Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: HcMXWMr5nKp+AMfCtS/swZhsBaeZoQcToNYkQt/wFKI=
Subject key identifier: 09:EF:C0:9D:83:C2:E2:9A:BA:9E:35:25:E3:88:E5:18:72:2E:7E:38
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0194C3F5B87CE60FAA322627E4663AF24CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0DB9
Signing time: Sun 02 Feb 2025 00:00:48 +0000
Manifest this update: Sun 02 Feb 2025 00:00:48 +0000
Manifest next update: Mon 03 Feb 2025 00:00:48 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: aBrKuqeBMgLuHZ/Ju55NXv+XZlopAKnUkGw6X1kgy3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:b8:7c:e6:0f:aa:32:26:27:e4:66:3a:f2:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Feb 2 00:00:48 2025 GMT
Not After : Feb 3 00:00:48 2025 GMT
Subject: CN=09efc09d83c2e29aba9e3525e388e518722e7e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:48:f7:53:14:a0:c2:ec:e1:be:1c:aa:1c:
d3:a2:22:34:0c:a9:17:1b:33:3d:d0:49:ab:74:60:
e3:02:a7:f5:f7:76:1a:6a:3d:7f:57:00:2b:21:70:
67:c3:9f:f0:6c:2c:45:58:b8:c4:5e:ea:8a:2e:c6:
7a:41:b2:c4:74:7f:07:0d:79:9a:8c:65:ca:57:04:
e7:bf:81:c3:ba:44:68:84:fd:a5:c8:0d:be:1b:d7:
9c:26:db:09:19:00:04:2b:f8:f3:64:a0:a5:85:0a:
71:1d:0f:b3:be:ba:a1:7e:17:cc:91:56:88:56:6f:
cf:cd:7a:93:5e:20:5a:ed:2b:19:01:3c:1f:7d:23:
49:da:da:f6:ec:ea:c3:fc:df:9e:ac:c2:c4:d0:e1:
ed:10:77:d9:c4:4a:88:94:18:a8:67:22:7f:fd:20:
0a:93:1e:8a:9b:58:c5:d4:ae:fa:45:d8:2c:df:fb:
e8:ef:eb:ce:88:1b:8d:c6:21:68:49:52:1b:f0:8f:
6a:6c:40:dd:6f:d2:6d:94:18:f6:a4:99:13:a0:c5:
bc:5b:13:b7:0c:36:c9:91:88:63:62:4f:52:54:b6:
bb:7c:70:38:3a:92:c3:67:48:2f:34:ef:b5:47:fa:
f7:f1:37:ae:4b:a0:0e:c4:3b:c8:ff:d8:f2:82:02:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:C0:9D:83:C2:E2:9A:BA:9E:35:25:E3:88:E5:18:72:2E:7E:38
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:f3:e3:c8:5a:16:c3:52:67:aa:f1:e7:6c:c2:11:6a:2a:
e1:dd:5d:8d:28:48:89:fa:d0:82:c6:43:77:fc:e6:0c:c2:a7:
6c:e1:9b:ec:e9:bd:ec:ca:a4:18:3c:f9:60:27:d7:53:f8:7e:
2b:96:89:b6:99:f5:a5:b2:7c:53:89:7f:cd:12:8d:c3:11:b3:
78:d1:8c:13:f7:e6:75:19:13:6c:da:c8:d4:fc:e6:57:69:b4:
ed:fa:86:ef:a8:4e:01:14:92:28:0e:ea:c1:7d:94:35:8f:10:
7e:3d:20:52:0c:ca:ac:cb:c8:cd:c1:f3:10:f2:0d:c7:54:b8:
3f:03:16:7d:93:57:25:65:c5:84:c1:3d:c5:6b:dd:80:77:23:
0f:e2:44:6f:93:3d:a5:4e:9a:23:49:df:fe:ff:36:4a:7f:1a:
ba:81:0a:f7:91:75:e8:67:62:58:af:3f:d0:1b:5c:9d:1a:76:
37:17:1b:03:f9:db:92:a5:be:ef:3e:e5:7b:b0:39:dc:91:b9:
37:f8:13:6f:04:19:ae:ba:0b:dd:06:f8:64:91:44:12:8d:b2:
cc:6a:9d:1b:b0:9e:ce:62:03:6f:89:5c:b3:19:ed:d9:14:1c:
11:4f:a5:6c:12:a5:72:d6:81:e7:53:b9:01:bf:5f:2e:d0:d6:
02:71:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:41 2025 by rpki-client