Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: 8qcluvj4PZZJPlS6YTOth0hIEvDgrWRlqmbxAQ5IKgs=
Subject key identifier: 58:3A:B7:74:C7:76:DB:E6:4E:44:C4:D3:98:74:A5:15:FF:30:F3:05
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 019510C756328297EBFD715F180335FC8105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 0718
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: UWZcdguUWIeuh7wh18oqU3B9+4ffvOKzSmEiD9BNApk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:56:32:82:97:eb:fd:71:5f:18:03:35:fc:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=583ab774c776dbe64e44c4d39874a515ff30f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:77:b7:f8:ed:61:dc:7a:52:bf:96:40:30:
31:e9:5b:57:92:d1:82:e5:f2:8d:d4:da:8e:b7:1f:
d7:86:4f:9c:7e:61:d8:28:5c:17:30:73:b0:c5:00:
50:c9:e8:40:6f:c8:57:10:5e:90:bd:6e:48:0e:fd:
92:c0:16:73:09:85:43:ac:0d:2b:d5:93:d8:b0:65:
5e:bc:ee:9b:0c:7b:93:97:f6:92:fa:8c:bb:c1:79:
fb:34:5e:f1:f4:cf:2f:7f:f8:fd:0a:21:5f:e5:1a:
98:55:a0:18:97:e9:77:25:32:ec:f7:46:e8:e6:7d:
37:cd:26:9a:98:23:8a:b4:ac:11:bd:b0:b1:e6:73:
7a:a3:b2:e4:e8:b8:13:a5:de:fd:47:05:bb:33:91:
e9:f2:12:0c:69:4e:15:cb:67:2e:a5:6b:8f:ef:61:
b3:f6:63:60:41:47:d0:2d:f4:cf:4f:30:16:90:5d:
71:ca:3a:8c:37:2b:9c:af:e5:c5:a2:4b:1f:e8:e8:
a6:06:a4:71:57:8d:ce:2a:f8:a7:26:c2:c7:a8:fd:
d4:c8:ed:2e:89:52:d6:8b:6d:17:db:a3:a0:e0:33:
7d:de:d2:0e:16:ac:1d:85:85:9b:a3:8f:eb:1e:24:
11:e8:c0:6e:36:2d:ad:b8:36:ca:d9:04:a3:5f:bd:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:B7:74:C7:76:DB:E6:4E:44:C4:D3:98:74:A5:15:FF:30:F3:05
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:90:66:4f:7f:05:2a:e2:bf:54:c6:a5:72:26:60:0e:87:
ce:a9:c7:18:45:e0:e6:f0:b1:71:bb:da:0e:55:9b:7a:63:81:
4d:0f:ef:cb:ab:6d:45:09:37:c4:5d:cd:fd:9c:52:b9:30:c0:
cf:fd:b7:a6:e9:0f:d7:1c:31:c9:6b:3e:94:f2:b0:35:0f:40:
0c:9b:52:f4:23:8c:7f:d7:89:5c:02:38:c7:ab:0a:56:c0:53:
25:c2:df:74:81:3d:82:64:d3:10:2d:42:e4:e8:51:ac:86:fc:
85:cb:61:f5:bf:d4:89:d3:cf:13:25:c3:22:12:3c:15:2d:ac:
ce:92:73:f0:92:6e:7c:e4:a0:30:f5:d6:1a:3a:f7:4d:78:da:
3a:23:0a:40:57:92:ee:f9:a5:83:bb:8c:2e:a0:8f:89:91:90:
01:24:75:85:ae:ed:46:52:b5:8d:b8:ff:6a:53:b9:92:ee:07:
81:4e:5d:e0:fa:06:15:19:4f:a2:74:d3:3f:4f:31:c9:49:86:
d6:16:05:fe:15:52:e9:0a:a7:a7:83:44:36:08:7e:db:82:19:
11:ff:60:5e:ff:21:5e:e4:df:c5:59:35:b6:19:35:44:35:de:
1c:4f:bf:5a:76:8e:21:f8:d8:27:9b:1f:9a:d8:de:43:fa:55:
8c:b3:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:58 2025 by rpki-client