Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File: TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier: v+zTsKok8saIDlQp77bhVExMLpJRvYoAq9DvW6rHnHU=
Subject key identifier: 54:03:D5:A6:C4:E9:81:CC:A4:66:4C:66:F9:4C:F8:5C:55:94:0E:A1
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 0194C38814A5CFEC6E423564C7DE09C926C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:01:02 +0000
Manifest this update: Sat 01 Feb 2025 22:01:02 +0000
Manifest next update: Sun 02 Feb 2025 22:01:02 +0000
Files and hashes: 1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: aob8RqOMhOxO0yPfFcW6DPr11GHOn4X7ymfVsQnMQRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:14:a5:cf:ec:6e:42:35:64:c7:de:09:c9:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: Feb 1 22:01:02 2025 GMT
Not After : Feb 2 22:01:02 2025 GMT
Subject: CN=5403d5a6c4e981cca4664c66f94cf85c55940ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:f4:31:f5:11:a3:7e:72:e8:1c:0b:8b:d5:
df:a2:73:1c:f6:bb:6b:48:35:a5:d3:06:e7:c5:b9:
89:67:95:f9:f4:62:d5:26:a5:36:7e:12:99:d8:fa:
a7:51:d1:26:62:a9:b7:b8:4d:9a:7f:7e:d4:1f:6b:
25:da:3d:b6:de:1c:5a:c2:83:f2:99:d7:46:20:c0:
e6:f0:22:ae:96:34:5a:5c:38:1c:5f:f8:84:8c:a4:
64:c2:e6:39:01:6a:03:41:df:f5:88:ef:c8:bb:6a:
e6:78:ef:3b:65:47:52:c3:bf:a7:b2:b2:be:8d:4e:
fa:a9:7d:87:e3:3b:12:f3:ad:38:d0:31:09:db:6a:
15:b1:8b:83:01:f0:fa:ef:fe:cd:e3:23:7b:a6:da:
fa:68:e7:31:7e:d9:74:32:1e:7c:df:4a:32:f7:ee:
7a:b5:0a:b7:8c:b6:34:ff:94:c4:1c:72:ce:da:00:
62:93:67:93:e1:81:57:42:92:26:99:a7:5d:d1:d8:
ff:83:a4:66:a1:bc:f4:6c:29:55:3e:cc:8a:15:57:
3b:d6:ef:6a:fa:0e:b9:15:42:73:7f:ca:12:66:36:
94:0d:ec:b7:4d:ed:a6:a9:45:29:dd:22:fd:9c:20:
ed:7b:37:e5:be:13:6e:66:9d:3b:ef:e9:ed:91:d2:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:D5:A6:C4:E9:81:CC:A4:66:4C:66:F9:4C:F8:5C:55:94:0E:A1
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c9:81:94:79:9c:20:94:a6:7c:9b:d8:a8:a8:d6:1a:7e:e8:
a6:7a:de:f4:b9:82:43:5b:c7:17:0b:07:14:4a:5b:43:54:15:
0c:3f:71:7b:80:fd:04:3a:11:2a:10:7a:7e:12:97:6d:85:25:
9a:8f:2f:e0:25:e9:eb:69:d7:e4:53:00:60:55:db:17:0d:b4:
22:d4:dd:fd:5b:3d:86:89:1c:53:8e:c6:72:91:06:bd:6e:33:
1c:e7:45:0c:e5:18:d1:d4:40:c8:3f:b4:6e:19:2f:02:bd:ae:
80:3d:eb:b6:ee:1b:6a:47:f6:51:ec:66:72:d8:8b:fc:86:e1:
5a:fa:21:0e:00:0c:da:87:5f:ae:fc:f9:dc:b9:da:03:7c:33:
52:a7:3f:dd:0b:9b:09:eb:e4:74:f0:b8:c5:79:d8:ba:e6:54:
13:f1:a1:d5:e5:d4:95:8c:4e:86:ab:df:ed:ce:3f:3a:fb:5f:
24:9c:64:a6:85:ad:ca:69:47:99:6b:0a:ab:82:5b:20:4a:ff:
f5:01:fd:a2:14:bb:5c:08:89:9e:f6:64:a0:02:a0:9e:b1:d3:
a5:ec:9d:7d:c1:7a:70:66:0a:09:ee:45:7a:de:c3:bf:43:17:
6d:90:fb:32:c6:b2:4e:f3:db:24:72:84:5a:83:94:bf:9c:e3:
74:1c:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:51 2025 by rpki-client