Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: b0jcA/7Y6n5bJOjkQmjwrgBRjqoA0qPZ6UY/zO/MD38=
Subject key identifier: 55:B7:12:DA:68:20:42:BC:58:E0:A5:13:56:BA:87:BB:8E:4B:86:1E
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 0194C507DDDF70D3C6F4835FA2697A6ABD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: B7
Signing time: Sun 02 Feb 2025 05:00:14 +0000
Manifest this update: Sun 02 Feb 2025 05:00:14 +0000
Manifest next update: Mon 03 Feb 2025 05:00:14 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: jXSQ7jLq9bR6P4J2Tq3sPx/K1cc7hau5jXzUSrQMP20=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:dd:df:70:d3:c6:f4:83:5f:a2:69:7a:6a:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Feb 2 05:00:14 2025 GMT
Not After : Feb 3 05:00:14 2025 GMT
Subject: CN=55b712da682042bc58e0a51356ba87bb8e4b861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:5e:ab:94:79:9e:74:ca:27:2d:94:4b:e3:
a3:ad:d1:8c:51:45:3f:01:69:37:f3:a6:94:a2:25:
25:63:c9:d3:38:28:13:46:84:be:9c:b0:93:46:2f:
21:99:1e:0b:e2:f6:ca:7a:4b:79:c3:a2:48:51:b6:
e5:da:8b:da:0d:e8:b2:18:23:6e:42:c6:98:c8:0d:
72:9f:44:2d:dc:7d:af:97:8f:14:f4:1b:0f:e2:76:
51:5d:ec:91:c9:96:d2:22:38:3c:00:ae:16:13:f9:
c8:40:b6:46:b9:59:d4:f2:a2:85:fc:f9:63:32:28:
12:bc:a4:fd:ba:d5:1f:c6:e9:a9:22:b5:0e:6e:46:
6c:a9:f3:91:db:8e:01:b1:d9:20:ba:7b:46:74:63:
93:d1:58:65:e2:1a:12:8f:ca:56:dc:30:18:4d:ae:
0d:33:90:f7:58:4d:91:7e:ed:ea:af:93:d6:9c:fa:
34:24:13:b2:11:38:6f:28:ae:4e:ad:83:b8:98:fa:
e7:14:2f:48:af:4e:c8:f6:8d:eb:98:db:1b:7d:5f:
df:da:29:6f:df:93:43:db:b5:40:aa:a9:19:9d:8e:
ec:a3:c5:2c:ff:e1:29:1e:0a:c6:95:86:8b:82:76:
d6:67:43:c5:53:0d:fb:2d:c7:a6:84:ea:8a:ba:53:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:12:DA:68:20:42:BC:58:E0:A5:13:56:BA:87:BB:8E:4B:86:1E
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4a:4b:ef:42:08:d4:cd:31:22:bd:01:84:78:35:ec:19:6f:
ee:f6:aa:98:4b:ef:3c:be:ad:46:c7:b4:d1:be:81:30:f1:58:
a3:50:8b:1e:0d:6c:41:a4:2b:1b:44:59:55:29:f7:a6:96:e8:
dc:46:70:73:77:b1:d1:2b:bc:df:84:3e:cd:7f:ba:10:e7:ca:
18:08:ca:1b:3f:24:e5:f8:82:a4:8c:8c:99:45:b3:5f:ad:d3:
7b:06:fb:b1:10:57:81:1e:55:27:b4:dc:7c:7b:51:28:98:62:
ca:36:1e:8c:27:43:68:b6:e4:4f:e4:03:25:20:6e:98:99:ff:
ef:dd:6e:34:6a:dc:ff:72:56:63:ec:b7:05:af:da:99:96:e5:
2b:91:71:fd:d1:c4:3a:62:7f:2e:da:f1:1c:18:7a:82:41:53:
f8:d4:d2:55:30:a2:5b:b3:01:f3:59:51:41:8d:35:54:6c:1e:
12:56:bc:a0:5b:21:9b:20:3d:ef:d8:e9:1e:0a:00:85:72:3a:
18:69:d3:51:0b:1e:b9:79:37:ae:7d:85:dd:65:76:c0:c7:a4:
2b:f4:7b:23:b2:a6:cf:d7:b0:98:60:93:9e:79:c2:4a:1c:be:
e8:ef:63:21:3b:15:87:d4:32:69:0e:9b:17:73:fb:32:d4:3a:
af:a2:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:35 2025 by rpki-client