Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: NSQavtthoqdupFKM6ySWRWnwAUpk5raE5CdhAGEyVEk=
Subject key identifier: 87:A8:F7:60:8F:31:24:64:AB:2F:A3:37:FE:2F:65:76:C5:14:29:E8
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01923AA6EBF63449A90287386EF250DC907E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 12E0
Signing time: Sat 28 Sep 2024 22:01:10 +0000
Manifest this update: Sat 28 Sep 2024 22:01:10 +0000
Manifest next update: Sun 29 Sep 2024 22:01:10 +0000
Files and hashes: 1: jGQpjX60b2iws1uN8G6sekXL2Tw.roa (hash: VEdNEHKDDjG12NFe64a4UgUvCgt/5jWVvDrJtmjNHXY=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: dyHdrg1LNjWE4VvlxA0YYi7FSURgm5+51pG/67ZKyXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a6:eb:f6:34:49:a9:02:87:38:6e:f2:50:dc:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Sep 28 22:01:10 2024 GMT
Not After : Sep 29 22:01:10 2024 GMT
Subject: CN=87a8f7608f312464ab2fa337fe2f6576c51429e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:15:3b:fc:1d:2a:df:93:f3:89:bf:95:27:
8b:4c:ca:49:1d:7d:a3:6d:c9:a4:61:b9:f6:b2:05:
69:f1:70:28:c2:be:2c:67:c7:3d:fb:31:3e:7b:7b:
b6:9f:e4:f9:d2:cf:36:a9:13:15:bf:78:69:8a:b3:
12:b5:62:fe:d8:06:32:34:49:65:91:a4:6a:39:c3:
c8:80:c5:2d:2e:aa:c2:08:8b:4b:3f:2c:3b:db:c4:
02:e2:8f:9c:98:a8:6e:f7:14:9e:0c:bb:e9:d8:52:
64:93:1e:b0:5a:92:61:f4:81:ad:89:a1:2a:9f:5f:
9f:97:fa:48:27:f1:64:a9:ad:92:49:75:b9:49:c9:
e4:91:7e:0d:b5:ed:33:25:4e:8b:d4:a1:12:9c:26:
6d:76:6c:a1:58:50:7f:e4:ce:1a:a3:1d:ad:da:10:
c8:04:f0:f9:14:45:ab:df:b4:bb:8f:08:ea:40:46:
a5:dc:2f:b5:9b:0c:b2:68:98:a2:57:f7:08:2e:4a:
d1:e3:cf:fa:59:f2:52:a0:a1:6f:a1:01:c5:13:32:
ae:9a:ac:e7:2c:25:64:7a:71:6f:29:82:e7:df:6d:
c5:31:c8:53:ce:47:a4:ee:82:98:de:6a:41:2f:1a:
b9:f6:e4:1b:e5:84:43:03:d2:28:1b:e7:80:26:9b:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:F7:60:8F:31:24:64:AB:2F:A3:37:FE:2F:65:76:C5:14:29:E8
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b5:5b:37:0b:85:c4:ad:1e:d7:86:64:8f:e9:f7:ec:2b:e8:
b7:67:4a:9b:ca:00:cd:8a:62:d6:0f:01:54:65:bf:57:c3:32:
93:8f:3a:57:30:9d:66:92:41:cc:59:22:7f:ff:a4:e8:87:fe:
7f:37:d7:bf:97:5d:d7:39:a0:d9:7a:43:53:01:8a:a6:af:55:
ad:fd:4f:e9:86:4f:fb:54:2e:92:0f:56:b6:43:49:34:af:22:
9b:9a:da:6c:8b:ea:88:b7:ec:b4:8f:a3:af:6b:59:ae:8b:52:
2d:4c:56:6b:ac:4e:85:41:e2:de:84:2c:98:d1:55:6d:ad:57:
df:4e:39:77:42:e1:76:ad:b2:ba:8b:cb:c3:59:e8:ea:93:4f:
1a:95:46:e4:95:2b:4a:37:c6:eb:2a:d3:60:17:5d:87:d2:7c:
73:f1:b7:7d:46:3a:09:50:29:c5:eb:26:07:dd:2b:88:ea:97:
b7:8e:cd:f4:c2:73:c6:0f:41:fc:9b:88:4b:70:df:e8:8f:87:
31:d5:63:0d:de:f0:54:e6:5d:a0:b7:d6:c8:6c:52:2d:90:bb:
32:a4:8b:3a:e6:0e:8d:f7:f2:4b:8d:4c:44:8f:b5:8e:99:28:
75:5e:dc:9f:8c:eb:27:3c:f6:1f:7b:df:2a:72:92:72:14:a5:
e8:37:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:41:13 2024 by rpki-client on console-ams.rpki-client.org