Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: TK9atpHK0IptDW7/vK/DOsChAb0YLIOBU+oMa3BfXis=
Subject key identifier: 6A:E1:D4:F8:3F:70:A2:7C:C7:96:D9:F8:FB:CF:6D:FF:23:FC:0D:77
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019352ABEE72072D0DB49C78E1DF92B4ACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 07:00:19 +0000
Manifest this update: Fri 22 Nov 2024 07:00:19 +0000
Manifest next update: Sat 23 Nov 2024 07:00:19 +0000
Files and hashes: 1: 90CV9Cmz7dYCPuKpkHL1v-Mkd4c.roa (hash: F3yI6x2+gCVNN5q8T3BRJn6rIOZT95Pi4vAuI/aKokQ=)
2: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: QBBADOVZSFWxJd+8+LmrwTQ8aZStaK+yr80lDDTT6Rk=)
3: bbRsTWNjFY4xjSwCWa8_JDkKE1I.roa (hash: Bg7rDL1apNAMUfP89di36sH/MRWYCt8VIcPVnMNtf7c=)
4: v9f0umVAZhhKB-6EsWT51OmZRr8.roa (hash: 44mlMdOlpWU+2EOUBKvi01KD9DMnKWJNb1Gzaa1cxyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:ee:72:07:2d:0d:b4:9c:78:e1:df:92:b4:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Nov 22 07:00:19 2024 GMT
Not After : Nov 23 07:00:19 2024 GMT
Subject: CN=6ae1d4f83f70a27cc796d9f8fbcf6dff23fc0d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:87:fe:8e:c3:ff:7c:11:35:ad:68:de:9e:
31:99:75:3c:29:6e:a6:9f:5c:0c:95:5f:72:c3:3f:
e2:a8:40:a5:90:44:64:46:a8:2f:fa:86:17:3d:e7:
0e:52:d4:01:d8:28:a2:01:d5:fe:86:b0:1a:31:75:
7d:f7:0f:4f:68:54:a9:49:5f:58:5a:f9:fa:fd:36:
92:e7:18:b4:d3:df:7c:4a:bf:c8:d8:f7:47:7f:8a:
5a:c7:13:c8:3c:3c:ce:e3:35:79:b7:3a:97:31:57:
da:e2:f7:69:a6:e7:2e:09:fa:ac:e9:61:79:0c:b3:
44:20:46:0b:2e:c6:68:8c:a9:10:90:ce:ba:ae:bd:
6c:e2:93:17:23:99:67:71:1b:09:fa:85:01:72:f3:
54:38:fa:10:56:5a:63:aa:25:61:f0:58:04:60:4c:
90:0d:d2:bf:c5:a9:08:05:2c:7e:5b:3c:f5:3c:38:
e7:0e:fc:9e:cd:80:60:d0:f0:22:e7:ca:e8:e5:99:
14:b9:79:4d:de:ad:fc:08:9e:9a:55:b9:13:d3:6f:
9e:1f:41:de:dc:3e:44:82:3c:b3:c7:35:a0:8c:10:
93:28:55:4b:3e:3f:d4:e2:53:66:70:c3:84:86:c1:
64:56:f9:bd:9c:50:26:bd:4e:21:17:e0:69:b4:b8:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:D4:F8:3F:70:A2:7C:C7:96:D9:F8:FB:CF:6D:FF:23:FC:0D:77
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4d:28:6e:9f:02:8b:a9:7d:86:05:e8:5d:cb:d3:db:42:05:
9b:d2:0e:ce:c2:22:94:46:41:34:8b:9f:50:19:f2:31:8e:db:
27:53:e3:51:94:40:5f:9f:69:21:7a:54:58:7b:e6:04:e9:9c:
78:69:cf:45:05:3a:b6:cc:0c:76:11:c0:c6:8f:6d:a4:fb:53:
58:52:f0:93:13:b9:55:47:ad:e9:9d:b2:5a:1c:f4:b9:dc:ec:
54:95:34:67:ff:28:47:6d:30:ce:40:d3:0d:57:51:18:b8:43:
b9:8d:46:1b:ba:5f:54:f6:7c:4f:4c:06:fa:cf:2c:e1:80:13:
df:2c:7c:16:6b:ca:59:ce:c4:fe:fd:0c:a8:92:62:8c:09:eb:
9b:17:6c:80:24:df:5e:3f:27:18:a9:76:50:8f:66:bf:d9:a0:
ae:6e:2b:0d:a3:f9:af:9e:1b:ad:aa:21:a5:43:9a:76:54:64:
dc:61:d7:d8:b4:c1:26:0f:6e:51:a6:99:35:27:23:1f:b2:49:
6b:6e:16:d1:2d:f5:34:b4:37:3f:4b:d1:55:62:a2:bc:e2:d3:
24:98:67:de:92:2b:34:8b:b8:68:08:d3:3f:ca:9e:45:c8:69:
70:ec:1b:06:90:c5:31:11:92:b0:2b:73:df:21:a7:f9:84:1c:
39:27:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:47 2024 by rpki-client on console-fra.rpki-client.org