Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: f0V8hdVa9wSSIL0673EAOCNQgOkVoNN3zk5wa/pbH5w=
Subject key identifier: 1C:F8:0D:46:2C:C8:7B:F9:77:B1:FB:EA:10:4E:CE:E2:D7:37:C0:FE
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0193580936F01EEA05DE21F5551B61C37683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 0132
Signing time: Sat 23 Nov 2024 08:00:19 +0000
Manifest this update: Sat 23 Nov 2024 08:00:19 +0000
Manifest next update: Sun 24 Nov 2024 08:00:19 +0000
Files and hashes: 1: HOYPC_jucvsU5CdX7mlbKcsBqMs.roa (hash: TcPzCSiJg0DdEcm/Emhjy8GjCkN/7Uu/g31US2cTTao=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: Ma/GfKy0q7nTCsV2KsdniXEKq2zn4p3IPfiXACCKky0=)
3: wGSSa-JT091UblA4t0OY8VTj3Y4.roa (hash: 1rU9GjvE59eacVyNyCgZkJTn4kopxYtAz3gl9FWPFmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:36:f0:1e:ea:05:de:21:f5:55:1b:61:c3:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Nov 23 08:00:19 2024 GMT
Not After : Nov 24 08:00:19 2024 GMT
Subject: CN=1cf80d462cc87bf977b1fbea104ecee2d737c0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:ee:4b:d8:6e:b1:e9:5c:26:24:0f:19:1b:
95:15:b4:d7:fa:24:10:81:cd:35:26:71:83:0b:51:
8e:50:c3:0c:a4:bd:64:f9:a4:b8:0e:a1:6c:29:17:
77:b9:76:ee:06:2f:02:fc:f8:f1:3f:5f:cc:66:98:
5e:10:e5:23:d4:42:0c:29:52:f0:2c:5b:df:62:4a:
1f:99:1d:c5:a3:51:97:bd:66:e7:2e:dd:77:a8:c4:
4d:f4:2a:c9:6a:4e:e3:91:a5:e0:d7:16:1b:9b:ec:
e3:1f:b8:2c:c7:4e:48:1a:9b:bf:0a:23:b3:be:b8:
0c:ec:5d:39:3f:93:6f:cb:b2:23:f2:23:f5:73:ed:
bc:d1:ea:d1:b6:84:6a:9f:05:9b:a5:21:57:76:5b:
e3:9b:37:8e:46:1b:90:13:e5:a7:0a:7c:44:71:59:
11:a8:9f:ba:18:b3:f0:3c:18:ee:ce:75:da:62:e8:
e1:4d:82:2e:6c:a5:62:7c:a1:75:43:81:e4:9e:22:
2e:a4:14:be:50:7a:4c:07:b4:c4:c9:a3:46:1c:93:
45:08:d3:06:87:83:2f:0c:e5:d1:f8:39:ce:9e:2e:
4a:85:98:e7:9b:9b:0f:b2:a8:94:b4:9a:06:11:b6:
62:d4:d2:a7:43:68:99:24:3d:e1:fc:01:d5:18:3e:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:0D:46:2C:C8:7B:F9:77:B1:FB:EA:10:4E:CE:E2:D7:37:C0:FE
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:7a:14:79:e2:9a:b5:d4:64:01:54:37:94:50:87:c2:27:
7b:f1:a8:a5:0c:5f:4d:ed:04:e8:93:86:9b:12:13:3a:8f:27:
18:b4:2e:f9:c0:a7:a1:32:a9:22:91:5e:9b:a9:86:b9:bd:18:
dc:f9:e0:e0:23:0a:65:87:ae:dd:86:e0:2e:b3:73:ed:f4:b9:
b4:d3:ba:24:3c:19:50:49:5c:4d:fd:27:2b:5f:ca:cd:7c:05:
63:c3:28:dc:1e:98:d9:91:03:f2:db:54:52:c5:cc:2a:88:2b:
4c:46:d1:e8:a9:6b:93:f0:dc:5b:95:94:c9:b7:5e:de:0b:a2:
a2:3c:7a:29:eb:1b:9b:be:42:f9:af:e0:51:a5:3f:89:71:78:
47:67:6c:7c:07:20:32:59:90:b9:7d:64:d7:b5:42:b2:21:dc:
1c:58:57:c9:38:9a:e7:df:ef:45:2a:06:e2:dc:ca:b0:95:72:
d3:03:d3:0b:04:28:1b:c7:8b:a1:18:d3:51:75:6e:7a:37:40:
8a:20:67:c0:fd:85:38:2d:0b:5e:21:d2:0f:e4:2e:c5:3e:61:
64:18:10:9d:8f:c0:fd:59:be:44:56:23:62:26:73:09:b6:83:
a8:81:4f:9c:10:96:e2:b2:f9:57:77:94:de:e3:b5:e2:13:af:
58:94:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:20 2024 by rpki-client on console-fra.rpki-client.org