Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: 7mxOGHmqKwSUhXjwEb2tjxeFHpjGrcyBWxXw5/vEub0=
Subject key identifier: 23:17:84:41:BE:04:A9:5A:15:88:43:47:D3:EC:37:B5:02:B4:0F:06
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 0193549B7E166E5F083020070C4F83DB98B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 16:01:36 +0000
Manifest this update: Fri 22 Nov 2024 16:01:36 +0000
Manifest next update: Sat 23 Nov 2024 16:01:36 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: cOA/VlyDF6fXmKrDstpeEfUPo7FQG5AnkhBssId63RE=)
2: WLoUvvGm1-HzNNafioYRXPzupYQ.roa (hash: Wb1nheXGcgD19GeZ1iMGx1nU4RIoIkEB/V7O3tAGxCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:7e:16:6e:5f:08:30:20:07:0c:4f:83:db:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Nov 22 16:01:36 2024 GMT
Not After : Nov 23 16:01:36 2024 GMT
Subject: CN=23178441be04a95a15884347d3ec37b502b40f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:f4:be:78:ca:08:31:68:c0:0e:45:b6:78:
f8:6e:c2:71:2b:c4:f4:49:6c:dd:93:e1:7a:eb:a3:
1e:28:1d:a6:a2:cb:02:e9:1b:3e:6b:28:9b:5a:b2:
45:6d:d3:37:12:4f:c6:92:1d:b0:c7:b4:99:60:d5:
73:1c:b8:27:47:fa:b2:8e:07:24:c1:2d:0a:57:91:
cb:ad:b9:c5:a1:0b:af:2a:b6:69:ac:df:d7:28:d7:
ac:50:7c:e2:7c:7b:15:4a:9e:d1:fd:5a:4e:f2:3e:
b8:00:24:a6:ac:d1:a5:52:2d:a0:d0:23:5a:46:4f:
24:de:a4:de:aa:13:2b:26:d6:ae:25:17:ea:6e:51:
d5:81:37:0d:aa:79:a6:39:ef:c2:f2:35:aa:d4:5f:
86:f7:4e:19:81:e0:d5:9f:9f:64:8f:3f:53:8c:2f:
12:59:64:a6:24:5d:ad:32:44:12:8b:43:36:0e:56:
42:fa:5e:32:9f:b7:2a:1b:8d:01:ce:b1:51:e2:11:
31:ad:54:ae:89:ee:ac:f3:b0:9a:9d:72:b0:5e:06:
df:05:31:36:09:bf:84:78:78:7d:26:74:3c:39:3b:
e9:21:80:8d:34:2a:40:44:aa:68:28:eb:03:27:1c:
a9:97:58:bc:cf:88:83:f7:31:cf:98:20:ad:02:bc:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:84:41:BE:04:A9:5A:15:88:43:47:D3:EC:37:B5:02:B4:0F:06
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:14:f2:fe:11:f4:62:4d:32:33:ca:59:eb:f0:6e:c0:73:
6e:2c:2f:90:4d:36:d9:42:09:b3:19:80:f7:fd:d2:3e:c9:ba:
45:66:d6:fb:5e:89:b8:f1:e7:e7:cd:4a:5b:7d:30:41:da:23:
41:16:36:b5:aa:2b:f8:1e:33:a8:1a:db:36:47:fe:65:b3:74:
bd:03:25:c2:03:d1:52:fb:00:26:a3:e1:44:93:23:35:d5:7b:
11:1f:64:44:e2:27:b9:dd:97:ff:a4:41:c6:12:38:2a:cd:78:
78:2a:7f:cd:f3:c5:f7:81:a2:13:1c:23:32:81:7b:e9:68:f5:
83:1f:3f:1e:15:bc:1e:54:9d:b2:6a:8c:d3:ff:16:3a:f4:7d:
75:e4:07:ee:96:ce:55:e6:c2:91:3d:da:bf:81:9d:d2:2f:e6:
10:40:1f:90:30:56:fe:c8:62:0a:fd:77:d1:61:27:d2:50:23:
cb:51:a1:9f:ba:2a:a7:9e:43:7c:bb:c8:8b:c0:de:1f:88:35:
41:92:96:02:39:d8:54:f7:a8:f9:28:ef:11:01:52:b6:e3:d1:
6d:24:74:47:64:f0:72:e3:78:b2:38:d7:9d:89:8a:27:db:e0:
53:4d:4a:c0:42:70:f7:e8:19:53:49:d2:11:f5:5b:e9:cd:e9:
89:34:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:39 2024 by rpki-client on console-fra.rpki-client.org