Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: OFdcZVYMXFAPi963ZOQetd8usMq2tiboPdt6RoH5Dj0=
Subject key identifier: 09:0F:62:70:95:73:F8:D8:F4:9A:F8:3F:D6:B9:5D:35:D3:04:52:33
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 019369DABFF0D8F5A3AB7D31DBA860F79FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 19:02:43 +0000
Manifest this update: Tue 26 Nov 2024 19:02:43 +0000
Manifest next update: Wed 27 Nov 2024 19:02:43 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: 8VRqG/L6MxcZO88Ggv53gmGhEjBnkkZsPziqR/gcqTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:bf:f0:d8:f5:a3:ab:7d:31:db:a8:60:f7:9f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Nov 26 19:02:43 2024 GMT
Not After : Nov 27 19:02:43 2024 GMT
Subject: CN=090f62709573f8d8f49af83fd6b95d35d3045233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:bb:6a:09:5d:4e:94:e1:19:cf:6f:dd:02:
dc:9c:16:2a:7a:14:a4:36:66:88:77:aa:3b:f8:db:
a8:9c:a6:d3:fa:30:a8:e2:8d:98:da:e8:6e:0e:f2:
3d:3a:51:52:2a:31:2c:9b:d4:7b:3e:62:40:14:eb:
f4:0c:28:9b:eb:9e:2e:db:ab:c2:03:d7:d1:cb:58:
5a:71:17:c9:dc:ce:ec:1e:60:c2:5e:34:33:a7:7d:
48:da:a9:21:e9:43:df:57:b6:4f:bb:76:6d:b0:96:
26:f2:f9:b6:73:50:3b:2c:60:f1:dd:8a:fd:8e:8d:
2e:09:b8:75:71:da:b4:a5:ae:84:b3:61:98:22:b0:
7e:28:6f:e4:11:47:8b:92:83:d4:b5:34:fd:dd:7d:
fa:ca:34:56:29:76:61:51:65:99:a3:73:1f:14:fb:
a1:7d:e9:24:c3:32:ad:a7:fb:ef:28:b6:f9:a4:12:
38:cf:bb:69:e0:cf:11:26:45:0d:14:95:e2:1b:c6:
92:4a:53:ca:57:d9:e7:cf:20:48:2a:43:8b:b6:1d:
90:67:4d:bd:b6:88:f8:c7:97:6c:f4:6a:a4:f3:7d:
1f:e0:1d:1e:0b:d1:6a:f1:95:7b:1a:f6:2c:52:b4:
6f:8e:7d:26:73:f2:be:fe:75:c5:86:2e:e4:74:bf:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:62:70:95:73:F8:D8:F4:9A:F8:3F:D6:B9:5D:35:D3:04:52:33
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e5:66:b4:ad:b6:08:76:ab:5a:a4:74:aa:c8:2f:2e:ba:b4:
ff:b8:de:9d:2b:37:85:c3:2c:86:c6:b0:5a:aa:16:a6:06:e0:
47:ba:73:fd:c0:94:42:5a:62:bc:e0:2f:b2:60:28:77:fb:f1:
43:b4:19:a5:7e:a5:06:a6:e2:f9:0e:20:96:aa:66:4d:12:16:
d0:d6:2d:bd:a0:da:32:3b:6e:99:54:0d:19:65:c0:80:85:27:
f0:59:3a:2f:e7:31:02:c8:5d:4a:90:95:73:71:d7:ed:ae:c9:
81:26:da:c7:1d:de:a9:cc:fc:4b:5c:3d:25:76:81:94:39:98:
35:18:27:d7:86:1a:90:11:de:6b:2a:a1:cf:eb:05:d6:95:22:
69:80:57:35:2c:37:6f:41:3a:30:a5:e0:63:ff:95:63:78:97:
e4:b4:40:6e:1b:44:c2:f2:ab:16:50:4b:3c:ec:28:03:d4:99:
0f:fb:76:7b:1f:49:12:93:75:4e:8f:77:9d:21:32:a5:6d:25:
cd:cf:5c:a0:ea:36:59:eb:46:fc:70:49:13:93:30:51:be:87:
b7:fc:e5:fe:b0:55:1c:aa:4b:55:e6:72:7b:8b:1d:72:78:8e:
00:0b:18:0f:02:ed:59:51:93:70:ea:70:5b:77:aa:b4:a4:d6:
33:01:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:01 2024 by rpki-client on console-ams.rpki-client.org