Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: sHjuTTKfSYqHQmDwX7x6skacznJ6S8WUfKs2IsJmI5o=
Subject key identifier: 10:7D:6F:99:3F:BC:2C:79:1E:03:D9:CA:37:83:1D:D8:7C:2F:77:F2
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 0193568A97C38CE0F360F8986C08FDDE2346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 069C
Signing time: Sat 23 Nov 2024 01:02:23 +0000
Manifest this update: Sat 23 Nov 2024 01:02:23 +0000
Manifest next update: Sun 24 Nov 2024 01:02:23 +0000
Files and hashes: 1: M7_6H0HvN9UksOXQT_NeZBTUuqs.roa (hash: oDABDrj4rhjsFPgyzsKq2DnlweE1eVwQla+tt4X8Yz0=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: r3gFVpZqqUJTLg/XdVMuqauAX5qggULki0Jx2HI2b6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:97:c3:8c:e0:f3:60:f8:98:6c:08:fd:de:23:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Nov 23 01:02:23 2024 GMT
Not After : Nov 24 01:02:23 2024 GMT
Subject: CN=107d6f993fbc2c791e03d9ca37831dd87c2f77f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:09:f2:a6:7e:43:25:36:8d:f6:7e:4d:03:
1c:ae:72:ee:c8:24:89:41:9d:db:b3:83:50:22:2e:
66:3f:94:db:86:7a:7b:16:74:7d:c0:54:b9:86:84:
80:03:5c:46:71:0f:2b:6a:5b:30:f0:4c:e2:d7:5d:
f1:08:79:c8:48:c7:10:f2:1f:5b:78:25:bd:15:1b:
1c:71:52:c6:4d:7c:31:8c:30:ec:b3:7d:3d:6e:dc:
ed:03:95:78:02:3c:45:48:02:32:d9:ec:c4:bf:45:
a6:e1:7f:a2:cf:fa:30:fe:54:28:38:9d:da:23:a3:
44:b4:e6:2b:ba:86:16:d6:6e:91:48:d5:e5:70:60:
5c:11:79:11:9c:b2:8e:69:38:92:d2:9f:b4:56:2c:
d6:0e:d8:c1:d5:46:78:ee:4c:5a:85:d4:fa:8d:2d:
cd:5a:83:81:e1:ea:4b:6c:5c:df:46:cc:cc:2e:4f:
df:9e:f4:4e:10:44:8e:6c:76:56:eb:29:38:16:f0:
e9:5d:f4:75:ac:5c:da:4d:c1:be:9c:6e:2c:81:83:
7b:ca:39:25:ca:70:24:97:bb:0c:95:92:06:4b:12:
a3:7c:e9:fd:23:69:a2:fa:86:52:4c:02:0d:6b:cc:
d6:30:74:58:9f:6c:4a:1b:fb:41:c3:a4:bd:84:e9:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:6F:99:3F:BC:2C:79:1E:03:D9:CA:37:83:1D:D8:7C:2F:77:F2
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:a2:30:5c:12:22:79:c6:dd:8e:f0:cb:6a:bc:75:c5:06:
da:3c:f2:9f:9f:06:36:43:0c:e0:3b:e5:41:db:e8:94:3b:26:
04:9f:63:61:5c:69:f2:07:b3:9e:36:5c:10:03:86:6e:7a:d7:
31:a5:f9:79:af:14:90:7e:47:92:2d:9c:27:f8:2f:d6:80:6e:
62:5c:57:c0:cb:c1:bc:cc:77:8d:1f:2e:6a:52:73:da:10:f0:
99:9e:1c:db:b0:e1:ee:b0:a2:74:4c:14:cb:c2:77:cb:e7:07:
ad:4e:c2:c6:87:a1:88:e3:bd:b8:7d:26:60:9c:14:fb:00:e5:
3e:79:33:0a:ef:95:c3:bb:4c:c7:38:96:9d:d2:4c:f8:fe:02:
2e:9e:45:eb:a6:54:51:84:b3:a6:43:b2:80:d0:92:da:37:8d:
0b:e4:ef:cc:9d:b6:3d:04:04:0b:90:26:1c:04:a4:51:d6:93:
8d:fd:02:e7:6a:55:5f:e8:d7:9c:02:2b:df:ac:d1:21:71:b7:
03:5d:83:d3:52:6d:15:f2:b1:e6:15:85:e6:9d:94:b2:2d:9f:
6c:72:a4:3b:74:25:e5:61:d5:44:f0:1c:26:71:7e:ef:57:e2:
e1:97:65:57:cc:67:15:01:7f:85:cc:30:59:d8:c1:43:06:75:
a6:4b:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:38 2024 by rpki-client on console-ams.rpki-client.org