Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: l3RjIBf9R9xKWH+R6JAdOYiyOVeTtH2CsO8jj07+FDk=
Subject key identifier: AA:54:EA:E9:3A:2F:1A:9E:69:30:66:55:43:C6:2F:44:19:C3:B4:EC
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 01901DEDAA9BEB1DC1725F4EF2D19318A716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 0C13
Signing time: Sat 15 Jun 2024 22:03:53 +0000
Manifest this update: Sat 15 Jun 2024 22:03:53 +0000
Manifest next update: Sun 16 Jun 2024 22:03:53 +0000
Files and hashes: 1: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: IF9I1pvVRozZM2weEvyLCazaPPs5w3VQ/OMLnoj/YJc=)
2: cYTyG0dZ5WFrxneJ_J1sjw3ZAjI.roa (hash: K2ATHpdyj+lP7dV2KeXEBbNvFhz9B08/qSoK0WHilkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:aa:9b:eb:1d:c1:72:5f:4e:f2:d1:93:18:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Jun 15 22:03:53 2024 GMT
Not After : Jun 16 22:03:53 2024 GMT
Subject: CN=aa54eae93a2f1a9e6930665543c62f4419c3b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:53:1e:fe:ef:24:cc:0e:73:fd:72:c3:4b:
55:84:0a:58:b3:b3:8a:82:45:3d:23:73:25:f0:47:
7d:50:5e:9c:82:a4:30:53:0f:bd:cd:80:85:d1:5b:
b3:f3:0e:8e:14:da:05:5b:d9:ec:40:31:a7:73:e5:
0b:64:69:25:80:e5:09:12:66:32:72:fb:66:ac:7e:
9f:03:27:5b:c0:85:6d:da:fd:0a:43:b4:96:77:cd:
b4:cf:58:5c:fa:fd:e8:76:b2:da:2f:ee:5c:7f:7e:
a1:f2:9b:0e:39:27:fb:50:e2:cb:6c:03:49:88:c6:
b0:ff:b1:a2:9a:f1:87:2b:65:74:b7:13:63:a6:78:
6c:ee:1e:6e:80:44:b9:38:52:bc:29:6c:24:b4:dc:
43:4e:74:df:ac:a4:c8:2b:e3:ef:72:13:9a:7b:4b:
70:ec:4c:b3:28:b7:69:dc:3d:37:5e:17:10:36:ff:
ab:c5:2e:17:9a:97:e6:8b:35:2b:fb:15:84:1f:8a:
48:3a:b5:7d:87:19:85:a5:46:af:9c:28:0b:9a:23:
91:ef:8c:37:93:bf:2e:61:6a:d9:93:59:ed:f4:cb:
9a:3d:fa:88:b9:5f:e1:40:70:f7:23:44:fe:ae:36:
57:6e:7e:9e:11:72:cc:b3:2f:70:f5:74:cc:5c:4f:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:EA:E9:3A:2F:1A:9E:69:30:66:55:43:C6:2F:44:19:C3:B4:EC
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8c:96:98:d7:28:b8:aa:b0:a6:75:b9:d1:e9:b3:7c:f7:44:
86:46:78:3d:15:98:0c:cd:8d:70:64:1e:5d:16:24:09:19:07:
89:65:0e:ff:24:e1:db:8c:a4:69:71:45:49:94:0b:e1:1e:6a:
c9:9b:ec:89:18:c1:ab:b1:cb:7d:81:24:09:2f:ca:c1:12:96:
fb:8b:33:75:20:c3:39:d7:5c:d6:81:a1:24:53:dc:1a:df:8d:
cb:2b:95:54:8f:ef:7e:f8:c0:59:1c:c7:b0:8e:40:f2:f4:cc:
bf:0e:98:b6:cd:87:c6:3b:59:51:47:69:ae:da:fc:96:25:9f:
f0:c3:ab:14:54:59:1a:0f:a2:a6:b7:d9:6c:2d:bc:fe:09:4d:
63:79:c2:f7:09:99:a2:1c:be:d5:bf:40:ce:7d:a1:41:88:4e:
53:18:e6:b3:31:36:5b:69:25:34:f7:b2:0c:f8:38:50:44:6b:
28:09:ad:c8:47:a9:f9:e3:45:98:e6:e2:dc:69:3d:87:54:e9:
21:f9:c4:a1:7d:5a:fd:15:e4:7f:ca:8c:cb:6a:cb:71:85:ed:
e6:1c:b1:2f:d1:dd:39:9a:78:09:fa:3d:3b:50:bd:19:2a:e5:
90:bd:aa:b6:f6:4b:78:b8:76:4b:2e:7a:1e:ee:24:fc:e2:44:
49:89:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:13 2024 by rpki-client on console-fra.rpki-client.org