Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: FaQDjNoFhoAE1SrGb7haLrFXWjSJkHN9gCSyuNcw7Zw=
Subject key identifier: 17:E2:D0:D8:2E:CC:F0:93:5D:3C:1A:7A:3C:BD:AC:63:0F:E7:A5:09
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 018F8749F71B75E883F7CE2975D79EF0C823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 1174
Signing time: Fri 17 May 2024 16:02:02 +0000
Manifest this update: Fri 17 May 2024 16:02:02 +0000
Manifest next update: Sat 18 May 2024 16:02:02 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: 6UwTOGFCXdDfwYxu75zOcuNqOsc6XYh6OTWWUq1k+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:f7:1b:75:e8:83:f7:ce:29:75:d7:9e:f0:c8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: May 17 16:02:02 2024 GMT
Not After : May 18 16:02:02 2024 GMT
Subject: CN=17e2d0d82eccf0935d3c1a7a3cbdac630fe7a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:11:18:0f:5f:96:70:7a:2d:e4:d2:eb:86:
3a:bb:9d:e6:8e:16:80:08:ae:76:ea:7f:9b:65:c6:
7f:ca:02:da:70:28:bb:47:7f:e5:1b:df:ce:af:db:
c8:c3:61:b2:7f:92:68:9c:f5:f5:da:02:f3:b0:20:
77:1b:3f:22:66:43:f2:08:13:22:f3:88:a5:66:d6:
31:b2:8c:b8:6d:84:18:e8:2c:61:6f:91:80:45:ec:
68:51:7a:12:38:a8:1a:52:38:52:21:3b:24:44:8a:
8c:d2:0f:f6:56:5d:a0:9d:39:bc:cf:b4:5b:d1:4f:
a4:b5:27:4d:b2:4b:fd:f4:00:67:14:b5:42:ad:a6:
5a:18:31:82:25:0b:b2:22:83:d3:65:8f:9c:55:f4:
d4:4c:42:95:98:f2:5b:af:2f:11:e0:c3:08:ab:eb:
37:eb:54:88:cf:01:07:8a:e6:74:4b:e4:5d:12:57:
9b:1e:98:46:a1:4b:4e:b3:13:a4:1e:49:ea:f2:3d:
fd:f7:a5:24:26:93:c1:b0:1f:0a:62:af:d7:7c:67:
eb:ba:9c:ee:bc:68:71:9c:ea:58:e5:5e:d7:57:e6:
6f:59:0f:e3:d6:b0:f4:ee:a6:ad:6a:ee:15:35:1b:
32:cd:d7:2f:bb:0b:90:5e:5f:67:3f:b4:6e:a4:86:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:D0:D8:2E:CC:F0:93:5D:3C:1A:7A:3C:BD:AC:63:0F:E7:A5:09
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:8f:ea:a2:e5:08:8c:b9:df:f0:c3:f5:0f:a7:97:56:0b:
8c:4d:c1:d3:ec:10:cf:01:df:46:1b:b3:c1:54:0a:9a:68:41:
fc:42:14:ae:e8:c7:fc:4f:28:3f:90:f8:12:e6:1f:ee:7f:bc:
6f:42:a0:8f:60:43:b0:9b:b0:1f:96:95:41:93:23:3c:a0:fb:
33:9c:85:85:1c:20:86:52:49:d2:3b:4f:22:54:1d:d8:48:b6:
6b:9b:a0:43:ac:a4:00:c0:e8:91:e8:b4:41:4f:37:a9:23:18:
fe:45:1f:23:91:c0:db:01:52:54:6f:f2:e9:b5:e1:0f:79:eb:
95:ef:5a:fe:a4:e6:06:01:6f:10:08:b2:81:d3:71:8d:7b:c1:
8e:59:ea:5c:4d:32:7e:a3:8f:fb:79:21:ad:2d:2e:19:9f:c7:
5e:a7:ca:8a:09:fc:9a:12:73:0d:8c:34:b2:08:43:33:2e:6e:
a2:ba:cf:e1:5f:d7:48:ba:4d:06:ac:df:94:62:a6:5a:1d:22:
f1:24:d6:88:b4:b0:c2:f5:f5:4c:39:3c:4a:cb:14:fa:a2:db:
e3:b4:2c:b1:d9:5b:90:1b:ae:dd:09:76:fc:96:cc:b3:29:1e:
48:50:b1:47:2c:c3:16:7b:2f:ca:9c:fd:3f:4f:a8:e6:0c:34:
1b:39:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:07 2024 by rpki-client on console-fra.rpki-client.org