Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: 12Iy2ZrOLjylRmrV3LYHKsDVauBzpGo0fryw8ca7mFg=
Subject key identifier: 6C:F8:E0:C4:29:95:64:82:AC:E4:58:C9:BD:DF:31:94:91:EE:13:B6
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019510FDC831A392151CACB32C4EEA2F3393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 1181
Signing time: Sun 16 Feb 2025 23:00:22 +0000
Manifest this update: Sun 16 Feb 2025 23:00:22 +0000
Manifest next update: Mon 17 Feb 2025 23:00:22 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: RuwnW1Q8I2Shf7RWdrdP3xNig2Dokkc3xwYECkpx6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c8:31:a3:92:15:1c:ac:b3:2c:4e:ea:2f:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Feb 16 23:00:22 2025 GMT
Not After : Feb 17 23:00:22 2025 GMT
Subject: CN=6cf8e0c429956482ace458c9bddf319491ee13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:4a:11:b2:5a:58:4c:bc:16:32:4d:d8:51:
6a:c3:6d:35:ff:db:c7:2b:d1:d0:b8:c1:6c:6e:58:
2c:0b:6f:f1:d6:02:e9:05:1e:67:03:68:57:00:5f:
25:4f:72:85:48:5f:72:71:69:8c:d6:68:c5:39:7b:
61:70:9f:63:b8:c0:8b:01:55:cb:90:91:89:b4:30:
c9:25:d9:f1:48:8f:19:d7:9f:39:64:2e:a4:7c:01:
31:8f:04:12:04:d9:3c:e4:3b:dd:36:a8:7e:68:85:
70:96:cc:aa:98:05:77:b5:d5:ff:ad:ff:e4:b6:a6:
76:36:e1:7b:ec:c0:b9:38:70:31:45:66:d7:09:3e:
9b:48:f3:4f:ba:21:89:0a:cb:ee:d7:8d:c1:32:b5:
b2:73:d3:a4:1a:87:68:53:22:93:9e:9c:fd:bd:cf:
45:62:ef:32:07:e3:4c:20:43:28:95:15:56:17:2b:
19:8d:c1:af:5e:41:38:a0:af:00:00:d8:43:35:22:
6c:01:48:79:23:3f:bd:84:14:b9:15:e5:c5:7e:67:
51:c9:4b:16:ea:cc:88:84:d0:a6:4b:72:00:18:5b:
cb:c5:19:4e:ee:eb:ce:ba:53:7f:13:20:60:f4:e8:
8a:5a:84:0b:c4:e9:5c:a4:23:36:4a:28:61:5b:b6:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:E0:C4:29:95:64:82:AC:E4:58:C9:BD:DF:31:94:91:EE:13:B6
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b8:cf:1b:9a:26:fb:d1:08:f9:91:30:fc:88:70:68:95:e4:
2e:26:1c:38:3f:6e:07:88:6a:ac:77:ac:0e:a0:d6:92:40:3d:
68:44:9d:3d:ae:47:51:78:4e:6f:f9:45:6d:67:22:8e:4f:40:
c8:b1:21:7b:e4:35:10:81:de:0f:80:57:c1:e0:72:ff:cc:12:
97:f8:52:2d:2b:3b:45:d8:39:ce:1d:71:76:1d:ed:65:12:ca:
1f:f4:e9:dd:65:6a:bd:c5:df:93:af:10:72:19:14:3c:e5:18:
e7:f5:fe:f0:5c:1a:b2:c3:e6:a7:09:40:34:97:45:ce:a4:d9:
a9:22:a6:01:06:17:97:49:7c:6a:92:c6:b8:b1:e2:e1:b0:ec:
47:3d:8b:70:36:cb:4d:0c:2f:9e:85:19:de:65:db:4b:1b:55:
6b:70:97:6c:c2:13:f8:26:4a:45:40:49:8a:8c:9e:22:7e:6b:
78:c1:45:74:2c:7a:bc:15:45:fa:68:4a:99:f4:2d:a5:3b:80:
96:ab:e1:a7:69:73:c2:cf:bd:ff:89:50:90:c4:c9:06:7c:ef:
ea:ea:36:0d:ba:b1:d5:d7:ca:8c:12:28:c9:e3:3a:15:f1:b8:
75:d0:b0:cc:ab:a5:5d:2e:09:1e:11:1a:0d:eb:6b:c9:77:0b:
10:eb:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:08 2025 by rpki-client