Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: u1xvtdajUxVVszJBgbPK7YJ9XxpxMDKrRdMFZMr+eVs=
Subject key identifier: FD:58:0C:09:2B:EA:DB:BD:4A:97:DA:93:30:A5:F7:4B:CD:CE:72:79
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 019511A309D7C39DB0A51923981225B441DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:52 +0000
Manifest this update: Mon 17 Feb 2025 02:00:52 +0000
Manifest next update: Tue 18 Feb 2025 02:00:52 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: pitaWquvEaNPRoEQZ6r3/PkjAN5RGjK1+mU+KRVQfno=)
3: vIkAtPh5Tl2_hiya1eEEhTQV1PM.roa (hash: Z8ir9Gg8yuo48v4Oy7SXMnM5WXoZ5P1PfUr/9PmcanU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:09:d7:c3:9d:b0:a5:19:23:98:12:25:b4:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Feb 17 02:00:52 2025 GMT
Not After : Feb 18 02:00:52 2025 GMT
Subject: CN=fd580c092beadbbd4a97da9330a5f74bcdce7279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:68:01:90:12:ac:b7:68:59:7b:9f:45:6d:
57:cf:b5:37:a2:55:b2:24:da:fb:8b:29:ae:c3:a1:
31:02:0f:a6:59:c8:77:b9:30:79:3d:d0:76:a3:c2:
00:3c:c1:bb:46:81:2a:85:07:68:b9:7f:f2:9d:1d:
36:ca:74:22:e2:49:cd:77:9a:7b:e7:2d:0b:2c:01:
83:65:a2:7e:d3:44:24:ed:f8:d7:03:8c:cc:52:b8:
f5:c5:df:5b:ac:dd:cc:30:27:a6:53:bf:f4:a1:60:
a5:ef:4b:57:94:47:d8:bf:35:b6:2a:b9:4b:d1:c7:
ae:7d:eb:15:49:db:2a:71:1e:31:9b:b4:7d:c8:9c:
42:7e:1d:b4:ea:70:88:e4:05:34:57:6f:9b:79:2c:
50:4e:a0:77:d0:31:e5:4d:13:82:17:84:96:af:b3:
a0:31:ac:a7:1a:b0:a9:ce:8b:15:32:74:40:7b:f6:
87:23:89:69:89:9f:12:1c:09:3d:15:b3:2f:fd:f6:
73:dc:f5:82:93:36:6b:1e:10:5e:be:d7:cb:3a:e1:
c1:34:a4:12:05:f8:db:7c:b4:df:9d:ca:c3:e2:af:
94:20:82:a0:53:38:74:19:94:e4:96:3d:a0:41:d6:
60:e2:cc:e4:7e:1b:51:16:cf:1f:fe:2a:0b:1e:68:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:0C:09:2B:EA:DB:BD:4A:97:DA:93:30:A5:F7:4B:CD:CE:72:79
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:e2:2e:d1:c4:6c:f8:23:93:64:20:a0:63:a7:f3:0e:f9:
09:50:35:48:0f:7e:d2:77:3d:b4:c4:72:50:60:a1:7c:61:75:
a9:c7:63:7d:57:4a:c6:dc:c1:54:77:26:89:97:c8:fb:d9:00:
f9:01:de:f2:98:2d:fa:ca:2d:e2:63:30:91:27:df:3b:0b:b1:
65:60:ed:b8:7b:ca:38:18:43:f3:9b:0b:37:17:69:32:33:fd:
2c:1f:ca:17:43:30:44:86:90:c0:8c:46:15:63:f0:e8:9c:e2:
bb:ce:53:75:99:7a:5b:95:d1:ed:7c:df:9d:0e:ce:28:a6:4b:
51:e0:5f:22:27:cb:ba:f9:fd:a8:ea:35:fd:f0:07:80:04:1a:
fe:ec:d6:9a:65:fc:20:77:39:02:0e:31:0f:86:2a:3f:c3:02:
40:ca:f7:ed:ce:f1:ae:52:1f:5e:b9:01:39:1c:17:78:f8:82:
0c:42:2e:49:9a:ab:72:4e:eb:e6:54:dc:d7:77:ed:20:7b:e3:
7a:77:ee:18:f3:ae:84:08:16:51:c6:e7:4f:b1:43:cb:db:ba:
33:b3:99:40:11:3d:cb:c4:83:be:73:5e:e7:ed:a8:1d:de:d7:
df:37:12:8e:bd:fb:7d:37:42:3f:c0:a7:53:6a:86:08:6e:d0:
f2:62:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:02 2025 by rpki-client