Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: AYNLmgf7rbYh1GFl0yAAMKByqdRV6PbV77A0zrIN13c=
Subject key identifier: 40:0D:EE:73:65:13:FB:2A:99:4C:29:0D:81:16:CA:38:46:BE:1D:62
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019068294A5F5415B5D6C898C9A864C66D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1134
Signing time: Sun 30 Jun 2024 08:00:54 +0000
Manifest this update: Sun 30 Jun 2024 08:00:54 +0000
Manifest next update: Mon 01 Jul 2024 08:00:54 +0000
Files and hashes: 1: 1K7Fjiv_QF_ERoI4zPn-w9YUg2E.roa (hash: qgDbcrhhOGKpK3TwHDtZAj+Roc94V5RszymGPWebKgs=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: 5VJbnRnlXgP22WZdP95JARx+d8u6FO5DKkgDW1PNpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:29:4a:5f:54:15:b5:d6:c8:98:c9:a8:64:c6:6d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jun 30 08:00:54 2024 GMT
Not After : Jul 1 08:00:54 2024 GMT
Subject: CN=400dee736513fb2a994c290d8116ca3846be1d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:e4:60:15:32:49:36:62:8d:07:c1:f0:c9:
bb:46:87:5f:87:c4:da:ba:63:47:70:df:3d:cd:01:
84:bd:73:c5:95:a8:ff:ab:bf:86:14:18:ac:64:eb:
6e:c7:52:4b:0f:3d:59:f6:eb:26:f7:9e:6c:76:f9:
8f:9a:33:67:cc:07:ad:78:72:66:7a:68:0c:2e:69:
be:30:2e:2e:fc:3b:16:52:01:74:76:c9:ee:ae:97:
6c:2a:2d:52:51:95:a7:2e:88:53:7b:ef:68:23:39:
42:61:3b:da:86:ac:a9:a1:04:6e:bc:63:3b:9f:a5:
98:b2:1f:e3:0f:5b:a8:5f:fc:d1:0d:ed:05:7e:88:
16:99:33:3b:8a:31:76:5b:5f:51:9b:bb:dd:b6:25:
b1:0d:aa:1e:3c:a3:54:54:ab:d9:d0:7e:26:bc:06:
0f:fd:62:36:f4:eb:6f:99:aa:d0:5a:3e:5e:2e:a9:
ed:b2:79:e9:fe:d3:a9:5e:dc:7f:28:3c:ab:9a:8e:
32:da:44:8e:bc:98:cf:af:86:45:63:16:04:a5:81:
65:ef:8b:9e:97:13:ce:bd:86:1f:08:60:1d:c1:8c:
b1:51:3c:29:90:a5:2c:07:48:68:3e:4f:f5:1c:26:
8c:ad:a2:b1:ec:7c:a5:4c:8b:cf:c1:bb:5e:22:94:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0D:EE:73:65:13:FB:2A:99:4C:29:0D:81:16:CA:38:46:BE:1D:62
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a9:dd:22:ae:0a:1c:87:25:8f:c7:e1:53:5b:d4:d7:60:4b:
1b:7b:63:32:9c:b2:f3:67:15:c3:16:79:56:a2:84:fa:db:1f:
8a:41:c0:d8:43:e8:86:5b:5b:a1:71:06:ad:45:54:a4:f3:33:
5d:ff:62:c9:63:b8:fc:ca:88:54:1b:b4:09:f5:7d:99:7c:91:
61:58:60:ce:e7:61:26:7c:6b:a5:ff:35:14:e3:22:50:54:c4:
b0:49:0a:a2:8f:95:d8:15:ec:02:92:aa:00:15:d8:6d:64:9e:
2a:a6:2b:2c:38:fe:da:02:91:96:25:fb:fe:c2:39:9a:25:49:
ff:9f:e1:8e:9c:85:30:f8:36:34:3f:79:63:7d:7c:fc:7b:6d:
01:c5:c7:32:87:9c:db:49:f4:aa:85:4c:ad:62:0b:82:38:97:
03:b1:24:3a:36:6a:ce:f6:12:b4:96:4f:19:08:fd:73:a1:5e:
03:e8:11:48:8e:04:0a:50:07:8d:bb:20:dd:15:9a:ed:51:66:
f9:cc:77:8e:f8:ac:61:c6:72:4e:dc:3e:bc:69:79:7c:9b:43:
fc:c0:8d:37:39:d8:98:ab:39:38:6d:15:2e:cc:80:4a:5f:74:
47:af:f0:0b:23:5d:22:60:35:45:63:20:8f:7e:9e:5c:ec:fa:
4a:5f:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:07:49 2024 by rpki-client on console-fra.rpki-client.org