Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: iNMz3pwU+f7HwVIC5DO/xaZNhIhkV8OfcKEBCT0Wb80=
Subject key identifier: 32:B2:28:7D:A4:13:27:39:F3:75:80:FE:04:7E:C2:5D:64:C6:AF:C7
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019352E2D2043D8C3F37DA2634DC143A3330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1308
Signing time: Fri 22 Nov 2024 08:00:16 +0000
Manifest this update: Fri 22 Nov 2024 08:00:16 +0000
Manifest next update: Sat 23 Nov 2024 08:00:16 +0000
Files and hashes: 1: F4pdNaotv_8lGx5c5G5QFj5WrTQ.roa (hash: yA0a2pHWLjjxNlMJVIw/vWwevRX1Z7qmEcYNnQafYlo=)
2: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: gLu6hO5AVYM4wjusngtujgVND5FMrHu16vmWi7OZ84A=)
3: XRL63XeVur8ezt32CXft2o7J1SY.roa (hash: f1Id5Xi5Q1qL66wfgWWh7ZhtRW2u9za7fCxs28FPwkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:d2:04:3d:8c:3f:37:da:26:34:dc:14:3a:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Nov 22 08:00:16 2024 GMT
Not After : Nov 23 08:00:16 2024 GMT
Subject: CN=32b2287da4132739f37580fe047ec25d64c6afc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:ac:f1:5d:62:ac:33:42:6b:39:2c:55:e1:
cd:b6:ae:5c:98:2c:da:1d:67:e9:2d:da:3b:14:f0:
7f:ef:64:7f:95:d8:7d:4f:b6:6b:63:ec:0f:c1:4b:
29:39:e0:3c:a4:74:4e:d9:dd:6e:02:d0:4d:f9:9c:
9e:88:f2:10:74:cb:ba:74:9a:61:e3:b5:a0:60:fe:
a2:7d:f3:b2:2b:29:08:bd:78:49:5b:80:aa:a3:c4:
fd:0c:c0:d0:c6:f5:a2:fc:2b:39:15:7b:14:e3:84:
96:47:04:d3:3e:90:c5:7b:70:d7:77:81:13:05:68:
ba:97:2c:34:11:77:90:4a:eb:e8:2c:f5:06:71:6b:
7e:59:10:c6:bc:58:4d:30:e8:c0:18:b0:a3:41:9b:
43:57:20:f3:c0:1c:07:65:fc:2a:e8:26:9d:51:b3:
39:fc:f5:ca:c1:22:4d:7e:dc:91:b4:ec:da:b0:76:
64:5a:da:d0:f7:86:8b:3f:c7:48:97:86:e7:d1:da:
46:07:a5:89:a9:a1:7b:88:14:16:93:72:98:d3:45:
30:21:d0:1f:60:aa:76:30:05:cb:e9:8e:63:a4:a2:
30:f5:fe:30:56:e3:42:c6:38:5e:fa:60:f9:34:b8:
66:f7:4b:2d:26:d2:da:27:0b:a5:5d:3d:fa:11:9a:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:28:7D:A4:13:27:39:F3:75:80:FE:04:7E:C2:5D:64:C6:AF:C7
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:fb:9b:25:e8:de:61:ad:8d:24:9f:46:77:65:80:5b:a3:
d5:78:c4:d6:1d:3c:30:7f:a1:b3:49:65:07:8f:9a:38:10:32:
a1:da:61:c8:0c:12:cf:09:3a:81:c2:0c:db:e1:1d:91:54:c1:
ed:2c:ea:50:25:21:da:ff:dd:1d:03:2a:fb:9a:03:10:7b:ca:
77:1d:d7:2b:98:c2:58:a8:3a:fd:96:24:f4:4c:38:40:51:76:
bd:f2:a5:e6:8e:3b:36:eb:df:e7:61:a7:48:2a:6a:75:dd:c5:
b8:f1:f4:10:f1:a9:c8:8b:3a:de:d1:c2:46:e1:fa:f7:07:08:
9c:dd:ce:87:c1:8c:83:24:95:49:de:49:f2:fd:4c:65:e2:91:
37:81:14:b4:ac:ae:6f:46:33:aa:57:09:1a:f0:a3:8f:d0:34:
d0:ab:c3:46:f8:8e:bd:5c:b0:b7:b9:9e:a8:81:b4:e2:98:c9:
ef:59:6d:32:4e:3a:38:f5:46:ff:6e:d1:27:01:78:72:b0:f2:
f1:3c:79:e4:0c:fa:bf:eb:0f:fe:63:eb:bf:1e:4c:0e:a2:22:
a8:27:15:a0:f4:aa:39:f5:98:f1:82:ab:cc:29:e0:b2:7d:86:
fc:3d:9c:70:bf:08:c5:87:ec:4c:86:99:ba:3a:53:52:13:f5:
7f:f4:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:09 2024 by rpki-client on console-fra.rpki-client.org