Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: t18Mzp2Dr+necjpCuuPN+cZNpkB0rWrYfSl4Yc/pzi4=
Subject key identifier: 06:66:3B:A7:27:70:D2:98:1E:9C:79:2D:57:63:77:02:84:8A:8C:CD
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 018F8749D0D84C60BC851CF9FAB67032ED3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 10AB
Signing time: Fri 17 May 2024 16:01:52 +0000
Manifest this update: Fri 17 May 2024 16:01:52 +0000
Manifest next update: Sat 18 May 2024 16:01:52 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: ugGFJ0/p6GRTyUyKPu+DZwrxeHHdpYfIlB5f4hrLvzY=)
2: ULRMwFCK9H1jOuHKYjAaTeXwFDQ.roa (hash: gSX0XpGv1wyJvbOOg2DvSekTtVn44Pe1BPJrCGiT+iQ=)
3: YS_tSOsEUDVDRbjEHrcV-W_KMUw.roa (hash: S18WkD2hGK8kdWx18Yaqvr+7XDhj2s4G4BB+SE6NyCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:d0:d8:4c:60:bc:85:1c:f9:fa:b6:70:32:ed:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: May 17 16:01:52 2024 GMT
Not After : May 18 16:01:52 2024 GMT
Subject: CN=06663ba72770d2981e9c792d57637702848a8ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f2:bf:2e:c2:02:73:ef:da:b4:ca:a8:28:bd:
ab:97:31:8e:9a:ed:36:9f:05:6d:96:17:be:49:5b:
e7:3a:40:38:dd:e7:df:bb:e0:93:6c:a1:26:8c:c6:
75:40:d8:af:d0:46:ca:cf:ea:59:39:22:8c:77:c1:
5e:12:fc:5f:aa:f4:7a:f6:48:64:d4:28:67:b4:ef:
91:72:f0:ec:e2:5d:93:43:8d:22:c6:b2:23:8a:23:
14:e4:6a:14:fa:19:26:ef:c2:cd:42:2f:88:94:f1:
ef:cf:fa:47:c0:ab:30:53:16:cd:a3:3e:94:14:53:
3f:2f:dd:0d:0c:3e:6f:ca:52:0c:c6:11:17:41:6a:
9b:51:71:57:4a:76:4c:c5:6d:e6:67:14:38:7a:0f:
81:66:23:ef:48:89:4a:37:57:ad:e2:62:2b:a8:db:
5c:64:3c:34:fa:5e:35:b5:7c:32:e6:6c:6c:c6:8c:
17:3c:54:ac:d2:4d:74:7f:0b:fa:6b:4b:36:0f:6e:
1a:f6:65:73:fc:e6:51:4e:10:19:87:64:ae:e1:64:
31:ec:26:59:fd:05:e3:60:e2:3e:29:45:7c:b3:13:
9d:f9:90:34:d9:a6:d9:90:87:ab:87:dd:55:83:7c:
9e:d9:c5:d1:12:5e:c4:ec:d2:02:75:c5:74:78:b6:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:3B:A7:27:70:D2:98:1E:9C:79:2D:57:63:77:02:84:8A:8C:CD
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cf:65:c3:6c:76:7a:cb:30:54:cc:ab:63:3a:82:5e:81:ef:
1c:23:91:ab:93:b3:9a:52:dc:96:d4:85:fe:af:98:5b:3e:fa:
0c:f5:89:bb:79:25:ec:47:91:74:c7:b0:02:a1:13:94:2a:e6:
af:19:66:0d:a4:40:5a:de:9a:ca:9c:0c:2f:da:51:e7:1e:fe:
09:e7:c5:bb:e1:33:1e:1d:e3:92:7c:f7:43:f2:70:b5:1e:20:
76:e0:02:f8:02:6e:5e:15:4e:7f:e2:0b:26:b3:2c:0c:74:14:
eb:6f:ba:0d:94:ca:f9:e1:6a:e5:aa:71:2e:d8:05:fe:4a:9b:
e1:8a:cc:92:a1:c0:f4:2a:61:a6:43:0b:47:14:66:c5:a4:46:
35:c1:69:6d:5a:a0:52:48:9b:5e:44:7e:84:51:82:16:cf:af:
88:98:73:b4:de:b6:e6:00:20:49:f8:15:5b:cb:1b:c5:c9:ae:
6c:a7:be:20:f0:ae:5a:6c:15:4e:ef:52:cf:a6:d9:b8:98:73:
07:22:a1:a0:78:51:1d:f0:4a:0d:e5:29:47:74:a9:fd:c2:1d:
15:87:51:23:c4:82:40:a1:99:41:15:5f:2c:46:d2:30:06:7e:
8d:a8:6a:3d:2e:2b:2e:52:48:99:7e:07:15:df:ff:ab:de:ea:
76:c4:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:38 2024 by rpki-client on console-fra.rpki-client.org