Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: 7zRU6WTPXyWALNwmxIloyErOZMmFgl6WzgSRxEzTQOs=
Subject key identifier: DF:06:97:E8:A1:BB:08:BE:B9:B3:63:A6:A5:5C:97:2A:A9:9C:A0:3F
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019352AD7E1E64DA84BF3AEFBB653451B6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 137B
Signing time: Fri 22 Nov 2024 07:02:01 +0000
Manifest this update: Fri 22 Nov 2024 07:02:01 +0000
Manifest next update: Sat 23 Nov 2024 07:02:01 +0000
Files and hashes: 1: 1-i4YiypHIcsQXIlXsjFt1KwGqVc.roa (hash: szH4zedltSFGYBh+Sx9WLLJSMz1v+nuu4Zreg9OH8fM=)
2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 2MH35wWt0R7tSFczCdTC3XuNZFu9wpHIeExJ8xbQur4=)
3: JJ70baT2sCrqFpfFsjpE1qYjMqU.roa (hash: 74lzGxjbnJox44nwcMjlRiDztBNS8QXxAyu6GBStlHA=)
4: Of1T1Wc0oO1e6ol4q6Eo1_y5EE0.roa (hash: 8zmA1R1ob6Ch4Ieir5vtQDKDsFBv6VWrcXtPq4w7mw4=)
5: R3ah98bTNLKVwamLUZNAMD2VfVE.roa (hash: jL7sMyFB6XUjGvIkLrJIJLBvMuAvR8LR2foDs4adzVY=)
6: jSRskS8oJdxXnCBy7aX9uCQ-2pE.roa (hash: ZhagmfMVpgagwmrK9AGJ/UwkVXVyhrbgfOVvSEGHjrc=)
7: vQeE7CRw6AZl0I1QEpxKLCI8v34.roa (hash: kWHONs7ZVO6+yK59NRqtz9P27DzEiXkghY6xXGeG2Ro=)
8: yAoShkDCQMMO4x_u0wTrSIXf7oA.roa (hash: QoIIRPWGlygJlkwm3EwxD1k4aCUDW5rPCs56+XoEPfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:7e:1e:64:da:84:bf:3a:ef:bb:65:34:51:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Nov 22 07:02:01 2024 GMT
Not After : Nov 23 07:02:01 2024 GMT
Subject: CN=df0697e8a1bb08beb9b363a6a55c972aa99ca03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:f0:02:e9:1d:c2:57:cf:ef:0c:4d:fe:76:
5a:90:b7:4a:2a:c7:4b:35:e5:d0:ea:9b:e7:1e:33:
8c:fb:5b:8a:20:57:66:59:6b:93:a1:e9:7a:f4:b4:
28:28:32:1f:12:09:45:a8:ca:19:cf:d8:d5:df:6f:
4b:09:38:d3:a9:ac:a7:b4:cc:3b:b5:e2:cd:e4:a8:
b7:f5:41:13:6e:41:16:cd:0a:f0:f1:fb:f1:1f:83:
b8:91:bc:33:42:87:b3:35:ff:a9:6f:fd:52:78:e0:
a3:ea:ae:9f:ce:ad:45:b4:7d:89:27:b2:3c:1f:1e:
22:78:12:82:9b:5f:95:89:05:17:1e:2f:34:a7:6b:
cd:cb:36:e9:9f:76:82:93:5a:7e:0f:40:43:68:98:
e9:23:34:93:b9:99:1f:14:c3:f6:11:68:63:26:0d:
55:53:2f:94:79:46:22:29:d4:52:55:f1:57:72:0e:
ab:3f:73:b8:ce:2f:67:06:97:0d:13:85:66:9c:8d:
d9:0d:66:5f:7b:5f:48:ab:cb:69:59:a6:d4:37:a9:
45:74:16:79:0f:3d:ea:52:91:e1:95:d1:f1:c5:ec:
e8:ad:3d:c1:8e:5a:5a:d9:32:c5:83:95:dd:bc:06:
d9:50:68:61:f9:0a:96:63:d6:e5:b5:d6:0e:90:cc:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:97:E8:A1:BB:08:BE:B9:B3:63:A6:A5:5C:97:2A:A9:9C:A0:3F
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ba:33:78:44:14:ca:dd:17:ca:d3:7f:c1:f5:e5:cd:24:09:
fa:63:8e:e3:51:54:3b:3f:4a:29:39:a6:2c:16:2a:e0:96:36:
6e:a5:04:14:11:61:56:1b:d2:f0:41:f5:4f:94:6c:af:cf:7e:
0a:55:94:bc:c6:88:c1:81:69:6d:e6:48:75:a6:86:df:b6:fc:
67:17:c1:b7:3e:11:f1:ee:22:b2:7f:d5:b8:aa:2b:3d:11:54:
05:a0:f4:d2:0d:69:ad:eb:e7:44:7c:b3:3d:2f:21:2a:05:58:
73:16:b1:fc:a1:0c:e5:ba:f3:65:79:95:17:fd:af:48:0c:68:
cb:31:82:d7:d6:e3:10:3b:de:66:ff:72:19:60:bc:d2:52:91:
3f:4b:ff:e9:d6:23:a8:95:f8:db:be:78:60:88:9d:4e:af:2a:
d0:e8:b6:af:55:9c:11:41:67:fb:3d:52:2a:1a:eb:07:41:80:
e6:50:f9:ea:c1:58:b3:48:ce:ca:37:43:73:e5:b1:e8:28:33:
41:49:76:d9:5a:82:54:a7:0a:52:36:5d:a0:6b:36:80:e0:0e:
1c:80:4a:85:b7:77:44:79:1b:f0:cc:cb:74:dc:60:0d:50:52:
ee:b6:31:3e:e4:30:3b:c7:e0:8d:fc:f7:c7:d6:4d:c7:a9:f4:
58:ab:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:43 2024 by rpki-client on console-ams.rpki-client.org