Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: jyE0s2qvYwyr2poZzs/m2vvz8kCHjuzdUSvb1h1RKBQ=
Subject key identifier: 9D:95:28:F3:F0:69:5F:17:8B:00:A2:EF:19:84:DC:29:27:1A:EE:E9
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 0194C3F5828CC9CB07FA8F713739F95295F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0B55
Signing time: Sun 02 Feb 2025 00:00:34 +0000
Manifest this update: Sun 02 Feb 2025 00:00:34 +0000
Manifest next update: Mon 03 Feb 2025 00:00:34 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: YcF61qbIxvhpiYmtcVusK3bWa2zlK1fHittLr2Y2mQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:82:8c:c9:cb:07:fa:8f:71:37:39:f9:52:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Feb 2 00:00:34 2025 GMT
Not After : Feb 3 00:00:34 2025 GMT
Subject: CN=9d9528f3f0695f178b00a2ef1984dc29271aeee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:8d:37:2c:0c:bf:5f:b5:40:8f:5a:59:88:
a6:e7:e0:8f:45:2f:f1:23:75:73:db:99:8b:40:fd:
a2:f9:5c:4f:a9:fe:a9:e7:e1:f1:ef:a6:59:33:5e:
0e:a2:41:98:77:46:3d:f8:cc:c5:03:7f:a8:66:52:
a7:d0:85:fa:e1:0d:82:18:12:e5:1f:1b:41:cc:d6:
cb:b3:9d:9a:07:0c:1d:47:ee:14:bd:25:12:e2:ff:
23:85:44:3e:a5:da:e2:4e:4d:d9:9a:7e:8c:ed:18:
a4:ac:53:7c:1c:5c:02:a0:58:4f:a4:d0:c4:22:24:
ea:ed:f3:ec:2a:41:17:de:9d:43:1c:bc:5e:42:a8:
c0:93:e3:ea:27:58:c1:a6:9d:a6:f7:3a:93:c1:f8:
60:2b:62:e6:24:73:70:0e:fd:ca:34:c2:39:37:5e:
3c:96:cb:5f:00:2e:2a:c0:03:46:af:95:f1:1d:17:
4c:90:96:c9:88:98:b8:c4:49:93:b9:82:2e:65:1c:
95:ad:01:e3:d3:6c:bd:95:93:0a:7b:04:91:41:68:
e0:c2:33:ad:b6:3d:b9:66:72:e6:71:bd:40:71:00:
88:1a:70:c3:af:b3:27:10:83:3b:87:d4:2c:d2:f9:
70:57:ef:6f:a2:7f:ab:c1:c3:71:11:6e:68:7e:be:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:28:F3:F0:69:5F:17:8B:00:A2:EF:19:84:DC:29:27:1A:EE:E9
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:b8:9e:24:d5:86:18:79:66:eb:66:7a:7f:9a:48:1f:d2:
5d:eb:12:64:32:5d:c6:1d:b3:6c:37:42:fd:0b:14:8f:36:0a:
06:f5:7a:d4:58:2c:fd:9b:1d:79:75:48:b8:75:35:18:91:46:
bc:0d:0b:b5:36:50:12:3d:c7:1c:29:0d:54:c7:fe:07:21:e6:
a8:5d:bf:75:21:d9:a6:a7:73:c4:cf:32:83:18:6b:e6:65:13:
db:8d:56:cd:65:85:55:9e:6d:ca:01:e8:e8:31:4e:25:4e:94:
3b:50:6f:43:93:76:16:7b:48:5a:d9:99:9e:10:df:01:4f:a4:
bd:59:0a:bb:91:a0:1a:31:06:d2:45:95:9f:54:f0:34:2e:5b:
0c:81:52:db:a1:aa:a5:e2:9c:be:df:0b:04:a3:55:26:70:b9:
7a:ba:49:d8:73:fe:35:78:20:91:45:c2:29:7f:7b:99:ce:42:
b0:0f:3d:5c:91:94:f9:45:c5:04:e8:3d:f1:05:16:4a:76:25:
c0:82:54:b4:a5:8f:e1:19:c4:31:41:6f:3b:85:12:7d:d9:f7:
40:35:5b:5b:81:d4:bd:a5:63:d2:c5:28:a7:02:f9:fc:26:45:
ba:79:5f:2e:0b:8d:f2:6b:0b:ba:ea:5f:b0:21:65:ee:6b:b5:
5a:be:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:58 2025 by rpki-client