Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: zVJmLROimJC4K0rmmexU7dLFEG6iRVKJj6oYTT35Thw=
Subject key identifier: A0:F0:73:3B:07:36:5E:15:0F:5B:9A:86:54:D2:B3:B9:C1:D7:58:A9
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01935689D4E050BD385DB381DEC5CD723517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:01:33 +0000
Manifest this update: Sat 23 Nov 2024 01:01:33 +0000
Manifest next update: Sun 24 Nov 2024 01:01:33 +0000
Files and hashes: 1: q4p0jFQ3WEfG-M-4E7I9saS5OYY.roa (hash: e5nOmBteRDXgf2CEGYG1zrThh5BuvyRg11QsYb1ewt0=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: Xx449lkX/wWNyIF5PRzRFinf1qeOZ+E6FkwOKzUjEnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:d4:e0:50:bd:38:5d:b3:81:de:c5:cd:72:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Nov 23 01:01:33 2024 GMT
Not After : Nov 24 01:01:33 2024 GMT
Subject: CN=a0f0733b07365e150f5b9a8654d2b3b9c1d758a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:06:76:a9:c9:7b:31:09:e5:49:90:c8:17:
e8:24:75:07:bc:e8:81:8d:1f:b7:e4:27:eb:83:65:
76:21:66:30:bd:be:8c:2e:a8:a7:0b:d8:32:6e:60:
22:52:55:8d:28:fb:36:1b:a6:0d:71:74:03:da:54:
ca:ed:63:8b:20:02:3f:d7:43:bb:99:ec:5d:13:00:
1d:74:be:78:fd:ad:ac:2f:fc:2a:8f:99:e8:19:5c:
78:17:6d:96:77:71:91:1b:05:df:41:6d:14:3b:84:
e9:98:c9:69:bf:38:3f:a8:54:5f:de:1c:73:75:ad:
7a:f0:6c:61:60:ed:e6:1b:46:f5:a5:fc:ac:14:c6:
9e:39:80:d0:b3:4f:d2:b1:ce:bf:40:7b:fa:f8:6e:
cc:fd:c3:12:52:b4:2f:09:82:b7:b2:cb:b5:8d:9a:
96:88:02:58:24:c0:8c:0a:1a:50:fd:b7:57:d3:73:
66:79:8b:e4:41:0a:78:82:cd:22:4f:cd:8c:c8:28:
ab:d4:c2:8b:47:f9:58:09:6c:81:e5:cb:05:01:ed:
f1:22:23:d4:b3:e9:f4:c4:c0:5b:f7:4f:a8:86:b6:
1d:49:ef:51:bc:43:73:71:df:08:74:8a:86:17:64:
56:88:e0:d9:01:c5:d6:fe:c6:8e:7c:0d:8f:78:d3:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:73:3B:07:36:5E:15:0F:5B:9A:86:54:D2:B3:B9:C1:D7:58:A9
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bf:86:e4:f8:f5:91:6e:6f:48:0f:30:00:41:3e:8b:a9:0d:
13:c4:71:e5:3f:18:de:86:e4:cc:0f:c2:ce:f2:56:67:cf:d2:
6d:0a:32:06:b9:44:ec:ea:15:3e:02:85:e4:c4:8b:ad:f9:4a:
82:1f:31:79:d5:46:1f:8d:3b:33:17:4a:a2:6a:4d:30:a2:20:
33:39:24:87:6a:aa:b4:f1:40:88:e4:2b:60:f0:71:dc:62:5b:
27:a8:3f:b7:01:0a:0b:2e:1c:d7:ee:f9:a7:b1:d8:06:c0:4e:
1b:d8:31:9b:59:d4:bd:d4:12:34:8b:b2:b4:d4:bf:0c:71:55:
8b:aa:3a:02:29:23:e8:64:a4:0f:fc:38:8d:36:30:88:a1:c2:
4c:70:2e:95:6a:f9:12:69:52:6c:78:df:2a:de:60:cc:22:6f:
ed:6c:e0:a8:0c:a8:ba:ea:33:f6:28:15:a0:f4:43:e8:91:0a:
5d:64:b6:64:40:3c:23:7b:62:4b:bb:98:91:b7:e4:07:64:3e:
03:1c:74:69:4e:54:a9:9f:15:11:bd:89:9e:19:31:27:a6:6b:
21:af:b5:cd:85:46:aa:c4:72:d4:4e:f2:31:0a:cc:27:64:fb:
f2:8a:22:d7:7b:89:ef:a7:73:a3:7b:3d:cf:ab:c8:28:6e:cf:
d9:42:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:16 2024 by rpki-client on console-fra.rpki-client.org