Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: QwtMazhJpYUcUc7ybgx3ZGDIryoMfZ6bVv4uova35d4=
Subject key identifier: 3F:06:57:63:A7:1C:3A:3E:C2:78:50:F4:F6:AB:55:22:C7:62:F5:3A
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 019351D0970EF69FA221D0CCC72AFD7DC61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 1301
Signing time: Fri 22 Nov 2024 03:00:44 +0000
Manifest this update: Fri 22 Nov 2024 03:00:44 +0000
Manifest next update: Sat 23 Nov 2024 03:00:44 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: kcnwJXDT+HYL/J4Btn0TmW5M5rC3rqQUoz9Avbc8vgM=)
2: PC9YErl-xsvmR2cKozOa0QzR5LY.roa (hash: YafwaqussxXVeeblKK+UCzd3FFSv3L8SGD10xZTl31I=)
3: rDx6Z4n-bdgnl_0lnhdr7uCdIeQ.roa (hash: RCZsbOs5hKGgTgpJ4Ce4QtJlhQkyAAhQ1Xw8UfznRGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:97:0e:f6:9f:a2:21:d0:cc:c7:2a:fd:7d:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Nov 22 03:00:44 2024 GMT
Not After : Nov 23 03:00:44 2024 GMT
Subject: CN=3f065763a71c3a3ec27850f4f6ab5522c762f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:22:16:58:22:6a:2c:b9:3d:90:8a:c5:3c:
ed:b6:aa:6b:57:fd:d1:33:8b:dd:c8:4e:cf:fd:3b:
d3:c7:aa:18:6d:4d:7a:08:b3:5a:22:55:a6:46:6c:
57:47:89:85:a2:52:7d:cb:9f:55:da:91:4c:10:35:
f7:12:cf:fd:9b:8e:3c:ad:fc:ba:3f:7a:87:2d:b5:
e3:1b:54:96:e0:1a:c3:d2:ff:50:d0:9e:23:39:09:
32:ab:42:99:da:08:28:10:55:31:4e:38:dd:6b:fa:
25:a1:16:6b:4a:68:4d:df:c4:05:2e:5b:76:69:0b:
e5:cb:38:86:77:ea:47:e2:1e:6c:e2:2a:31:46:56:
9a:3d:c9:34:8e:10:0a:5c:66:c9:db:7e:eb:4a:da:
05:3b:33:bd:87:c9:73:3d:8e:b8:4a:9a:7b:20:ba:
1e:08:32:20:dc:43:3d:97:47:bd:5b:d5:18:f7:0c:
50:f6:71:72:54:68:43:01:07:10:24:90:97:19:4f:
c7:ef:d5:b5:91:39:38:20:0a:8a:1d:4f:dc:1c:66:
aa:6c:ee:68:8b:53:fa:be:15:e8:ac:31:6a:38:cc:
46:39:e4:64:d4:68:47:aa:db:3f:ff:83:a3:41:a8:
18:d6:5d:5c:c3:35:bb:0e:20:bd:90:08:38:c6:f4:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:57:63:A7:1C:3A:3E:C2:78:50:F4:F6:AB:55:22:C7:62:F5:3A
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:57:2a:e2:69:1d:19:c8:d6:6f:c2:cf:76:7b:da:ce:5a:
e0:6b:73:9a:18:d8:92:91:e5:33:14:51:e6:61:45:4c:4a:48:
4d:3e:12:dc:7a:61:91:1d:2e:d2:65:e9:69:cd:8b:db:74:26:
ab:76:cf:e1:b9:1d:0b:59:61:02:4a:a5:f0:a2:fa:b5:c9:ec:
bd:50:97:4c:f2:64:07:14:94:69:6a:91:81:83:77:fd:99:28:
b8:e5:50:fe:ef:4f:b6:26:0b:4a:3a:9c:7c:0a:43:f7:04:ab:
01:3e:20:6a:cb:14:88:d4:d4:7d:df:50:ef:2f:db:bc:79:75:
74:b7:73:26:72:52:ad:a8:c1:4f:2f:5e:de:7d:ff:af:6d:ef:
51:1a:22:61:c6:40:a5:70:ba:98:1c:d1:df:74:14:46:89:50:
ca:75:a7:42:09:e1:97:02:be:e7:51:08:57:57:ce:03:92:92:
18:fb:89:d1:7f:fb:bb:83:6d:fe:87:09:01:55:df:2c:df:64:
de:5c:5b:af:88:15:68:dd:bf:b9:cb:20:46:f6:fb:3e:14:ff:
3f:0e:b0:e2:e2:0e:74:62:2f:db:92:63:08:0a:89:bf:44:13:
68:94:1b:52:6f:d8:5d:78:37:df:27:cf:47:a9:72:55:dc:9a:
d0:b2:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:07 2024 by rpki-client on console-fra.rpki-client.org