Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
File: t1SZK6SIqHLInL30LKTfiV5gnFM.mft (raw, json)
Hash identifier: 29txqFTEzaoZVU0cFVoFphBUYb48bm/hZKHftOtHwE8=
Subject key identifier: E4:31:30:49:77:10:FB:CF:96:6F:57:14:43:58:6D:AF:3A:90:57:13
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 0193549CB7FC09BF6E7BBF2100956D7AC280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
Manifest number: 0E65
Signing time: Fri 22 Nov 2024 16:02:57 +0000
Manifest this update: Fri 22 Nov 2024 16:02:57 +0000
Manifest next update: Sat 23 Nov 2024 16:02:57 +0000
Files and hashes: 1: SEpkDJml4k88Q5MpYoM-sDRp29o.roa (hash: IPytsP3MgZg5qusevC6QyPtYuPVYWiCsiCMHjwI5HRc=)
2: oes4Ltjcpie6AI_fbZYZFJBj74s.roa (hash: D3uU4hK/6xQOLlRUqBdfa/92ATrI6sMx+qh6u3Be4PI=)
3: t1SZK6SIqHLInL30LKTfiV5gnFM.crl (hash: xXq+290MJT+E+WUV2/fGxkj337/lY6BjMFVcYwP64WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:b7:fc:09:bf:6e:7b:bf:21:00:95:6d:7a:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Nov 22 16:02:57 2024 GMT
Not After : Nov 23 16:02:57 2024 GMT
Subject: CN=e43130497710fbcf966f571443586daf3a905713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:c6:95:f1:28:62:eb:b7:de:b3:ae:b9:d3:
1f:fc:a0:20:8c:2f:49:84:4e:b8:2e:17:64:47:b3:
6a:b8:bf:82:81:20:61:5a:87:b8:b6:eb:f1:b9:3b:
ae:d1:7b:c7:18:c1:2c:e6:f1:39:4c:c2:10:d8:65:
80:1d:23:60:dc:65:08:f7:27:5d:de:8f:76:9c:09:
e5:ec:1a:0e:f5:6c:58:c7:bb:0e:ed:64:c7:a8:cc:
8a:42:fc:d7:22:2a:13:03:b6:c0:16:fb:7f:7b:79:
bd:aa:2b:b2:62:55:c6:fd:e1:5a:43:31:eb:7c:f1:
ef:18:f3:0b:8c:0c:bf:49:8e:1e:6c:31:48:93:14:
a4:16:6e:d9:60:39:a4:ad:aa:56:4d:d4:f7:53:4c:
7f:b8:31:75:f1:91:34:f9:7b:64:dd:56:61:cd:9d:
a3:69:42:24:16:7d:0b:84:a6:c3:ab:8e:10:0a:a2:
c2:fd:80:e5:99:32:c6:12:ee:f2:2d:f6:40:34:ca:
5f:55:99:93:35:b3:77:a3:6c:98:01:20:b4:3b:de:
3e:fc:3b:66:88:5f:f9:e6:a3:68:22:cf:d1:c3:a7:
cd:3d:8c:34:76:b4:6f:47:96:66:ec:75:1e:bc:6f:
cb:3c:a6:03:e3:6e:25:e1:96:aa:77:5e:da:20:5f:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:30:49:77:10:FB:CF:96:6F:57:14:43:58:6D:AF:3A:90:57:13
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:47:30:f1:85:40:72:09:82:a7:95:c0:1c:01:c9:eb:4b:
09:af:12:6c:16:be:e3:aa:8b:da:13:70:8a:19:66:3f:a0:57:
37:60:8c:23:5a:50:a3:20:c5:e6:15:ad:88:0c:98:c1:d4:c9:
e4:f8:17:8f:b6:60:d0:4c:26:e7:84:8a:b5:28:21:51:70:60:
76:55:88:15:9a:2d:67:eb:36:56:22:3b:d3:8b:e2:fe:00:5d:
07:dc:f1:3a:05:ca:14:29:02:81:98:41:e0:8e:f8:e6:d5:9f:
ff:92:02:ee:da:c8:b6:8d:75:ac:6f:c4:27:47:c1:73:58:26:
3b:5f:e2:36:ce:ae:f4:c2:e5:69:54:70:35:a9:aa:ab:4f:66:
a2:0a:fc:38:12:84:71:5f:7b:b1:3f:ca:a4:cf:62:43:4b:b3:
dc:d3:44:df:ff:b9:17:ff:02:69:ac:f1:81:91:25:9b:86:c2:
89:d6:ed:90:70:b7:7f:5e:07:2e:9b:d8:2c:07:fe:26:f0:4f:
9f:91:65:55:72:88:c7:28:e5:53:97:2d:9d:11:f7:b6:40:ea:
75:9f:6f:48:18:ab:3f:23:06:83:3e:cf:31:eb:60:ae:16:14:
36:f6:5f:bb:bd:3a:a6:94:d2:32:7d:c5:f5:d3:12:d0:c5:79:
de:1d:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:57:36 2024 by rpki-client on console-ams.rpki-client.org