Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: pyGwzX4n18sRRoQ9XT7JzHnDZNQrtE1PnF1v4dasZPg=
Subject key identifier: 99:A9:7F:ED:CE:6C:20:78:1A:70:3E:FC:3C:85:6D:A6:61:D6:50:47
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 0193549CA0046A9921E96C4AA5824180CDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 16:02:50 +0000
Manifest this update: Fri 22 Nov 2024 16:02:50 +0000
Manifest next update: Sat 23 Nov 2024 16:02:50 +0000
Files and hashes: 1: jGQpjX60b2iws1uN8G6sekXL2Tw.roa (hash: VEdNEHKDDjG12NFe64a4UgUvCgt/5jWVvDrJtmjNHXY=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: 8O1ueOSzBV7YNM2bNkgEVc+6Kmdyz+QIcr/N40T6pcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:a0:04:6a:99:21:e9:6c:4a:a5:82:41:80:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Nov 22 16:02:50 2024 GMT
Not After : Nov 23 16:02:50 2024 GMT
Subject: CN=99a97fedce6c20781a703efc3c856da661d65047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:ba:87:fc:c1:f2:b4:bf:c7:6f:17:98:30:
c1:15:32:35:24:41:32:61:e1:b1:90:43:9b:b0:e6:
b9:38:c2:05:ec:51:b4:5a:5a:3b:00:42:a8:0d:7e:
92:0c:dc:7b:61:29:75:db:fd:32:4d:b3:f5:29:4f:
07:28:0b:73:af:2a:c5:1e:86:98:c8:55:2d:f2:a6:
e9:b6:10:cc:64:d8:2f:79:dd:48:c8:84:84:9e:37:
33:07:91:5a:af:2e:4f:b2:7f:0a:6b:b9:03:91:96:
53:d5:2a:97:06:91:f8:15:25:5c:6a:7e:d7:2d:69:
38:2a:96:a3:e9:71:45:c2:d9:2a:d9:7d:eb:21:b6:
16:a1:bd:81:43:2a:ad:48:26:eb:54:00:54:c2:38:
e3:e9:9a:28:85:ba:ee:0c:a1:3e:29:74:11:a0:a0:
70:f9:d4:b3:78:52:2f:01:31:49:2c:5a:2c:a1:45:
f4:da:3b:e7:48:20:ab:e3:7d:2b:b1:02:79:9b:e2:
38:25:f8:fb:74:85:aa:66:b7:26:db:cd:37:4a:2b:
3d:2f:48:5f:c4:4a:40:2b:62:4d:6d:4f:34:7f:02:
c0:a3:35:bd:66:ed:87:28:b2:0e:59:34:ca:8e:2a:
7a:02:ec:22:2d:78:22:62:79:b6:f4:10:4d:9d:2a:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:7F:ED:CE:6C:20:78:1A:70:3E:FC:3C:85:6D:A6:61:D6:50:47
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:26:14:23:89:73:51:f7:df:c0:84:ec:17:ac:f0:10:3b:ed:
90:c3:c4:50:ad:cd:bf:71:32:f2:cb:b6:2a:cc:39:09:1a:39:
8f:f7:10:0a:6f:55:b6:6d:ea:95:7e:36:3d:6c:7a:7d:4d:76:
95:f0:67:09:69:27:43:c5:9e:b4:eb:35:b7:00:3c:ba:c8:c2:
ce:06:79:6c:ce:ab:d4:a0:e5:6a:16:d2:8f:ef:fc:6f:f7:38:
99:ef:9b:a8:25:41:98:16:fe:c9:5d:e6:3f:05:a9:44:41:73:
56:02:e7:6b:5c:74:c9:98:a4:6b:8b:f2:06:1e:b1:53:be:b3:
12:a5:91:9b:ca:3e:f3:6d:e6:d4:cf:58:7b:0c:f5:0d:51:6b:
42:d2:21:45:06:ce:8b:41:81:ea:a1:59:1f:2d:66:a0:45:cb:
73:cf:55:75:ea:21:09:cf:63:a7:fb:39:d3:e6:9c:bf:6a:c3:
f0:ec:17:1d:68:53:d8:ca:fa:ca:1f:89:62:a6:3e:ba:cb:08:
89:63:ab:f9:73:9e:49:65:0a:b3:4c:76:82:f8:ca:81:ef:66:
df:e9:df:b8:96:1b:08:03:89:5c:be:d3:90:e4:63:6c:a4:3a:
2a:9b:87:78:30:31:36:b5:20:cc:7e:85:ec:5a:37:07:95:94:
9c:5c:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:18 2024 by rpki-client on console-fra.rpki-client.org