Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: scXSx0eNudE+XNy3UtdmO5VrFDDmaNG+Zf5YZtiOunM=
Subject key identifier: E2:01:AD:85:7E:A3:A6:34:2D:B3:54:C6:D8:85:12:6B:BF:81:0B:05
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 019360D5776FBA4EFC7421BDB0847C0E1AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 1377
Signing time: Mon 25 Nov 2024 01:00:22 +0000
Manifest this update: Mon 25 Nov 2024 01:00:22 +0000
Manifest next update: Tue 26 Nov 2024 01:00:22 +0000
Files and hashes: 1: IS87LO2FLY_eRcW5-8b7bd4mFQE.roa (hash: oUHXQl6UmB9sdqXhE+LHeLdJ05lLPM4K0UR1vNNdlII=)
2: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: 5FW+DiDnEGuShSKVZNIB8w/s8xAriry+ne1LX/vfEvU=)
3: WElDknMFTvjh83xx5Et50wg1v-U.roa (hash: h2j+BHn4dkbiWQyqhWCFg30pzxdp3aNlZOiTKyUxBVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:d5:77:6f:ba:4e:fc:74:21:bd:b0:84:7c:0e:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Nov 25 01:00:22 2024 GMT
Not After : Nov 26 01:00:22 2024 GMT
Subject: CN=e201ad857ea3a6342db354c6d885126bbf810b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:2d:f4:b2:50:d8:69:f7:7a:c7:33:a3:4e:
b6:3d:83:96:b1:fa:d9:05:e7:9e:3b:5a:05:8a:40:
6a:59:f0:e1:31:5f:a2:15:f1:cf:ee:4e:45:a7:8f:
60:c0:22:de:99:51:ab:a3:05:9c:6a:99:58:56:10:
ab:2d:d7:d6:35:92:c0:bf:aa:e8:71:36:d3:54:87:
ca:b5:6d:55:a2:fa:fd:ff:02:a9:32:be:c7:6b:38:
2b:90:eb:8b:d3:f1:01:d1:1f:73:19:43:08:ca:3a:
24:17:b1:e9:a7:32:dd:af:49:ec:92:04:87:da:2d:
12:93:7a:15:18:87:f0:d4:9d:dc:be:9b:a6:76:3d:
f7:62:0d:fb:c7:e4:88:30:29:d6:2d:28:86:62:ca:
99:a0:e4:0a:c7:43:ba:f9:b7:82:e2:d9:47:9f:32:
13:22:f4:c9:57:0d:bd:c1:15:7a:27:14:34:4d:12:
a0:3c:21:96:71:02:c6:57:ba:13:96:ae:a9:a9:5a:
5c:5a:0a:dc:0d:14:ca:28:dc:df:2a:29:f6:19:04:
86:c5:f3:2e:98:b4:7b:37:73:ba:db:96:18:69:28:
b3:f5:b4:68:67:fd:70:0b:0b:c4:f1:00:16:c5:0e:
5e:94:ca:19:fe:88:a4:04:d4:2c:9c:4f:a8:38:b1:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:AD:85:7E:A3:A6:34:2D:B3:54:C6:D8:85:12:6B:BF:81:0B:05
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ed:09:6c:f5:2f:d4:e4:f8:d4:3c:95:1f:7d:3d:15:e6:a1:
9c:9e:b5:1a:38:6d:f1:25:aa:06:20:80:9d:10:c4:7d:cd:34:
32:0b:f4:88:3a:fe:05:2f:1e:5a:d3:03:df:6e:b8:56:4f:55:
54:56:58:87:6a:e5:dc:18:8c:84:69:32:7f:c2:91:ee:9c:d3:
d4:6c:3e:bf:57:fe:7e:2e:35:00:b4:b9:cc:df:c9:c5:3d:a0:
da:39:e7:e0:0e:10:f7:0c:d8:6f:34:a8:f6:c9:e5:b8:83:c8:
78:c8:54:0b:70:e6:5b:19:59:86:e4:24:b2:c3:98:33:47:b1:
6c:f1:ae:25:37:ac:19:07:1b:32:74:07:c9:4a:7c:7d:5b:aa:
5f:82:2c:45:3b:30:9e:f9:83:19:fe:fc:68:20:55:1a:e8:d1:
5d:5b:55:b8:47:24:18:dc:2d:e6:45:69:d2:ac:a3:a8:27:48:
a9:a8:ae:1b:b2:df:fd:b4:06:3d:75:af:c7:8b:63:ec:31:18:
cb:fa:4c:56:6b:95:67:5a:b9:cf:ec:81:e9:b7:06:d2:12:b0:
94:b3:03:09:58:37:f7:b3:b8:22:f4:88:2f:fd:64:9e:06:cf:
46:47:e6:ec:32:c7:6a:f3:b3:ec:2b:d5:64:66:12:8c:ef:05:
19:c0:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:19:08 2024 by rpki-client on console-ams.rpki-client.org