Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: Jk5XvnyLrr78tsnq+ZNxjXPcyOFNy0CGanPZ63t79II=
Subject key identifier: 64:33:69:EF:38:CD:DF:3A:68:41:6D:3E:06:F5:5B:9F:9F:1D:E5:F4
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019369D95320C48536823138AB199AE529F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 19:01:10 +0000
Manifest this update: Tue 26 Nov 2024 19:01:10 +0000
Manifest next update: Wed 27 Nov 2024 19:01:10 +0000
Files and hashes: 1: 5FrJag-TZQzVnhbmxmnSVUd06eA.roa (hash: F6HS38zxsy9c1pbCUvvFUWKO1z0RhS4fbrezUJ8E99c=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: 5ftxU6QdizAtOIMrLvoOrul/R13ltWbGXw90zziE7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:53:20:c4:85:36:82:31:38:ab:19:9a:e5:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Nov 26 19:01:10 2024 GMT
Not After : Nov 27 19:01:10 2024 GMT
Subject: CN=643369ef38cddf3a68416d3e06f55b9f9f1de5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:de:1a:54:1f:3b:2c:81:a9:4c:ba:6f:c5:
b7:a2:ab:68:f0:da:2d:21:29:8a:73:3c:9f:ca:46:
69:0b:99:ef:df:62:dd:9f:20:c7:ca:7c:20:5c:29:
32:ff:4a:6a:d3:2f:41:39:7e:d7:39:3e:c7:f7:ac:
7a:4c:7c:40:b7:15:f7:8e:ca:aa:d9:90:1c:a2:e8:
12:58:4d:82:6d:bd:fd:25:57:c7:b5:be:33:01:a3:
91:46:fe:d5:eb:4d:26:11:1f:37:a2:da:32:eb:ce:
d4:84:1e:1b:82:f5:9a:6c:bb:0f:72:7e:05:8f:0f:
0f:9d:55:a1:00:bf:f9:6a:fb:25:59:37:2d:9e:30:
52:ec:3e:7d:c4:89:5b:0b:18:c1:23:9b:cc:3f:dd:
5e:fd:18:2c:b4:b6:f3:85:44:f9:1b:f3:1d:75:6f:
09:7f:4b:4d:6b:5d:69:13:5a:0b:ed:22:4b:1c:e4:
f4:2e:86:34:4a:c7:f9:4b:9a:36:41:e9:6b:b3:12:
77:4b:3a:55:3b:f7:f0:6b:3e:4a:72:c6:9a:b4:2e:
77:20:d6:46:30:f8:81:7f:d4:ad:9e:e4:f1:b5:50:
48:73:88:93:c8:35:14:04:eb:63:31:ac:aa:38:2e:
09:ad:ca:06:0f:3e:76:76:67:b5:37:2f:d0:ca:75:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:69:EF:38:CD:DF:3A:68:41:6D:3E:06:F5:5B:9F:9F:1D:E5:F4
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f5:a2:6c:3f:d3:c0:37:8e:a3:20:8e:56:2b:bd:4c:b3:38:
c9:97:6e:cd:20:51:0d:dd:e6:a7:2a:a3:0f:78:06:d2:62:80:
a6:58:62:e6:19:0b:50:cf:13:45:35:e3:a7:80:7d:57:23:c8:
25:af:36:18:b0:ab:fb:5e:ea:22:3d:74:80:39:40:18:26:84:
fa:c7:f5:9b:72:8c:a7:bb:67:d3:53:21:ce:ea:88:b1:7c:58:
19:ed:0e:37:91:23:42:d0:1c:4d:c3:90:3f:32:12:e1:d5:9e:
4a:a7:59:43:ce:9f:32:06:a9:90:a4:63:c1:33:0f:ff:78:96:
ee:56:ae:ce:6f:4c:a4:d4:ee:cc:ba:a8:0c:73:5f:ad:dc:f7:
3d:4d:ca:ef:06:9a:42:fd:4d:de:d5:79:50:b3:1f:92:5c:ab:
03:c9:d3:54:6b:96:b4:ec:6a:18:cc:ea:15:8b:99:e0:57:bb:
5e:c1:60:1f:db:62:4f:af:bb:78:85:38:a3:05:ce:99:a5:f6:
e4:6c:fc:a9:0c:aa:94:0b:c6:8e:9a:be:8d:12:19:65:d2:ba:
e7:20:47:45:92:ce:21:cd:ee:be:2b:0f:ab:b0:3f:86:82:2f:
30:91:55:e7:34:b3:5a:23:db:e9:f3:63:69:f2:7e:8b:d2:b4:
a2:2d:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:58 2024 by rpki-client on console-ams.rpki-client.org