Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: ckHoKt6wbfGMRMnKs2UDwgl/fUezJ/Gb0x9c6zDVlHQ=
Subject key identifier: 3B:5A:7C:40:6D:A4:A8:3B:BB:CE:AD:0C:28:0B:2C:2E:AC:20:AB:43
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 019355ACFAD5EC306F061DA86EE9D8A74E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 21:00:19 +0000
Manifest this update: Fri 22 Nov 2024 21:00:19 +0000
Manifest next update: Sat 23 Nov 2024 21:00:19 +0000
Files and hashes: 1: 2N6urlOD0Xl64IaC4GaCBKvvuio.roa (hash: eGojIwzSmaJ45ysVGACMJ7wLajdu1hwCMuQoBMqID5M=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: +LPWc6Pcy1IDcjRGqb90c80/Ig6RKsrI+fBjQYi9jPw=)
3: UQKP7OpIPYREgohsx130-0qpLjM.roa (hash: /9NBl81TdkODjzeLG6fm2+vL/2PdVwEmz6E3cAW5TIA=)
4: hYKn6uw-Fus3el3ZqEtdG5nc5QI.roa (hash: LAbbkXsf5xUIoA03H96TxJ0wp736ZL1RA6n3tH+T3uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ac:fa:d5:ec:30:6f:06:1d:a8:6e:e9:d8:a7:4e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Nov 22 21:00:19 2024 GMT
Not After : Nov 23 21:00:19 2024 GMT
Subject: CN=3b5a7c406da4a83bbbcead0c280b2c2eac20ab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:cb:75:fa:43:3f:d7:18:44:ee:0e:6f:d0:
f9:13:01:ee:bb:5e:00:00:9a:da:8f:59:2e:1c:4f:
be:05:8e:62:bf:86:da:6b:05:b7:5d:d0:fc:a5:f5:
ef:81:9c:f0:6e:29:25:2a:2a:b5:45:3e:00:a4:49:
73:90:a9:ba:27:2a:d4:16:9e:35:e6:df:fc:5e:c2:
35:95:cd:ab:48:2f:05:2f:29:6f:46:7b:46:38:38:
e5:35:68:b8:c9:38:ff:df:22:05:b9:e1:1a:84:65:
60:c2:48:98:9c:a3:6e:a4:0f:28:ed:83:16:aa:48:
bd:99:c9:fa:d9:45:0e:73:ae:22:45:ee:30:09:3f:
ef:90:55:74:61:52:79:18:16:3c:a2:94:38:58:e2:
ea:fb:b7:4c:b7:90:1a:16:9d:e7:84:11:9f:e6:6b:
2c:1e:f5:f6:20:cd:f0:6f:2a:b5:c1:3f:a6:85:47:
4a:a0:68:6e:d4:6b:d4:78:a3:cf:11:c4:01:fb:b4:
f9:6b:88:12:05:43:f0:86:37:89:c0:0c:44:8f:f8:
9e:a0:32:4a:76:8d:65:0d:17:96:4e:0a:bc:3f:ab:
f8:2f:01:30:14:3e:4f:90:97:a0:d8:d4:31:5f:0e:
df:24:6e:b0:32:70:13:bd:40:94:27:3d:9e:a5:84:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:7C:40:6D:A4:A8:3B:BB:CE:AD:0C:28:0B:2C:2E:AC:20:AB:43
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:2b:0e:24:69:12:99:b8:a9:9c:b4:72:78:8c:a2:ed:86:
41:d9:4c:d5:7e:6a:49:17:6c:d0:3b:f1:51:19:83:40:74:fa:
13:b9:20:3b:15:4b:af:06:ac:1a:19:da:d2:69:33:bb:cc:20:
db:90:f0:1c:d8:76:57:b6:60:7b:42:93:19:b9:3a:04:31:08:
d0:53:4a:d8:43:46:df:b6:6e:e7:26:45:b9:21:3f:43:12:54:
ab:69:af:b4:da:a3:ee:e7:76:3e:0c:56:8b:be:f2:41:42:8e:
70:24:04:ba:8f:f9:d0:c9:95:91:18:93:1e:68:b0:c0:cb:f6:
53:7e:31:a0:73:97:10:b1:29:48:d0:b8:d3:52:ef:6c:2b:37:
09:f1:0c:cd:8d:8b:69:c6:6f:6d:9d:04:51:fe:21:cf:21:96:
b6:a7:90:64:14:8e:ca:71:24:2d:d2:80:0d:e5:a8:87:4a:3d:
c9:bb:fc:ef:fc:83:65:4b:2b:ee:8c:58:27:fd:59:a4:d4:59:
f7:7e:7c:1b:4c:f9:4c:f3:4d:48:27:d3:5e:3d:8a:4c:71:01:
77:d7:a0:26:09:e6:b4:f2:ba:e4:f5:d4:94:3f:8e:5a:3a:28:
8f:60:ac:71:9b:e8:5e:b1:12:a1:1e:fc:a9:59:ec:3a:d6:95:
d9:0d:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:19 2024 by rpki-client on console-fra.rpki-client.org