Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
File: TATgEjGx24ILH11UKDSrBfaT_Xg.mft (raw, json)
Hash identifier: B6ENkaGfww9/VGLcFGmR1cqOsGd6/t5J5AdoioMX7Jg=
Subject key identifier: 0F:0C:AE:49:20:34:7F:7F:C4:23:93:2C:11:81:B9:A9:7D:7E:C0:1E
Authority key identifier: 4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78
Certificate issuer: /CN=4c04e01231b1db820b1f5d542834ab05f693fd78
Certificate serial: 019369D966C87EA9A8C3E2FE2D697033E39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
Manifest number: 137D
Signing time: Tue 26 Nov 2024 19:01:15 +0000
Manifest this update: Tue 26 Nov 2024 19:01:15 +0000
Manifest next update: Wed 27 Nov 2024 19:01:15 +0000
Files and hashes: 1: TATgEjGx24ILH11UKDSrBfaT_Xg.crl (hash: W2RCMl2pgfx6Uh6kWCzoGYZq9L47Q4odY/FbiI+QkGo=)
2: YOGFlmlV2_WJqXJipmKxo-UT7Fs.roa (hash: yldbSa1BsIMdKFPk5mMeltr1Ebyxjw7wj9onkWkP/p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:66:c8:7e:a9:a8:c3:e2:fe:2d:69:70:33:e3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c04e01231b1db820b1f5d542834ab05f693fd78
Validity
Not Before: Nov 26 19:01:15 2024 GMT
Not After : Nov 27 19:01:15 2024 GMT
Subject: CN=0f0cae4920347f7fc423932c1181b9a97d7ec01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:7d:84:15:88:8a:60:a1:c6:8c:0d:fc:89:
88:e0:83:4b:d5:47:54:c1:fa:44:a5:88:de:02:b4:
e7:62:a8:64:33:3f:76:0c:d9:ae:66:f3:b9:7e:12:
6b:85:b5:85:b5:05:ae:d6:2c:be:93:8c:3e:bf:8e:
40:bb:ed:49:89:43:da:8f:fc:eb:66:5a:59:7a:41:
f2:0c:e8:72:be:03:a5:c2:96:35:6f:5b:86:81:46:
7b:8b:c4:67:8b:6b:cb:14:ce:fe:41:1a:01:20:4e:
82:c6:f7:3f:d1:89:7c:6f:e4:6d:ae:ed:8f:1f:d5:
a8:2b:76:69:1f:e6:05:c4:d4:41:0f:0a:82:06:e6:
bd:c4:23:96:df:2a:42:a7:24:6f:a4:01:ca:e5:b3:
cf:0f:7b:12:1e:c0:70:0e:42:8c:5b:92:27:fa:50:
1c:2e:0d:8e:87:d9:cf:f9:6d:72:ee:82:3d:e1:81:
44:01:62:02:de:52:85:90:bc:02:f9:87:9c:a5:3b:
4b:bb:77:45:d2:d7:a3:a8:54:ab:ba:58:fe:b4:2b:
aa:6b:54:11:30:46:57:92:2b:1b:4d:bf:0d:32:23:
3b:05:14:3a:3d:72:25:55:4a:63:b1:f8:aa:46:fe:
fd:b2:86:ea:84:74:28:45:7a:38:e9:e1:61:d4:b5:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:AE:49:20:34:7F:7F:C4:23:93:2C:11:81:B9:A9:7D:7E:C0:1E
X509v3 Authority Key Identifier:
keyid:4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:88:39:1d:4a:b5:f5:4d:d3:dd:5b:b2:3c:9e:71:7f:5f:24:
1f:22:3d:39:32:11:f4:99:93:c3:f7:03:73:72:aa:1c:49:b7:
cd:9f:1c:7b:5b:7a:fa:06:67:dc:bc:70:34:15:50:3d:1c:2e:
1e:c4:9f:1c:27:57:7b:61:d6:43:94:b4:35:41:68:b5:86:32:
bb:72:ee:cf:ea:d9:ec:b0:27:d0:d2:6b:c0:57:d8:42:22:ea:
9c:37:34:4a:bc:4b:d6:f5:f0:a0:22:59:24:fb:46:03:08:d0:
b4:50:9b:ab:71:ec:cf:03:a4:ad:1d:10:23:e1:d0:53:fd:ac:
73:e2:fe:23:fc:2c:bc:93:3b:0f:6f:26:a4:70:36:dc:00:29:
15:60:df:dc:1c:22:d7:bd:f8:0b:14:45:cf:04:3e:00:24:2c:
90:41:b3:33:17:cd:08:dc:11:43:a4:42:68:63:5d:d6:d1:fb:
9e:49:88:25:d2:b4:7d:ee:3d:b6:4b:df:27:2d:8c:c8:9a:3c:
11:e6:ce:15:9b:53:bf:a0:b4:a7:46:e8:d2:13:51:a0:ee:34:
6d:cc:e8:4a:77:ec:2f:5e:d8:fe:27:0b:9e:8f:36:bd:13:a8:
d3:bb:2b:80:f6:37:fb:27:35:b7:fa:5e:13:ba:fa:b4:7b:b0:
7e:93:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:06 2024 by rpki-client on console-ams.rpki-client.org