Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: papYRdrHG734dsqDQOiIbqUdCDJpv610VdCkh/P2JaE=
Subject key identifier: 68:B9:7A:90:CD:56:DA:E8:04:58:DA:ED:CD:F1:BB:D6:29:E5:64:52
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 0193572DA0F159922F2EEEB3400D3CBB1D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 04:00:28 +0000
Manifest this update: Sat 23 Nov 2024 04:00:28 +0000
Manifest next update: Sun 24 Nov 2024 04:00:28 +0000
Files and hashes: 1: OHnMPvnKQU78stx9DOIDufih9k0.roa (hash: 9+FLPqmtvEJWTqzGnNgiJt5S0UJp1Z9L+Z6c2OUg/fM=)
2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: oS3O5LqYAW7pBj6bYGRTWdTwQVxCdJCRJKehy16zMfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a0:f1:59:92:2f:2e:ee:b3:40:0d:3c:bb:1d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Nov 23 04:00:28 2024 GMT
Not After : Nov 24 04:00:28 2024 GMT
Subject: CN=68b97a90cd56dae80458daedcdf1bbd629e56452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:c9:5e:76:6c:dc:3b:72:e9:06:7e:41:cc:
99:95:ed:70:85:c6:05:6d:f7:eb:d1:7c:d6:f4:75:
2c:e6:cb:15:61:05:59:61:b9:18:b8:f6:34:2c:76:
44:29:70:f4:17:ae:d3:f8:5f:f0:1d:ea:09:a9:87:
59:31:20:86:d1:ad:6e:b5:0b:c9:e0:0f:08:34:49:
6f:66:49:4f:07:38:41:33:ed:6a:fe:dc:0a:bb:4a:
da:e3:3c:26:c2:7f:d0:47:33:00:4f:3f:9a:35:36:
0b:73:e1:e3:f2:13:b7:be:4e:ea:30:bc:68:c1:db:
92:b4:a4:08:40:50:db:f4:8d:44:3f:e1:b2:e4:5a:
45:90:b1:f9:df:bd:3e:77:d2:36:c2:06:5d:b1:89:
39:06:6f:60:30:bf:e1:95:6c:68:e3:67:38:e0:d4:
60:87:c5:4f:08:b4:01:06:b0:7b:de:2b:de:a0:fa:
d9:cc:b1:bf:0e:f3:b1:07:7f:92:92:53:e7:0b:64:
a0:27:ab:f0:d7:32:da:63:04:fb:40:94:f1:06:a5:
a5:08:70:6f:72:a8:45:96:70:b8:80:18:9b:80:1a:
8a:22:23:96:31:ed:51:82:55:64:b3:90:88:1b:d3:
67:ba:99:36:48:49:85:78:4a:6d:90:d4:bc:0b:ae:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:7A:90:CD:56:DA:E8:04:58:DA:ED:CD:F1:BB:D6:29:E5:64:52
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:b9:c6:a7:82:a1:39:85:b0:0a:bf:92:cf:30:57:05:35:
d8:5c:54:1b:f7:01:f7:b5:3a:af:27:91:3f:ed:9b:25:f5:ab:
03:ca:ba:fc:e8:96:53:a6:6a:03:9d:45:b4:2a:dd:00:86:29:
9e:e1:79:68:7a:60:1b:91:5e:83:cd:94:f7:99:4f:7f:59:3e:
5f:05:f2:35:02:8d:21:43:73:8b:0e:46:31:0e:d5:e0:d6:cc:
66:95:40:c4:8a:f4:e7:74:c9:82:ed:02:25:57:f0:74:89:e9:
f9:26:e0:c6:29:0a:ab:a5:30:89:60:81:44:23:70:5b:18:c0:
45:80:6f:61:12:3e:0e:5d:78:0f:42:21:99:b8:04:0e:e5:90:
8a:f3:0a:e0:cf:7c:d5:4c:e0:ac:f2:2b:c0:41:93:ac:1e:91:
1e:6c:bc:e4:2a:b7:bf:5f:76:d8:0a:1d:4d:0b:6a:75:47:0d:
f9:7b:a3:56:7c:ae:47:58:67:e4:79:a4:18:ca:ac:7d:b5:70:
d6:2b:1a:1f:43:9e:3f:71:44:12:9b:98:b6:ee:80:1b:23:5e:
42:e4:91:e7:7f:ec:cb:c6:a2:32:67:cf:fe:50:7f:11:2b:b0:
77:4a:9c:b8:96:6b:b0:82:11:2c:bc:25:60:1e:80:c4:f7:6d:
35:be:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:56 2024 by rpki-client on console-ams.rpki-client.org