Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: dISW7VJ0TRgoaomCufKL8QCRbW/RCJ5BXCUk0YJKXEw=
Subject key identifier: 63:67:15:D0:EC:C6:24:7D:59:3F:83:C4:31:E8:9B:FE:AE:B5:BB:60
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 018F893963DB543996F7EAEA0B030428BCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1178
Signing time: Sat 18 May 2024 01:03:10 +0000
Manifest this update: Sat 18 May 2024 01:03:10 +0000
Manifest next update: Sun 19 May 2024 01:03:10 +0000
Files and hashes: 1: 6XS4QqNWLAtBHVYtzp11SuvSRjc.roa (hash: zCjFt6RvrWArVCkb9D+eqM9UrhRl3bW8h2YmZMnOaWs=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: SZwOPl3YFMnfvekCYgRZ6IIELOc+TxHqVG8rpJpBehA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:39:63:db:54:39:96:f7:ea:ea:0b:03:04:28:bc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: May 18 01:03:10 2024 GMT
Not After : May 19 01:03:10 2024 GMT
Subject: CN=636715d0ecc6247d593f83c431e89bfeaeb5bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:3d:38:8f:ef:45:a5:4e:62:ae:0d:fd:aa:
4e:bb:d5:d4:d3:bf:f6:0c:6c:1c:33:23:7a:0e:ba:
16:8a:33:38:91:18:b3:f5:fd:ca:2c:cb:6a:1d:38:
05:a2:d4:44:b2:75:20:0d:fb:bd:bf:fa:34:71:dc:
5f:18:50:2b:a6:5f:18:6c:2e:12:7c:b0:ad:df:30:
33:a7:b8:48:f9:d9:e5:79:53:f4:86:1c:b8:b0:83:
6c:5e:1b:27:ee:92:f4:1c:7e:08:a9:90:70:bc:74:
50:e9:f6:35:5e:62:9a:0c:9a:f1:c5:d5:ad:59:12:
53:13:b4:54:7c:e9:2d:fc:1c:e4:18:8b:5c:19:2f:
16:8c:ae:04:8c:21:5f:4f:aa:36:92:57:6e:45:4e:
74:10:ab:40:82:bf:b6:78:7a:69:ed:ab:ec:d2:97:
e1:72:e4:31:3d:d6:16:f1:02:d8:ad:d2:a0:e0:07:
40:42:b1:b9:12:fb:1d:52:6a:35:d2:77:6f:89:f0:
ca:e8:fb:15:e6:89:5a:78:08:4f:6b:75:2a:72:34:
a8:b0:78:06:99:6c:72:ee:61:e7:59:90:f0:61:19:
cb:5e:8d:5f:fc:8f:be:26:32:99:28:c6:28:04:8d:
66:d5:ca:05:30:79:79:9d:9f:9e:fb:c0:08:46:66:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:67:15:D0:EC:C6:24:7D:59:3F:83:C4:31:E8:9B:FE:AE:B5:BB:60
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:74:dd:68:6a:57:cc:f4:62:5f:9e:4f:60:5f:e2:6f:6f:
12:29:60:e2:93:e3:85:5e:48:5c:4d:e4:61:f5:f1:72:9e:4d:
60:35:e7:8c:b4:4f:35:92:d6:77:18:fe:34:ed:7b:45:b8:90:
c7:63:d6:17:5b:c5:01:c2:b1:af:4f:bc:2c:c7:9a:b7:45:cf:
21:fb:ab:e8:3a:64:93:e0:cd:77:5c:33:8f:11:d1:89:4f:24:
e6:6d:03:0d:25:e5:df:41:2a:55:c3:fd:5e:9d:13:fc:e3:b6:
63:90:4f:dd:c0:97:47:87:4d:5d:90:b8:18:ce:30:0f:e3:a6:
68:d6:4a:49:3c:a8:37:f0:7e:54:ce:81:09:0b:2c:78:0f:3d:
fe:6e:d5:c8:05:51:e8:78:40:23:c9:78:7c:88:d8:d3:63:25:
74:ae:dc:d6:64:d8:79:57:ce:d2:c5:c4:10:fa:cf:40:ec:e6:
07:9b:d3:74:11:9c:b5:b3:4b:d7:8e:92:ac:3e:84:18:92:d8:
ba:37:0d:e4:ff:39:db:92:cc:e1:ae:6a:01:87:b1:7d:f3:08:
74:2b:34:11:74:f2:a2:ab:56:d6:7b:7d:36:7f:19:0f:3e:54:
77:11:d6:a9:c9:2a:8e:f9:20:f7:3b:0b:53:de:cd:fa:7a:f1:
b2:3e:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:25:09 2024 by rpki-client on console-ams.rpki-client.org