Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: JerhZSIhG+gCfpwrMVWfxLpJEC9aCQRuAHkwuGjLR8o=
Subject key identifier: 40:C5:18:B1:86:51:9C:8B:3A:E8:61:D1:20:B6:E6:51:06:59:15:D9
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0195102217C8C6EDF08434145907F8A4F451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 11BD
Signing time: Sun 16 Feb 2025 19:00:24 +0000
Manifest this update: Sun 16 Feb 2025 19:00:24 +0000
Manifest next update: Mon 17 Feb 2025 19:00:24 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: gwTuD5tEeqsLk2kJfBRVY4EcpQHMl6rDMgVbcj3NkRs=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:22:17:c8:c6:ed:f0:84:34:14:59:07:f8:a4:f4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Feb 16 19:00:24 2025 GMT
Not After : Feb 17 19:00:24 2025 GMT
Subject: CN=40c518b186519c8b3ae861d120b6e651065915d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:37:51:ff:9b:0f:f6:e8:47:24:e8:34:45:
64:e5:ad:b2:1d:b3:6f:da:4a:fa:c5:6b:1c:2a:93:
e1:34:ff:e1:cd:59:b7:8f:91:e4:be:b6:dc:80:ce:
44:5f:29:99:8a:a0:52:da:2e:57:c9:25:06:72:a1:
7c:dc:9e:ce:5e:33:28:f6:3f:5e:73:ae:5e:93:8f:
37:8f:b7:d7:cc:77:9c:f2:71:88:dd:d4:1d:ab:e1:
13:51:ac:90:5f:c0:a5:3c:46:96:73:d7:5b:b1:cc:
b5:0e:f4:01:5d:33:63:6f:96:8c:d7:a0:ce:06:e9:
a8:7c:28:fd:4b:43:4a:db:cc:53:e9:18:2c:ff:86:
9b:f4:df:c6:52:46:ab:cf:a5:dc:a7:a6:ad:32:53:
0e:8f:ed:86:9d:c8:d2:78:d3:a1:b2:4d:33:40:8e:
63:41:67:ed:e4:c4:6d:9a:ae:42:83:ef:37:25:2f:
fd:50:b6:64:ba:52:e6:74:7e:06:70:e7:c9:e2:1a:
4e:27:2d:b6:82:61:7b:56:e0:5e:9e:f4:ec:d9:85:
97:af:e0:89:c5:40:4c:41:3d:7e:69:d3:7d:8c:1b:
02:ee:12:63:20:59:a2:47:f1:23:43:51:ed:4e:44:
e2:25:a5:7c:18:6a:64:41:6d:c1:e0:16:9f:c3:bc:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:18:B1:86:51:9C:8B:3A:E8:61:D1:20:B6:E6:51:06:59:15:D9
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:05:b4:e8:54:07:0b:fd:b9:ff:d2:d3:a5:1b:55:05:8d:e0:
a2:ed:1e:2e:3f:b9:b2:34:70:7f:92:f5:ef:f6:7e:11:a3:03:
0d:4a:0e:01:b4:b7:90:9d:ab:e2:81:a8:6d:1b:e4:70:38:b5:
b3:99:87:b1:db:35:9b:99:cc:6e:7d:a8:bf:aa:3e:09:33:ec:
f7:38:81:24:69:28:c6:fb:ab:3d:93:c2:ff:4c:bb:c8:0a:5c:
77:2a:74:7b:96:3a:18:5b:47:b5:c9:c2:4e:8d:cf:fd:12:5e:
41:a8:be:d3:a0:06:e6:d3:61:01:14:df:26:16:02:04:4e:14:
97:e3:bc:f6:a0:dd:5b:00:01:e3:98:62:dc:fc:3c:5d:c6:9c:
db:b9:19:c6:b4:37:26:89:2d:f7:e8:8a:0c:25:ea:75:27:ba:
eb:16:dc:fd:96:c0:44:93:25:0f:93:ec:4e:51:a5:25:04:95:
c3:4a:3b:3d:b1:e2:5c:69:69:9d:a7:64:68:cb:99:12:58:a0:
f0:71:b9:34:d6:0e:e5:5f:d5:9e:29:93:33:5a:d6:f2:e4:31:
91:4e:49:38:cc:dc:57:5e:43:5d:1a:ac:f6:c0:d8:a1:2e:29:
45:85:ac:dd:3d:21:82:f3:6d:6e:e3:fa:04:54:55:e0:81:1c:
68:55:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:38 2025 by rpki-client