Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: GOLaMmbjafx7RAtOS/nO5Nj2tdPGH2UbjCSaVeqVY/M=
Subject key identifier: EC:76:C6:B2:9F:D2:7C:89:81:1C:70:E8:34:12:AF:5A:E5:CF:7B:3E
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01935651ED546F6570C6CAB437CD16532C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0B6A
Signing time: Sat 23 Nov 2024 00:00:29 +0000
Manifest this update: Sat 23 Nov 2024 00:00:29 +0000
Manifest next update: Sun 24 Nov 2024 00:00:29 +0000
Files and hashes: 1: 5j-brwgKAhHNVV6aCiy18Sub8x0.roa (hash: BRfGUH4qGEL0TyqDbDiwfuCz7Aw3IppKI96auUUdSLI=)
2: 8QlFz5vNMVGw8sNU9iJogsoEpHU.roa (hash: yYwB8AEN7vbVd9UeyiqiZfEREeJy9PJrZ0RYWHavo0k=)
3: DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa (hash: euXi3UViF66MqzyupePQsifTfFOqVL8uuwagK96jRAE=)
4: RFsDNypGzzesmnfvvCRcU9jhtJA.roa (hash: bIXHQGyw2IBXinZ45nJkv4qBsHKXmDRHpLMT9+G0Vrw=)
5: RNXnZ6tSnf-hLEK25bTBgFR3KWY.roa (hash: j8zbSO2ktDh4hlM6lC87JtSye9ArNt2wTxfDZfWqIUY=)
6: S6ZMqQTFCkrHxDOFpIME8xKCp3o.roa (hash: rZN7BidfkriV+NUBzbFt330F+B5xpVzksLgmTqdWsKs=)
7: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: ypG0jjsd2Fn4bEluU1dow6AawvIrzaQxcWkxVAkKzJ8=)
8: toAtmFEkjhnorhD8eVm55Txj9XM.roa (hash: /FBLoYtt4a0KxbFHPyFCQ9VvcwmmxqKrr/HFfBeMSQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:ed:54:6f:65:70:c6:ca:b4:37:cd:16:53:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Nov 23 00:00:29 2024 GMT
Not After : Nov 24 00:00:29 2024 GMT
Subject: CN=ec76c6b29fd27c89811c70e83412af5ae5cf7b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:dc:fe:9e:b1:60:87:12:f1:5c:22:d0:d6:
df:6c:73:35:f3:1e:57:a6:4d:0b:90:0f:aa:8f:83:
37:ac:db:bd:e9:79:0f:e1:ac:97:6e:07:27:11:d5:
16:89:cf:f1:19:28:ce:bb:b2:d0:db:9e:ff:42:c8:
34:0c:a1:d3:28:4a:b8:e3:ad:c5:b4:c9:6b:8e:53:
d5:6c:93:24:ac:c1:7e:b0:55:72:69:b8:33:7e:a0:
9a:02:4a:01:60:83:be:18:8f:48:6d:47:66:9f:75:
de:47:7a:49:c4:c0:83:bb:ed:31:ba:55:e6:f5:4e:
84:ae:e1:8a:a0:83:e9:7c:06:95:b8:0a:84:88:b1:
87:fc:fa:d3:39:4d:36:6b:b3:e4:9d:7b:ed:f7:86:
48:9f:ce:2b:51:1f:d9:06:72:2c:90:d0:e5:4e:6c:
18:07:75:d1:7b:c3:36:24:b8:66:be:ad:ff:0d:ea:
93:51:e8:50:00:e2:37:8d:50:46:9f:eb:2a:a0:70:
85:ae:dc:23:ac:f7:b5:06:8a:6f:ce:08:80:a9:ae:
7d:83:55:98:3b:a0:91:8e:0b:53:43:20:3b:bb:be:
4a:cb:b6:b3:84:b6:89:ab:99:8c:50:c9:92:66:86:
8e:9f:52:68:6f:83:c2:8d:e5:34:12:b8:cb:c3:e0:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:C6:B2:9F:D2:7C:89:81:1C:70:E8:34:12:AF:5A:E5:CF:7B:3E
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:58:86:ae:7f:17:44:78:c2:0c:c6:27:78:7d:58:de:04:
bc:d7:30:b4:7b:e1:4f:b9:e7:9a:8c:a8:58:9d:36:4c:89:00:
21:df:a9:5e:0d:cc:3a:0d:f6:fd:cb:4d:38:54:b7:a6:9e:c0:
cc:d3:d7:f4:64:69:2b:8c:1b:d4:28:ec:f5:ae:cd:e6:31:bc:
cf:ed:a7:a0:f5:f8:f5:34:22:ff:97:e5:82:5b:9e:9c:41:5d:
30:f1:10:21:69:42:ff:35:c1:9c:8a:9b:be:7b:1b:48:1d:67:
0a:d1:c7:c5:d1:a9:ea:01:ba:bb:e1:27:73:08:29:ff:e3:b7:
20:9c:a2:ea:4a:f9:c4:b1:a2:6c:d1:67:7c:a5:cd:28:bd:4c:
e2:28:57:50:ba:ae:f2:84:6c:37:fc:07:6e:23:ff:eb:14:78:
d5:af:5e:7b:24:39:fc:47:91:77:ca:a8:83:a0:3e:b3:89:8f:
60:05:49:d0:4b:a4:3e:d6:b9:9d:ec:53:fc:c4:51:ec:87:dc:
20:ed:0b:7b:c6:98:c0:75:07:96:e9:48:f1:45:0f:6a:de:33:
8b:e9:56:28:7c:b0:97:75:cf:c4:be:78:85:03:17:4b:c4:5c:
21:f6:98:5e:48:73:98:de:2c:d0:a5:68:df:d8:19:0c:07:a6:
cd:74:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:18:09 2024 by rpki-client on console-fra.rpki-client.org