Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: vK+dbtB/D0qX6H2fMnhM/onilL15LRiKYK1iVV06wf0=
Subject key identifier: 74:AE:63:77:87:A8:00:13:4D:D4:F1:F8:69:35:1C:1B:26:0C:4D:02
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0193549C1DF772C28DAAF2B3173CA3E31CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0533
Signing time: Fri 22 Nov 2024 16:02:17 +0000
Manifest this update: Fri 22 Nov 2024 16:02:17 +0000
Manifest next update: Sat 23 Nov 2024 16:02:17 +0000
Files and hashes: 1: FQJAi_4cUSpjAQVAiZVjd6Oif1Q.roa (hash: pY5A/nKHcYDKmJrJHKzu7+Ei+HoSw7208hrJq2+MQHk=)
2: _oc_zi2unNTdMVHTxhJPeUhZqqk.roa (hash: +vPzB3RGSSbEBTuHQkzKWi3dRyiXQt64/s0EXvJy7aY=)
3: nvTed6jvc6HSThg56mig2Q0E1VE.roa (hash: jjaoLdsOxvTwNdLxjHnACJnzmijnQKhr6n36ZW6j6oo=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: szpKhzjFT7r3cEQm2utcpRFxSYWqlex16RcQb49x3Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:1d:f7:72:c2:8d:aa:f2:b3:17:3c:a3:e3:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Nov 22 16:02:17 2024 GMT
Not After : Nov 23 16:02:17 2024 GMT
Subject: CN=74ae637787a800134dd4f1f869351c1b260c4d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:ae:3a:43:46:36:9c:b1:c3:c5:28:d5:89:
62:80:7e:64:00:78:95:27:b7:c6:ff:30:0d:8f:27:
59:e4:74:0b:f9:a3:83:f0:5b:b7:ee:54:9c:55:7e:
98:4b:c9:fa:e5:0a:24:e5:26:7d:06:7c:74:ab:49:
04:2c:cb:f6:bc:d5:31:19:2b:3d:7d:ca:1a:5c:63:
ea:b1:35:f7:00:e6:0d:3e:e5:7f:37:ef:ae:0d:71:
6d:f8:de:9c:5c:e5:a7:b8:9b:53:65:7b:28:65:4d:
4a:a7:ab:0c:d1:13:d9:3a:a7:94:05:fc:b2:72:e5:
b6:52:f2:16:9a:27:b7:ce:c1:dc:a7:6c:31:45:db:
18:a3:0b:47:22:70:f5:d5:aa:1a:91:6c:3d:d4:ce:
6b:15:3e:c3:50:2c:af:e0:fc:10:71:46:c8:c0:24:
f7:e7:3b:cf:94:4b:72:c7:7b:46:ba:0f:c0:65:c4:
04:74:5e:67:9d:79:fc:f4:68:b8:78:05:cd:2d:8b:
f9:ee:86:2d:27:4d:7f:f9:a2:15:9f:d4:03:08:ad:
38:6e:09:a9:05:9d:a4:cc:61:d4:12:e3:cc:4b:c4:
7a:b3:9a:44:0b:15:35:89:d8:97:c3:dc:9c:61:37:
ac:c9:98:3d:ae:81:a3:04:40:f6:f1:cf:c5:f1:52:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:63:77:87:A8:00:13:4D:D4:F1:F8:69:35:1C:1B:26:0C:4D:02
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a9:83:1d:1e:e7:ef:75:34:d1:f5:aa:82:1a:8a:fb:7f:48:
29:a1:38:0c:b7:20:a1:2b:5a:59:94:ca:8d:8f:2b:80:bf:1e:
ce:36:04:3d:af:b0:01:4f:ee:af:17:42:b3:fb:1e:db:6d:0b:
c8:86:52:3b:29:0b:89:c0:6a:7b:76:29:de:cd:a9:52:1c:5a:
4a:15:5e:89:56:b1:92:45:f0:28:4d:d0:8c:6d:e3:69:00:3e:
27:1e:38:40:42:61:7b:19:1f:21:57:5e:3c:bd:0f:8a:0d:d0:
f3:1a:09:db:4b:21:7e:85:70:2d:44:67:d8:51:f4:53:b3:9f:
27:76:9b:56:f5:3f:5e:0c:a7:d1:c9:85:05:3f:d3:e9:f7:11:
9b:f7:d6:a0:a6:12:aa:4a:52:91:6c:d2:29:7b:43:f6:2c:68:
05:51:4c:20:42:e1:4e:fb:17:a3:37:2d:4c:cf:66:53:e8:7d:
77:51:e6:27:a7:c4:b4:70:4a:65:2e:97:c5:5e:b3:8e:88:11:
78:f7:1e:88:ab:43:50:0e:34:98:8a:51:42:f4:51:b8:cc:4c:
61:52:32:26:9d:28:98:9d:b1:52:38:60:7a:2d:0d:02:c6:5b:
21:55:a5:95:ec:88:b4:c8:9e:87:6b:2d:da:ad:06:6e:3e:3d:
48:01:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:21 2024 by rpki-client on console-ams.rpki-client.org