Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: e8LDZZpGdPCJ1zlxO95ai/boVnXamHeRX+wRY0pTYlU=
Subject key identifier: 01:20:CE:B4:46:1F:59:EF:18:B6:77:3B:36:8B:D0:04:1A:0B:7F:C1
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 01901DB3C3980D29D76F9C8AE144A5920436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 11C9
Signing time: Sat 15 Jun 2024 21:00:38 +0000
Manifest this update: Sat 15 Jun 2024 21:00:38 +0000
Manifest next update: Sun 16 Jun 2024 21:00:38 +0000
Files and hashes: 1: 5yLA-3E75mxZ6L39i4BU-pLzy7E.roa (hash: +x4tLUzRfMhOOijhO4xbor2VoZt00YijzQROIpmNE9U=)
2: cERV0SshptRsefq-dpzg57EkY_s.roa (hash: QKZkzWste6kwWTGjAR2boXN2OGJXn03AiEgRUfoaTj0=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: ntzpRoCstK5F80hDMSP7Y/9YI4piwyPNE85PYCTczs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:b3:c3:98:0d:29:d7:6f:9c:8a:e1:44:a5:92:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jun 15 21:00:38 2024 GMT
Not After : Jun 16 21:00:38 2024 GMT
Subject: CN=0120ceb4461f59ef18b6773b368bd0041a0b7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:c6:3e:31:bc:c3:ee:a6:05:9f:b7:36:d4:
84:14:d2:cb:1b:6a:87:35:3e:43:7e:a4:4b:ce:99:
15:03:95:3f:1c:da:57:d9:0f:c4:12:84:b4:52:20:
fe:91:93:91:81:06:f1:41:c6:17:80:95:2d:e8:f2:
f2:9c:f4:e4:f1:06:0a:37:e7:d5:4a:34:99:e1:11:
44:74:97:c5:19:fa:57:79:51:01:c4:f0:a9:58:d2:
a6:2e:2c:fd:1a:98:1c:fb:0d:37:7c:a2:77:6c:d6:
97:2b:df:a1:02:7b:81:80:1a:96:a3:fa:c6:38:65:
df:db:2a:18:8c:d8:44:08:bf:6f:90:14:29:d9:db:
a4:d4:9b:8a:f8:87:a2:d8:1e:1a:95:06:5c:86:c8:
0b:77:c2:89:c5:b2:7e:6d:d3:fc:a7:c6:50:dd:23:
74:30:c5:da:70:1f:81:d0:46:16:4a:f2:2d:91:00:
29:20:44:30:7f:81:7c:80:c9:4f:c1:c1:c4:97:1d:
d7:c5:ac:c2:10:cc:52:20:27:09:2b:c6:8f:a1:45:
43:08:a6:8f:eb:66:5b:6c:5c:7b:f5:83:7d:12:da:
34:c3:20:e8:c7:03:3b:a4:fd:3a:70:85:db:3f:f0:
fa:4d:2c:88:10:d6:01:d9:a3:52:b4:9b:e0:27:5e:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:CE:B4:46:1F:59:EF:18:B6:77:3B:36:8B:D0:04:1A:0B:7F:C1
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:d3:fe:4a:0f:24:f3:99:00:60:a2:72:df:0b:1c:a2:27:
b5:48:65:83:b0:98:6a:cd:df:e8:c2:6c:e9:e7:34:27:ab:6d:
95:dc:8b:94:40:98:da:f8:30:6e:4b:bf:6a:2c:61:92:72:2b:
2e:8e:5e:1f:93:72:f5:d4:73:4a:05:1d:b8:98:81:f8:34:06:
b5:55:cb:63:2f:92:da:2b:e7:f5:e7:47:3d:40:7a:e6:c0:40:
a5:4b:62:96:b9:bb:d2:47:35:2f:46:52:3c:ed:03:b4:9b:a1:
5d:54:b6:35:a7:13:5c:40:7d:4a:bf:10:c1:d5:2a:24:c0:e2:
c0:90:f5:d4:d3:66:68:db:d3:65:a6:b5:ed:cc:12:83:25:67:
8a:e8:8e:e6:e5:f4:39:cd:9e:6b:08:a1:dd:ff:64:bb:5b:07:
c5:6e:36:16:97:a7:ac:08:3a:02:7b:52:a3:c1:3f:b7:08:14:
fb:c9:cf:df:f5:ab:a4:53:01:1b:f6:52:e6:a6:7c:e4:b6:7c:
fc:de:88:71:dd:68:9d:a0:5c:52:b6:df:1a:44:0d:12:d7:de:
1c:d3:b5:41:37:ab:95:de:56:ab:6d:01:57:a0:09:d7:d2:9b:
79:62:b0:fc:62:24:a2:19:6b:6b:d6:05:73:b7:f6:82:91:76:
e3:7b:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:32 2024 by rpki-client on console-fra.rpki-client.org