Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: gxiR6vp9CeojfDznCvH7ZNwLHSDGq2e/yfASpXzEdbc=
Subject key identifier: 2F:12:EF:33:60:8A:70:11:1E:45:68:91:CC:78:81:F3:8E:0B:B6:96
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 0193579BD9F46E38B9B3DD7F5B98608068C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0AE8
Signing time: Sat 23 Nov 2024 06:00:51 +0000
Manifest this update: Sat 23 Nov 2024 06:00:51 +0000
Manifest next update: Sun 24 Nov 2024 06:00:51 +0000
Files and hashes: 1: PqYivTbBUGRa3r405njgslres4Q.roa (hash: Xcoa4fFHTXgFWGlMr3aL34jR90wFuBSXV+WVq4qWo3M=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: ijyrLxXV7LIRJNYw6CBHFGjjetj1WpWqrkS6i16ikBg=)
3: wUNmbFk1v6u7xR5hCviVkBvUPgs.roa (hash: Sh6tsWN215KDx7fXXwTV9jlvZ60RCPsCey5M9YPc/Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d9:f4:6e:38:b9:b3:dd:7f:5b:98:60:80:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Nov 23 06:00:51 2024 GMT
Not After : Nov 24 06:00:51 2024 GMT
Subject: CN=2f12ef33608a70111e456891cc7881f38e0bb696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:6d:ed:ee:5f:f5:53:d5:6e:d1:13:11:25:
cd:d1:12:c4:c9:40:38:20:f7:75:fc:eb:93:aa:a5:
c4:b1:e2:22:47:37:88:38:fe:14:88:bc:fb:80:72:
7f:1f:24:14:0e:72:4e:90:1a:1d:6e:73:0a:08:f1:
89:1f:87:b7:4b:87:3a:ee:6c:da:5a:60:62:15:89:
48:4d:eb:69:53:ba:ee:9d:e9:34:e6:09:aa:f1:77:
39:35:7e:24:ce:d5:c2:6f:22:7b:76:0c:72:92:6d:
82:d0:76:1d:88:a1:12:2c:68:11:36:94:1c:fa:21:
5a:d4:12:39:d0:17:00:d2:15:e2:78:4e:e5:05:ef:
f0:3e:23:67:01:76:21:62:f7:cc:ce:19:81:19:ad:
5a:f8:a8:e4:40:d6:d2:be:03:60:31:03:a7:f9:74:
d4:93:91:c3:b9:63:8b:6a:35:43:e9:4e:2a:37:21:
2b:43:8a:3c:c4:b7:83:15:90:c1:09:8b:61:30:d3:
c0:1b:8a:3c:0a:54:80:50:68:24:9d:f9:13:42:5e:
43:f0:10:a3:f4:4c:1f:12:c4:41:e0:99:f1:37:ff:
ee:42:05:95:14:45:5a:06:5b:65:d6:9e:99:3b:50:
6c:7e:00:fc:de:bd:f1:a0:1f:eb:d7:df:8f:8c:1f:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:12:EF:33:60:8A:70:11:1E:45:68:91:CC:78:81:F3:8E:0B:B6:96
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:b3:e2:ef:6c:53:5c:5d:42:4d:a7:c5:72:7c:02:b2:fb:
43:2b:d8:9c:f8:57:d3:ff:4b:b8:82:5f:19:e0:61:5f:e2:5b:
51:0b:c3:83:42:18:69:16:4d:ec:83:8f:aa:e5:77:1e:f8:6c:
bd:5e:03:2f:6e:56:c8:c0:a5:34:8c:7e:fb:b2:96:ac:38:f7:
e3:82:44:da:0e:76:2d:bf:f4:5d:6f:e6:6d:c3:db:6a:e0:58:
71:0d:17:70:2c:b4:de:af:40:cd:58:2c:a7:c3:51:6e:2f:f8:
7a:80:50:6f:e0:21:60:0e:3f:a1:97:cd:77:88:47:1b:c0:98:
87:64:35:9f:ea:f8:70:70:8c:24:7f:4a:ab:12:e5:8e:73:86:
02:a6:04:17:ee:d4:6a:4d:be:42:8f:52:b7:fa:f3:87:1b:c0:
06:0f:bb:77:36:15:2e:3e:10:55:ab:d7:93:7d:16:5f:f5:26:
35:c9:ae:8a:5f:b8:3b:25:88:d7:ff:ab:cc:b4:5c:b2:a5:6e:
5f:d8:de:08:ce:b3:c4:2a:67:b5:0a:18:1e:46:7e:25:fb:01:
a9:0b:c0:1f:da:ed:20:ab:7b:22:84:35:b5:88:97:bb:98:c0:
d8:70:c1:5a:3f:b4:1a:bf:c4:0a:bb:f6:88:bd:46:8d:f9:81:
83:59:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:47 2024 by rpki-client on console-fra.rpki-client.org