Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
File: TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json)
Hash identifier: 9XgHjtZ59hcHHCfwO7L+XmU/cRO2gLF1dK29IoGzGWQ=
Subject key identifier: 45:11:9E:06:6E:AF:9E:DC:B5:9B:87:E0:49:BF:DA:C9:CD:36:72:CB
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: 0193652040BFB4D4A5B28CF7395AB9A552DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
Manifest number: 0CB3
Signing time: Mon 25 Nov 2024 21:00:32 +0000
Manifest this update: Mon 25 Nov 2024 21:00:32 +0000
Manifest next update: Tue 26 Nov 2024 21:00:32 +0000
Files and hashes: 1: OQdfkxEcsWjXzTOwsgApkDeMGOE.roa (hash: mkBzJGb8TqL2Q7+yGwEXk2J0+R45tCdOpSYCsrsDld8=)
2: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: MMxC4y8NtOipGd4Gw3MthiFLR2BoUpUUTOJZG4Wg6pg=)
3: gWrwtgwRGQu7bRnQF5MljY91hcM.roa (hash: apcSO7WErtKzSY7YKj2/3KaFvyeilVJcQ+SpCOs6oCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:20:40:bf:b4:d4:a5:b2:8c:f7:39:5a:b9:a5:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Nov 25 21:00:32 2024 GMT
Not After : Nov 26 21:00:32 2024 GMT
Subject: CN=45119e066eaf9edcb59b87e049bfdac9cd3672cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:10:19:b0:29:56:7a:14:93:c8:6e:a2:95:
d7:22:55:87:3f:61:2c:19:91:1e:f0:eb:5f:9b:ff:
68:ff:18:2e:83:4a:79:12:ad:f9:17:0b:d6:1c:54:
a2:07:3f:05:12:59:71:90:03:e7:04:a1:67:b0:26:
a2:54:e5:7a:17:43:67:17:8e:98:7e:72:32:ad:4b:
77:b0:f9:ea:1e:22:9f:79:93:4f:32:59:e3:10:d2:
64:dd:6f:c6:7c:00:7c:fd:36:0f:ce:7f:ed:b6:fc:
1c:20:77:35:77:0f:7d:cc:ef:79:0f:6a:37:51:ba:
05:2e:c4:a2:6a:b3:c6:ea:82:e2:64:a6:6a:b7:48:
c7:25:02:fa:c0:76:b4:19:40:96:0a:72:65:4f:14:
a4:fa:f1:04:8c:0a:07:44:29:3c:c2:04:97:0c:3c:
8d:86:fc:26:73:1b:8b:58:8f:4c:b1:83:fc:5d:cd:
e3:b5:07:31:cb:7b:4e:ac:3e:48:5f:92:8c:80:2b:
47:37:2c:6a:a4:e4:72:bf:42:81:95:dc:2b:06:87:
70:a3:fc:8d:3e:b8:41:2d:38:83:30:38:e0:57:d3:
59:30:aa:a8:05:21:35:06:10:51:b6:36:66:b0:56:
ea:60:c9:28:c9:5c:98:59:57:9a:d1:22:cb:70:8d:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:9E:06:6E:AF:9E:DC:B5:9B:87:E0:49:BF:DA:C9:CD:36:72:CB
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:17:6a:4b:a4:88:a6:c8:55:d1:7c:4b:cd:f4:75:ea:6b:54:
66:1f:c5:6d:42:94:8e:bd:02:13:60:52:d4:b4:2e:c4:6c:1d:
6f:ab:d5:70:21:7e:bd:83:e0:ac:87:76:bc:69:80:40:4b:78:
92:ec:d0:e7:f0:df:ee:81:42:ec:ec:4f:5d:fb:b0:2c:71:18:
2f:dd:95:b0:80:e7:3e:b5:7c:33:65:61:24:dc:b7:b8:7e:a6:
30:ea:f4:26:41:a9:67:87:57:a4:de:eb:c4:7c:49:44:47:6b:
2c:ac:cb:00:a0:56:8d:a1:c5:5e:69:be:5d:69:4f:af:ff:8e:
a1:d3:9f:04:ae:d4:96:85:17:04:23:f8:a3:02:50:73:c8:9e:
98:ad:2b:c4:b3:bb:0a:02:1d:66:0c:d3:67:97:70:43:83:ee:
66:8d:8f:50:ac:84:b0:0a:ff:5f:2e:2c:7f:48:a3:f8:e0:15:
88:83:dd:2c:1d:e7:ae:4b:26:f9:e8:76:f3:53:4e:bd:d6:a4:
dd:52:3f:65:5c:d2:91:cf:e7:19:0d:80:4f:37:6e:dd:37:7c:
19:9f:4a:38:1f:4d:33:6e:60:31:f5:7c:23:96:c9:a2:2b:55:
fa:e1:72:4c:c9:8d:d3:cb:0f:0a:ed:8a:ce:f3:5d:bd:0b:fe:
71:7c:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:41:47 2024 by rpki-client on console-fra.rpki-client.org