Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier: QuWmaMoKtbJV6UOhR3C9ekJflOHasByUMuVx43s2gSE=
Subject key identifier: 1E:28:A3:84:87:30:8D:02:BA:37:8A:BE:5F:6F:1A:08:1B:6B:1E:52
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial: 019510FE0E69073E9A6B5B5D7DDD9FB6FD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:40 +0000
Manifest this update: Sun 16 Feb 2025 23:00:40 +0000
Manifest next update: Mon 17 Feb 2025 23:00:40 +0000
Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: xhWp456nzZ9PRHmAOfQNe2bcbrBrDKNfpBLolATtOLg=)
2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0e:69:07:3e:9a:6b:5b:5d:7d:dd:9f:b6:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
Validity
Not Before: Feb 16 23:00:40 2025 GMT
Not After : Feb 17 23:00:40 2025 GMT
Subject: CN=1e28a38487308d02ba378abe5f6f1a081b6b1e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:3b:c2:76:46:15:1b:81:bd:cd:48:35:db:
83:a4:f2:56:92:e2:da:cd:82:ab:f1:a8:ec:45:e0:
f6:37:92:0e:13:2f:c9:04:80:4e:7c:dc:b4:23:f8:
85:1e:a4:9a:4c:cb:43:81:28:8d:0a:71:a5:17:09:
f9:02:f0:62:f1:b3:38:e1:6e:8e:46:de:e5:0a:ea:
b3:22:fe:d7:38:1b:57:69:9d:6d:b2:04:41:ab:23:
0f:1c:54:a4:5d:77:41:04:e5:0b:21:ea:60:ae:4a:
4c:d5:d7:f8:35:00:c0:38:df:d0:2c:47:eb:92:f2:
ca:02:81:af:e3:e7:1c:50:1c:8b:43:02:c0:19:6f:
1c:2f:77:e2:b1:b7:43:ee:67:0a:f6:d2:b4:90:94:
24:21:7e:df:be:ce:67:47:1c:f3:dd:de:8b:9a:0f:
9e:97:e2:b0:cf:10:c1:c7:5c:17:d2:c8:e6:85:87:
45:79:a7:71:7f:95:19:3a:26:f5:f2:6b:39:44:66:
28:6a:df:8c:2d:03:0b:b3:ef:bf:30:9e:d5:9c:63:
99:9e:3a:9d:dd:71:3f:ba:42:72:fc:5f:a3:07:24:
f1:b1:8c:08:f3:1d:fb:eb:21:ed:26:a6:ff:ee:2f:
a8:89:83:1b:23:a3:b5:51:de:ae:41:7f:fd:fe:50:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:A3:84:87:30:8D:02:BA:37:8A:BE:5F:6F:1A:08:1B:6B:1E:52
X509v3 Authority Key Identifier:
keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3e:19:59:89:04:30:98:1b:d4:50:2a:b4:e6:91:f5:95:fd:
4e:a7:99:9c:cc:62:59:2d:ab:b2:ec:46:70:37:5a:65:1a:79:
6e:69:76:04:d4:a0:49:64:8b:95:1a:74:e2:7b:89:d5:cb:62:
bd:04:22:23:37:bf:81:42:91:9c:ae:76:4d:d6:d9:92:f5:f2:
b9:be:e6:21:f8:84:cf:db:54:57:e2:06:93:10:45:9c:66:a4:
f0:ef:c9:2c:dd:61:76:09:c7:04:92:9a:82:72:51:c7:98:11:
39:d4:e6:43:4a:e7:4a:80:43:31:67:b7:44:a6:0a:9b:5d:6f:
62:c5:7c:af:b2:f9:00:63:7d:48:bd:2a:66:96:78:23:62:6b:
59:05:77:f9:e5:bf:0c:d7:e2:87:a3:aa:b6:c0:86:e7:a8:00:
18:6e:d1:ae:29:a4:2c:a8:ae:44:e1:0a:29:a2:40:92:29:fc:
23:57:74:5f:a2:9e:f1:61:c4:16:72:db:0d:fc:bb:7d:ce:46:
19:4a:21:e6:d6:62:8c:08:27:7f:4f:3a:31:6d:99:ac:fa:2d:
47:22:6d:4e:46:37:dc:87:1f:a2:52:d4:fb:18:51:a3:86:d9:
c3:8b:5a:c4:28:11:71:45:b1:96:86:14:4e:3f:64:0b:c7:19:
cf:13:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:42 2025 by rpki-client