Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: WBroXNX7vHrZ3coVoiBGn3Gudbsy6Ck7zfyhstdYIRY=
Subject key identifier: 8E:A5:D1:DC:A4:FB:BE:0F:4C:D8:3D:E6:03:E8:C6:09:63:A4:3C:42
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0192598D422683393143D0E93EDBDE3F7510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0967
Signing time: Fri 04 Oct 2024 22:01:22 +0000
Manifest this update: Fri 04 Oct 2024 22:01:22 +0000
Manifest next update: Sat 05 Oct 2024 22:01:22 +0000
Files and hashes: 1: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: p+1aKRD3PHO0BZAuA5ybGUBatrFVLI0wadIJ3tvjdJA=)
2: ojr6tgjbyBgjQjpX3R2-uZ_6A6E.roa (hash: M/W+4KRcV5f29qrQ6ffhOhWLIZ9fuJaOhaeYIB+DiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Oct 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:8d:42:26:83:39:31:43:d0:e9:3e:db:de:3f:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Oct 4 22:01:22 2024 GMT
Not After : Oct 5 22:01:22 2024 GMT
Subject: CN=8ea5d1dca4fbbe0f4cd83de603e8c60963a43c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:9e:6a:fe:5a:24:2a:35:c2:13:09:8d:4f:
43:8f:cc:b2:90:4d:da:4c:c9:35:e4:18:63:60:bf:
9d:48:e0:3c:80:4a:4a:9a:19:8d:fb:29:ef:ed:af:
02:5b:ad:71:7d:c0:44:a1:d8:f7:e3:7c:8f:92:c8:
2a:12:13:f6:de:31:51:01:5b:10:a0:a3:bb:3e:ab:
2d:98:09:2a:7b:b2:81:40:03:d1:0f:ef:64:52:cf:
ec:8b:69:be:c6:77:6e:eb:e5:6d:c0:86:68:34:3d:
c4:41:17:3b:51:5c:d9:8e:88:42:9e:fe:03:42:8a:
e4:1c:18:33:c5:c1:4d:c6:f5:44:a9:9a:58:b3:45:
5b:80:ca:40:79:2a:34:be:f1:c5:bc:18:dc:03:2d:
2d:51:7b:e6:85:6e:22:da:1d:a3:ab:a7:e7:6a:39:
11:3d:45:17:63:82:f7:5b:da:d5:66:93:07:38:28:
65:5e:3d:19:74:4f:87:b2:67:1e:e1:3b:aa:3f:b2:
d8:84:0b:05:4f:67:d2:b4:6a:2c:78:4d:b3:ac:fb:
ec:16:8f:15:b8:95:79:8d:f7:97:7a:1d:16:ac:39:
34:d6:cd:68:fa:94:0f:ea:09:7c:1d:3a:17:72:09:
5c:00:e7:7e:07:cd:9c:e6:cc:f7:e6:a5:8d:c0:58:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:D1:DC:A4:FB:BE:0F:4C:D8:3D:E6:03:E8:C6:09:63:A4:3C:42
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:37:98:05:a7:15:73:24:bb:7f:84:42:c3:dd:db:2a:c4:ee:
2a:8a:85:d2:1d:fc:75:58:ba:4a:ac:22:28:1e:50:76:ad:7d:
00:1b:31:0b:60:c4:b5:ee:30:60:64:89:33:7f:b8:b3:85:c4:
2a:45:6c:50:9a:9d:af:11:4f:51:1a:44:aa:7d:44:42:9e:b9:
9f:a2:76:4b:8e:d9:df:5f:ce:d1:da:03:6e:f1:94:b8:27:90:
c3:4a:5d:34:41:06:99:7b:74:74:18:8f:28:70:e9:4e:de:8a:
12:3f:e6:3e:0e:1c:c2:17:c0:96:4c:e1:c2:14:5b:c9:f8:73:
de:ea:4b:44:c8:73:14:5c:59:77:32:fa:7c:c8:15:68:2f:5a:
b1:d2:fb:a2:67:fc:35:ee:89:32:9e:ec:59:03:92:e4:9f:33:
8d:b1:b0:4f:27:f8:de:91:3b:74:4f:da:87:d4:02:36:e2:b3:
a0:00:56:0c:87:68:93:72:ce:30:ec:43:09:a1:e2:bf:84:93:
ea:d9:b9:81:94:36:a5:e1:e0:0e:77:a5:73:cd:e0:42:d7:3e:
51:dd:98:ab:b1:a2:3a:1a:08:3a:15:d5:d7:a5:a2:d2:15:0c:
9a:86:38:8f:f9:ca:7c:25:f3:51:34:38:c5:3a:30:36:4b:7a:
fa:d0:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 00:00:16 2024 by rpki-client on console-fra.rpki-client.org