Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: cx4owF8EQIyxRWV2cloZtOzhnzGMYWEODcZ1OmP+kFQ=
Subject key identifier: 2B:50:9A:50:AA:48:7D:E9:E2:CB:26:00:8F:BC:33:B0:7C:7A:A6:E9
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 01935576427BB4C79F29AE3BBF2F16FB6672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0CEE
Signing time: Fri 22 Nov 2024 20:00:33 +0000
Manifest this update: Fri 22 Nov 2024 20:00:33 +0000
Manifest next update: Sat 23 Nov 2024 20:00:33 +0000
Files and hashes: 1: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: yMHcoaAE8dBzoyvCnsEwcMgTDDVswKfn/qWY6pvMjvw=)
2: qKEUMube2W-a8-E6pqowKmnZkCk.roa (hash: zfMD3lZDc0BYBR5R5zpdNRcwVRCEZEftmSakeqjfh5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:42:7b:b4:c7:9f:29:ae:3b:bf:2f:16:fb:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Nov 22 20:00:33 2024 GMT
Not After : Nov 23 20:00:33 2024 GMT
Subject: CN=2b509a50aa487de9e2cb26008fbc33b07c7aa6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:0b:1a:0e:34:1a:c9:f8:78:40:46:a7:4b:
50:11:a1:41:7c:bb:82:5f:7d:fb:e3:0f:a6:21:d6:
75:b0:39:6d:34:6d:12:6a:09:0a:ec:d7:ab:65:0b:
04:e0:27:23:b0:c8:61:ed:28:76:67:08:f8:b8:f8:
ad:38:c3:30:43:9c:49:af:a1:41:2f:33:e1:59:ec:
53:ad:fe:a8:2d:7e:3e:c8:1f:7f:22:b8:00:72:81:
1c:a6:b2:a0:6e:9f:49:6a:9f:06:27:46:48:4f:16:
e9:1b:8f:c1:6c:9c:19:7f:40:d2:57:4f:31:1b:8d:
fd:db:76:df:fc:97:3a:45:55:8b:d8:80:78:b2:71:
07:55:f7:e2:b8:ba:57:8a:3e:d6:8e:09:0f:b0:9d:
e5:75:53:3e:95:29:34:d5:85:4d:18:1a:5d:7c:1d:
8e:4e:51:22:e5:64:02:40:6f:d5:2a:91:6b:7f:0b:
88:0a:56:74:ea:ec:b5:03:a2:2d:8d:2a:fc:0f:5b:
0f:07:2b:a5:1f:33:1e:1e:14:33:7f:a7:02:ac:d2:
98:3a:6d:98:bc:ac:80:61:60:1b:a2:4e:db:c2:81:
96:5c:9a:82:0b:cf:e0:7c:f2:74:bd:e6:fd:be:86:
ac:f1:05:83:05:0d:53:fa:2b:f9:ce:66:c0:78:b8:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:9A:50:AA:48:7D:E9:E2:CB:26:00:8F:BC:33:B0:7C:7A:A6:E9
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:3d:8d:8e:6d:50:00:7d:4a:2f:20:d5:d0:a1:c9:05:7b:
e9:d4:19:6c:6b:6b:b0:5f:5d:90:eb:e9:2c:ab:d9:09:86:74:
20:ec:b5:ae:fb:0e:5c:5f:d8:14:27:75:20:d0:07:4d:6d:29:
04:00:ae:ea:99:80:f2:f6:30:fc:9d:74:9a:1d:74:b9:80:d6:
3e:e0:5d:ab:17:39:0e:f4:9c:17:63:a6:cb:89:96:eb:7b:44:
43:ef:f0:3c:fa:26:4b:76:ba:3b:1b:90:a9:c5:c6:ae:94:ef:
bb:f4:29:74:ad:29:e0:78:0f:d3:39:ac:f5:5a:5a:67:f9:b7:
7b:9e:ef:fa:02:5a:42:78:9a:5f:62:c6:53:f6:91:51:49:75:
a7:ed:ab:3a:5d:1c:c0:ed:48:a8:52:60:6d:ee:29:75:ab:89:
9b:96:94:e7:1c:32:c3:77:36:1a:7d:c7:6c:f5:db:f6:13:2d:
40:88:9f:1d:8c:12:5e:cd:59:32:2a:a5:83:c9:8e:84:c8:d7:
ee:89:f1:69:0e:36:08:4f:cd:7b:df:0f:54:6f:96:27:eb:15:
fe:a1:4e:b8:3c:12:a4:18:e5:02:91:38:5c:8d:b1:da:62:6d:
89:3b:9e:3c:c3:01:8c:79:64:9f:cc:4d:97:37:a6:8b:42:30:
da:b9:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:27 2024 by rpki-client on console-fra.rpki-client.org