Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: mfK+prHXbzfi9/5Q+RE3Hed6KEhTF/maYVGGg1Oem7I=
Subject key identifier: 86:E7:D6:AA:5A:84:8D:46:0B:E5:A4:A7:E2:BC:90:54:A9:A0:C5:E9
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 0195116C336DEB0AA7901F420692E1D960E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0B52
Signing time: Mon 17 Feb 2025 01:00:58 +0000
Manifest this update: Mon 17 Feb 2025 01:00:58 +0000
Manifest next update: Tue 18 Feb 2025 01:00:58 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: cOnD8SaXIu9IvM7s/WwttFriLs0mjWJ6Wp4q9i3LjTM=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:33:6d:eb:0a:a7:90:1f:42:06:92:e1:d9:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Feb 17 01:00:58 2025 GMT
Not After : Feb 18 01:00:58 2025 GMT
Subject: CN=86e7d6aa5a848d460be5a4a7e2bc9054a9a0c5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:06:38:b4:41:1c:50:8d:16:ad:ed:ea:0e:
4f:e8:2b:cb:c6:c1:32:70:e9:9c:d4:9e:e7:39:d0:
6e:2f:ea:1b:28:e6:2a:be:93:c2:96:2a:5a:d1:96:
56:3d:03:31:1b:64:34:fc:25:b5:25:2e:85:6f:96:
9e:d5:2e:9b:e9:a4:6d:8b:fb:8e:88:62:25:37:98:
c4:ba:1c:bc:10:48:d0:89:53:83:79:86:41:63:34:
84:ef:18:38:e6:78:89:cb:b8:7b:b1:7e:8e:06:4a:
de:53:f0:27:54:8b:1c:c5:d3:50:4d:09:ba:bf:2f:
7f:b0:0d:71:67:3a:43:a3:93:ab:d2:23:c4:2e:0d:
fc:59:c8:69:2b:83:87:e2:5e:a7:48:df:62:d1:12:
9e:d5:a4:37:85:e8:58:02:c5:ea:c2:f8:ef:7d:cf:
44:33:d8:0c:f1:bc:92:04:49:8c:bd:01:b3:9a:df:
cb:5e:0b:d4:2a:f9:e9:f5:4b:16:44:70:95:4f:fd:
ae:01:5f:a5:e9:d5:e3:16:da:4f:52:99:1f:c9:44:
f6:6d:9f:9e:ca:cd:71:f3:83:f2:4c:ac:10:69:7b:
be:a3:10:e6:ff:cf:18:5e:cf:05:cc:59:02:18:3e:
cb:56:46:b1:de:73:ea:b3:11:16:ae:cf:e0:2c:c4:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:D6:AA:5A:84:8D:46:0B:E5:A4:A7:E2:BC:90:54:A9:A0:C5:E9
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:79:fd:b7:f9:22:ce:7c:3c:15:bc:9e:e8:ba:54:f1:57:
03:a8:16:40:71:a7:9d:27:6f:de:c0:07:10:59:12:ab:eb:89:
89:f9:01:e4:6f:da:24:12:08:b8:a5:20:85:37:60:bd:31:76:
26:8b:d8:9e:fc:e4:80:2e:83:99:9a:3f:91:54:0c:05:e3:fe:
09:65:ad:63:4d:e9:67:37:e1:d4:fa:9e:30:aa:bb:91:fe:1b:
d4:e4:6e:86:d5:61:9f:53:53:aa:a3:a4:6f:7e:e3:db:8e:fc:
3f:eb:84:64:0d:48:99:9c:1f:03:bf:91:eb:52:60:0f:e8:4a:
1d:9e:61:4f:12:4e:10:b7:77:0f:de:f7:c4:05:c0:9f:70:ff:
fc:41:93:77:f8:95:1f:72:0a:1a:a4:95:d9:ac:f8:06:a6:48:
92:7b:fa:76:a9:44:be:9f:a7:d4:92:88:d6:5c:da:f3:25:79:
be:ed:ad:7a:0e:0a:94:53:09:f9:43:e6:d6:c2:33:1a:ca:fe:
e5:bc:b9:90:15:00:95:95:42:d1:1a:ac:df:17:ae:22:8b:3e:
12:b8:3e:2a:b3:67:40:a3:d0:5f:ed:b4:63:37:06:04:4f:4b:
42:06:d6:60:f2:65:e1:37:ac:c7:76:4b:1e:5b:6e:7e:42:e5:
13:17:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:34 2025 by rpki-client