:2b:96:a2:7f:
a0:b5:b5:eb:24:88:4a:52:ed:75:87:e2:55:7d:8e:
54:aa:c9:13:ce:35:9d:ec:6b:f2:5c:b7:bc:be:50:
7d:6a:56:92:28:c2:32:65:e7:d5:4b:04:c4:ea:65:
88:bb:c5:c6:2c:17:dc:62:b2:79:59:42:dd:6a:9b:
65:c0:98:4a:0a:9f:7e:65:99:ba:39:03:04:0e:c7:
bd:62:c0:2c:84:49:61:86:a2:41:2d:0a:ad:4c:31:
52:63:73:5d:db:1b:a3:48:26:f2:6e:61:e2:44:ed:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:29:46:75:FF:CB:96:E6:FF:57:E2:9B:47:47:A9:8B:81:5E:8B:08
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:30:b3:d3:d5:3e:4e:e3:c2:29:86:53:ab:bd:6a:90:de:
d6:c8:4d:05:26:93:17:00:cd:0e:48:79:4a:84:9c:49:bc:f0:
97:84:3b:ff:ff:8d:52:7e:b2:5a:0b:6c:63:da:f8:f1:ac:67:
be:3a:74:99:40:0c:d2:1a:55:22:f2:1f:eb:51:3c:83:cc:98:
0b:4e:37:7e:b9:04:12:b3:ef:04:9d:83:28:8e:74:12:92:dc:
c8:7b:dc:a0:c7:10:ad:ee:62:b5:ef:d6:c2:3c:ff:70:b6:33:
ee:12:06:8e:57:19:ff:d7:9e:bb:1c:b6:94:50:cd:2d:e6:1e:
eb:6c:2c:bd:f6:63:6e:61:71:5d:c5:12:71:6d:69:ae:39:c4:
31:00:ac:e0:05:3e:db:79:a7:48:64:71:78:01:8f:f3:a5:35:
e7:55:f1:58:59:a1:32:84:eb:8a:e9:b8:72:5a:02:7e:46:1b:
0d:29:4e:78:b6:2d:10:fb:30:e6:af:b3:b2:77:17:65:bf:5c:
5c:bb:81:02:b3:29:cb:30:22:a2:03:23:be:34:b2:13:92:36:
02:7a:9c:2e:7c:c3:cb:71:d9:3f:78:4e:f4:15:40:9c:fb:f9:
9e:f1:2e:6e:ef:b7:b5:8e:e4:6e:ee:ff:aa:f3:55:91:d1:9c:
5c:cf:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:55 2025 by rpki-client