Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: lOHXr7OFqxe80lTaclfLJxP2Y+2BhT84yseYJSAKGtI=
Subject key identifier: CF:2C:4E:13:F0:1C:84:44:C0:AD:8B:20:A8:A9:86:4E:BA:77:24:27
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019356BFB5544BBFEECA0E4E1C705239EA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 02:00:24 +0000
Manifest this update: Sat 23 Nov 2024 02:00:24 +0000
Manifest next update: Sun 24 Nov 2024 02:00:24 +0000
Files and hashes: 1: 7SdPJFRfxzDyNZtGTABV0VtXypk.roa (hash: IMgWZt9j6n0XOwifr3ZuDh1jscpHIXUbryF1IhA1OS4=)
2: 9dW7K3lOxKQprhanyGmDAf7AqgM.roa (hash: /pjpvtioHkymWH/uBfh7jveH7e/YSNm97ZPz4PoZi0Q=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: xYAf/YdSfpbLQmo8I5Froy+B5vD44+F8/tnj+r+yzmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:b5:54:4b:bf:ee:ca:0e:4e:1c:70:52:39:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Nov 23 02:00:24 2024 GMT
Not After : Nov 24 02:00:24 2024 GMT
Subject: CN=cf2c4e13f01c8444c0ad8b20a8a9864eba772427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:61:4b:9e:3e:13:13:2e:fb:0f:5e:31:62:
e5:31:65:a7:f4:f3:c3:b8:d7:55:dc:92:3f:64:3e:
16:7a:16:65:7d:be:e9:04:03:8d:15:1b:52:49:7b:
75:91:f8:9d:ab:3d:26:a7:66:d0:50:e6:c5:c5:ec:
5e:7e:8d:c9:87:08:77:4e:5e:9c:7f:ac:c9:5c:d4:
05:3e:0a:1b:ad:8d:ee:db:2a:1b:9a:d6:87:cb:29:
0c:fd:51:77:b5:ca:2a:75:5e:be:88:c2:49:0c:ee:
91:e1:21:d9:3c:91:e1:e6:31:51:af:e1:a3:66:5d:
a4:e2:e0:1d:6a:56:5e:da:95:3a:9c:00:2c:fb:d7:
5c:65:80:92:ef:b9:4f:ed:88:c3:fc:40:2f:6b:2c:
0c:2c:e4:42:89:7c:6a:8d:c6:d5:e2:fb:0f:ed:f2:
8d:67:25:cd:97:66:81:01:90:36:60:66:c1:c8:b5:
b8:06:6b:32:6a:91:47:06:d0:07:cd:83:d8:71:30:
9c:de:81:f7:bd:1e:59:1a:55:63:2c:f1:57:04:c8:
4f:ea:4a:ef:56:fa:9c:62:04:e3:9e:13:eb:95:8b:
1e:2b:8d:20:4b:ad:9a:c8:bf:0a:2a:36:d0:7d:0d:
60:6a:63:c0:36:5c:48:eb:0e:3b:e2:9e:73:ff:7c:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:4E:13:F0:1C:84:44:C0:AD:8B:20:A8:A9:86:4E:BA:77:24:27
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:55:9d:f1:1b:bd:58:d6:07:8e:9f:8b:6e:27:39:9d:f8:32:
7f:ba:2b:35:85:88:7d:ac:2c:ed:b4:67:ba:14:ce:46:38:29:
d8:26:37:c3:58:45:f4:a0:e7:04:04:74:b0:f0:fa:c6:e1:26:
cc:16:fe:cd:19:0f:96:07:a4:74:9c:3d:bd:43:76:a7:ee:bb:
95:0d:a5:d4:d3:e7:4a:c1:c4:97:f8:9f:c5:d7:29:fe:00:9d:
b0:36:cc:28:1e:c7:5a:48:31:50:36:65:60:61:87:9f:cc:2f:
40:2b:14:d8:40:01:76:80:ce:75:ef:b4:50:3b:a4:c6:60:2a:
bd:be:e7:a3:e9:60:49:fa:1e:b3:1c:ca:51:b6:00:57:8b:b3:
94:6b:fb:41:b9:4d:78:68:8d:98:fe:eb:a4:dc:4e:fc:08:12:
c5:00:e1:7a:47:1e:84:3b:26:06:73:00:7c:a7:03:10:c9:0f:
1c:19:16:5f:f7:11:f9:ee:36:9d:4d:66:50:f2:4d:2e:3b:77:
9d:2f:ab:53:22:61:55:fb:b8:aa:bc:21:f8:15:5c:6a:83:6f:
00:50:b0:30:25:c3:80:38:7a:05:ee:41:c1:0a:e6:da:4e:0f:
c0:3f:ac:0f:5e:0b:f1:1b:ac:b1:5a:d8:d8:32:bb:5c:5f:6b:
8b:a7:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:42 2024 by rpki-client on console-fra.rpki-client.org