Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: oh/Hxa2i9b9v7Wvrsli+i1psfaJ0XCYWbCSzI0qK1f8=
Subject key identifier: 5B:63:C2:B4:C9:71:92:34:F6:62:C9:81:12:57:9F:E2:B4:B1:89:AF
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01906D863EA3DAB2021128BDBCD2EF551C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 11F1
Signing time: Mon 01 Jul 2024 09:00:32 +0000
Manifest this update: Mon 01 Jul 2024 09:00:32 +0000
Manifest next update: Tue 02 Jul 2024 09:00:32 +0000
Files and hashes: 1: 1-TQzBRsk_BUMpQjpaA7CVQWyU_A.roa (hash: utGksgbrn+kjS5cZR+TRF+YsUYmEwqtppBPIkLGZ8xk=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: 2WflOnEz8P8UnB4UOvZGIbnoXysuLdgQkJEtXQE0cTQ=)
3: jmn-nO6rVyJYRennm7w9ZQcZ8uU.roa (hash: wWIfyCrad/1Aa4CQAllrP8wJZVpPZCDRTIWQRACs/6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:86:3e:a3:da:b2:02:11:28:bd:bc:d2:ef:55:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jul 1 09:00:32 2024 GMT
Not After : Jul 2 09:00:32 2024 GMT
Subject: CN=5b63c2b4c9719234f662c98112579fe2b4b189af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:8b:e9:46:2f:c1:14:fa:8f:c0:f5:cc:5a:
98:cf:ad:c5:8b:c8:0c:b6:0c:9b:f9:3f:42:52:62:
c4:54:6d:3a:b6:65:82:bb:f2:80:e8:06:c3:3a:15:
39:07:76:cf:2b:09:91:ed:2c:46:23:6e:8b:25:64:
58:3e:0b:4c:5e:c3:da:27:cf:95:34:b4:c3:be:83:
8d:d7:e5:2a:da:6b:8c:0b:64:d5:c9:f4:84:4e:f1:
eb:64:7e:60:ee:e8:4f:ee:10:01:87:af:e9:b0:fd:
11:77:6b:91:b3:ee:ab:1f:8e:d7:88:d5:23:01:fb:
43:68:c7:6f:15:e7:54:73:5b:af:ae:d3:1d:6a:83:
c5:94:2d:e1:aa:c7:db:f6:7d:09:50:18:3d:c8:eb:
7e:bf:7c:54:66:03:25:e4:b0:ab:45:e3:15:69:cb:
81:0c:0b:ae:2b:5b:33:cb:08:6d:f4:18:9e:b4:c9:
94:4d:fa:3b:21:7e:50:e6:b6:66:cb:35:70:18:07:
eb:97:f9:ae:b8:86:a9:f0:f2:25:78:17:5e:87:0d:
2a:43:62:31:7c:52:57:27:56:50:0e:be:23:17:92:
cd:63:ff:46:93:4b:5e:68:16:1e:0b:c3:36:18:12:
b0:40:98:6c:4b:8b:07:ab:ef:f2:43:3a:b9:a8:5b:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:C2:B4:C9:71:92:34:F6:62:C9:81:12:57:9F:E2:B4:B1:89:AF
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:13:0c:91:a6:67:50:14:56:11:de:7a:51:b5:df:e2:8d:25:
37:40:31:c0:3d:cb:10:13:64:02:df:9d:1e:2e:b5:c6:4a:a5:
11:71:26:a8:b4:7c:79:79:fb:dc:c7:ed:77:24:6f:4f:91:b1:
db:dc:75:36:48:a9:d9:e2:c6:bb:b2:93:7f:a8:c5:41:33:c0:
46:c8:ee:12:af:19:b2:22:03:b2:7c:88:58:24:16:16:7a:3b:
ae:62:86:74:1b:d2:cc:bb:ca:c1:74:b0:32:2a:1f:94:f1:60:
98:03:c1:76:8e:36:86:a2:20:4d:70:3c:5f:65:e7:57:c0:99:
02:1a:6d:0d:58:10:01:1a:2a:df:e0:17:1f:a6:7d:2c:e2:db:
fa:c0:36:ab:10:e8:e7:f4:68:d2:60:9e:7c:5e:03:ff:1c:bf:
6e:98:4a:3d:00:9b:27:76:ad:cd:2e:44:b3:67:7e:63:0e:75:
e1:43:f3:28:71:69:96:ba:a5:e4:78:b0:26:e9:1a:e2:51:4b:
be:ee:48:a1:9c:f9:21:7a:e9:25:06:bc:d4:69:24:c6:cb:6f:
c0:54:63:6b:8b:99:a5:9d:d8:05:58:38:26:3e:6a:8a:51:a0:
6b:20:c8:3a:79:b1:53:bd:0f:56:2f:d9:da:4b:6b:ef:21:1f:
ee:cc:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:05:04 2024 by rpki-client on console-fra.rpki-client.org