Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: ZIBUfCvTFlznqmkxF6QpApQ5jtRFeTmKaSM2au5C3hM=
Subject key identifier: 4C:AD:A9:5A:5A:EF:E1:D4:F2:E1:FF:37:5D:91:5F:93:6E:E8:23:CB
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019355E46E616B02DA4FC4757B4BD71ED963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 07DC
Signing time: Fri 22 Nov 2024 22:00:53 +0000
Manifest this update: Fri 22 Nov 2024 22:00:53 +0000
Manifest next update: Sat 23 Nov 2024 22:00:53 +0000
Files and hashes: 1: 4pkDyrNCjM9jtSC_WGt4topPOS4.roa (hash: WODqDvRS3/1dgeUfrbqob2sz/mbo8ICB7Bh524iQTvA=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: iRreC6W9Hp8M+Ui6uz5T19QujTttpZqhIPfLySP7Cac=)
3: sjW5Qs5Viu3LkVPFU2rq5i8vDj8.roa (hash: zTdlxuOklksA5VRAQhkPrZQzyQYFV4gTPnpH/ZjzUIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:6e:61:6b:02:da:4f:c4:75:7b:4b:d7:1e:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Nov 22 22:00:53 2024 GMT
Not After : Nov 23 22:00:53 2024 GMT
Subject: CN=4cada95a5aefe1d4f2e1ff375d915f936ee823cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:73:53:bb:47:0b:50:9b:d4:46:56:80:f0:
97:53:9a:b9:82:f6:95:2a:72:96:1a:18:6c:dc:87:
f2:bd:08:04:86:51:df:ee:59:70:2c:f6:f7:2c:9a:
60:78:d6:ea:5d:15:91:a5:61:e2:8a:7a:9b:36:ce:
c3:1c:df:43:a8:35:ac:05:d7:f7:05:b0:e6:f1:66:
b2:dc:3e:8c:46:46:8b:0f:fe:12:d5:44:c0:ae:9c:
75:44:53:0c:4b:e3:e1:f6:18:e2:0f:cc:f7:4c:2f:
f3:51:07:47:9c:5e:94:1f:9d:0b:7f:40:eb:d5:13:
c8:2a:85:f4:b8:04:28:22:d3:c5:00:97:eb:37:c2:
19:2b:1c:c0:db:5c:ef:99:1d:8a:c8:14:04:a9:3a:
99:43:b8:3b:f1:27:3f:12:85:4b:a8:f7:8d:18:75:
5f:9b:05:fd:a7:32:99:b3:dd:bf:5d:68:14:46:23:
0c:4e:3c:8d:0f:60:ce:51:7d:20:6d:14:c6:a1:ec:
1f:5f:4d:53:50:94:62:44:d8:5c:40:d0:5a:97:02:
28:1b:8d:1c:49:dc:bf:4b:48:68:44:92:e7:a8:23:
65:e7:a7:76:0f:a6:09:aa:31:67:72:9d:2d:09:27:
fb:62:c9:f8:0f:cd:b0:94:05:fa:94:a0:03:12:dc:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:A9:5A:5A:EF:E1:D4:F2:E1:FF:37:5D:91:5F:93:6E:E8:23:CB
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:99:96:aa:c7:be:cb:7c:62:d6:ce:17:92:d4:04:6d:17:b7:
69:70:16:75:ef:07:d7:54:ae:bd:55:06:9a:85:9f:2f:1e:22:
4a:f0:b6:1b:58:61:19:94:7e:16:c4:f6:ea:36:a1:a1:c7:f1:
ea:6a:ed:ce:3f:fa:1f:8b:57:73:3e:8b:0f:d3:e0:70:40:0c:
e3:8b:d6:dd:3c:c6:85:61:bf:e5:97:b0:b2:48:ff:30:6f:a5:
2b:00:b5:35:34:d2:04:ce:d6:8a:5c:4a:43:6b:09:61:58:da:
97:4e:90:e0:e5:00:94:31:76:51:b1:ba:54:32:55:84:93:21:
5a:66:84:a3:26:55:6e:9a:f8:fc:4b:4c:cf:07:70:70:67:0a:
56:c3:41:74:18:43:5d:ee:7f:f7:e6:fa:62:64:06:89:2e:1c:
8c:46:a2:f0:f2:b1:e4:c0:40:0a:9a:e2:c1:df:fd:b3:ca:f4:
fd:4b:89:28:3d:9a:46:77:f4:a7:77:60:44:6e:2c:45:88:f9:
65:eb:c7:7e:fa:32:cc:b8:72:5d:6f:a7:b4:02:5a:cd:42:9d:
12:cf:1b:0b:43:69:df:ac:9a:e1:4b:82:47:8b:45:db:5a:25:
9c:c1:e5:b1:a6:3f:93:5c:f4:bb:59:b9:20:d0:7f:fe:f4:04:
6e:02:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:18 2024 by rpki-client on console-ams.rpki-client.org