Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: IqWkLz5FpN3zCW28XHUYFjMuDmADPw8BOUOiqp0a5lU=
Subject key identifier: 23:41:95:1D:86:57:60:37:98:46:54:C9:48:0D:55:1F:C7:35:D2:61
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 01935689C03817026FAB6327A58006C214EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0899
Signing time: Sat 23 Nov 2024 01:01:28 +0000
Manifest this update: Sat 23 Nov 2024 01:01:28 +0000
Manifest next update: Sun 24 Nov 2024 01:01:28 +0000
Files and hashes: 1: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: jCy3CKhvOwPUtvfAEFIs1ppzI4cM73s7/oVWiTrO4Ww=)
2: luQ2T5a6oVNBPUuQ2VgjUcb-lYw.roa (hash: Q7JKKsDzDd8YJCNuDuNHviNdeWLFBbOExcBcf1ZwDwY=)
3: n1jT0bT-cyMunw08NbHX7KADMcM.roa (hash: BVKtDbIvXmE20ZQcn6xePHtkECkX3PdbPMK7VrC05AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:c0:38:17:02:6f:ab:63:27:a5:80:06:c2:14:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Nov 23 01:01:28 2024 GMT
Not After : Nov 24 01:01:28 2024 GMT
Subject: CN=2341951d86576037984654c9480d551fc735d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:36:f6:37:cd:e0:9e:96:ac:ae:45:cb:25:
ae:60:18:fa:b9:fa:86:1d:96:f5:c9:b5:66:86:79:
30:45:9b:76:b1:96:8c:c0:a3:35:5d:61:74:17:b0:
fd:cf:df:ec:67:30:19:d7:f0:66:df:48:82:d4:d4:
68:bd:c5:3c:96:37:f6:cd:48:59:24:22:7a:c9:7e:
e5:5a:5d:6d:77:7b:7b:cb:be:12:66:40:49:b6:ff:
47:f9:6e:76:11:e7:dc:3b:04:ae:3d:ac:45:6e:28:
6d:fe:f2:a4:d0:f0:d0:9e:03:c6:2f:52:63:a1:56:
81:5e:82:07:40:8f:14:e4:99:b1:31:cc:c7:d6:40:
54:c0:4c:5d:cb:7c:5c:20:08:80:68:37:49:66:a9:
24:1f:69:06:df:b0:16:db:92:ee:f8:53:28:99:62:
22:52:3a:91:29:5e:75:29:c5:08:c0:90:9b:e0:f2:
ba:e0:8d:a1:f9:c0:32:c7:ea:40:42:cd:62:69:ee:
a8:a1:d1:72:2b:53:f6:55:e9:6e:f2:76:42:d5:50:
a9:64:f0:91:40:c4:e1:d3:bd:f2:f4:c5:10:47:2c:
f8:7e:9d:a9:45:20:96:04:c7:f3:94:13:78:1c:c9:
6d:42:92:00:26:1b:e1:a9:c1:85:9b:ac:08:0a:4b:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:95:1D:86:57:60:37:98:46:54:C9:48:0D:55:1F:C7:35:D2:61
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:64:f4:d6:f2:9b:ca:ee:a4:2c:11:79:42:06:5e:f1:1e:
07:13:a5:30:7a:47:ac:ab:15:03:69:26:d4:54:07:b0:50:ff:
fb:53:2b:39:bc:cb:f6:ca:c8:3c:56:55:b3:fa:ab:b3:27:19:
22:51:72:2e:c4:c4:54:b7:27:8f:0a:d7:c4:a3:9c:49:38:d9:
71:f3:26:25:c6:a9:48:fb:3e:ad:33:36:71:db:0c:07:db:c3:
50:f0:0b:e2:eb:18:bc:81:ac:57:a1:5d:1e:ad:b4:19:ed:87:
51:69:ae:df:9c:25:bc:4a:e1:c2:cb:93:29:cb:9a:ff:4e:4a:
aa:23:0b:4f:f6:1b:2b:48:13:6b:19:59:b0:b4:0f:1b:50:66:
2b:d4:63:41:7d:c6:d0:58:58:5c:9c:5a:d1:4b:ce:de:08:21:
a2:89:50:85:0f:d6:2e:d4:9c:28:64:21:fa:ee:0c:73:54:88:
c3:8b:cf:3b:d9:5d:32:bf:0c:06:08:dc:d3:1a:d8:15:94:ba:
9b:53:18:44:71:e0:1a:77:b1:27:d6:9d:5e:8d:e1:94:05:49:
83:92:ed:0b:6b:db:8a:82:f7:a1:bf:b1:ef:79:b4:10:c7:e4:
dc:61:79:6a:da:2a:db:2f:75:b6:c4:7e:21:e8:43:4b:f1:7c:
f0:e7:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:32 2024 by rpki-client on console-fra.rpki-client.org