Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: 46IqrjTpWcQEMVUNh+FNdTIZDP53HQBC83fu/XGyZ8g=
Subject key identifier: FA:60:87:7C:BA:64:D7:B7:CF:65:6C:9D:67:65:AF:CF:52:D9:F3:53
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0193640D775D91FE9EF568D692DECF3AFE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0C0C
Signing time: Mon 25 Nov 2024 16:00:24 +0000
Manifest this update: Mon 25 Nov 2024 16:00:24 +0000
Manifest next update: Tue 26 Nov 2024 16:00:24 +0000
Files and hashes: 1: NlGTgRxSWyTIyIz4YsPoE9DjZtk.roa (hash: zbc1A2J5SGirVHi69d9ev+xxHYfp6fZBmbAL6LfG8gg=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: 71tqewLp3UdWPdoSAoNSRPir/ci18IxGl3GWWBcaMRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0d:77:5d:91:fe:9e:f5:68:d6:92:de:cf:3a:fe:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Nov 25 16:00:24 2024 GMT
Not After : Nov 26 16:00:24 2024 GMT
Subject: CN=fa60877cba64d7b7cf656c9d6765afcf52d9f353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:8d:f4:c1:50:5e:5a:aa:e0:29:db:79:25:
10:ea:72:8c:7e:42:e1:12:50:36:1e:05:19:49:40:
df:20:3c:b1:96:8b:90:b6:94:2c:ea:e0:0d:db:db:
43:44:44:66:6c:32:4f:ca:20:87:6f:2d:9f:80:f2:
6d:16:ad:0f:ab:c6:99:d5:65:3e:af:93:10:66:45:
47:c9:27:05:67:6b:d4:bd:c0:bb:21:40:1f:2e:a6:
2d:a8:1e:b0:48:ad:ca:99:66:95:22:b9:47:06:e2:
3d:3d:9a:25:f0:d6:72:aa:a5:67:1b:a5:66:b5:4e:
73:e7:6e:8d:74:d0:ce:be:70:4b:51:16:6b:7b:24:
c4:d7:5d:76:7b:64:6e:6f:b6:76:75:03:cd:ad:32:
35:d6:b0:7e:bf:34:47:e6:5f:c9:63:eb:ab:e6:cc:
60:06:df:ca:b3:83:c4:fb:ba:6e:e3:29:f3:32:05:
9a:83:73:5c:de:84:66:10:7b:54:05:8e:a7:24:ba:
d7:42:26:7c:40:c3:c2:cd:bb:06:27:9f:94:56:3e:
8a:b3:ea:5c:86:68:5f:2a:6b:c5:55:79:79:07:b1:
15:f7:25:93:77:47:e3:75:aa:0d:0d:13:d4:64:c5:
cb:6a:23:33:2d:16:42:6c:f9:11:e0:3e:49:3c:55:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:87:7C:BA:64:D7:B7:CF:65:6C:9D:67:65:AF:CF:52:D9:F3:53
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:d3:83:9a:fb:65:25:ea:da:a1:ae:ab:32:66:dc:3a:8c:
4d:cf:7e:ab:20:82:be:dd:34:61:5f:cf:50:b2:8f:6b:28:2c:
0f:ed:36:99:ea:27:fd:9c:ce:2b:35:71:29:bc:78:d9:37:56:
6a:b7:db:be:56:d7:c8:b0:f7:1e:20:a7:14:a5:8d:3d:ff:d6:
85:90:a6:27:57:88:76:21:0f:41:fd:fb:fa:10:fa:f4:18:c8:
35:d6:11:71:bf:6c:b6:db:b3:e7:5a:d7:d9:0b:d6:5c:58:6b:
87:15:96:1e:7c:12:74:12:64:4e:19:8b:b2:8d:41:96:48:58:
dc:75:9b:b0:bb:ea:2c:51:12:c6:3c:15:ec:95:e4:d2:45:1b:
97:92:8d:40:90:ea:d8:9b:b7:7e:78:c6:32:88:59:e6:b3:95:
63:41:7f:06:2c:64:9a:09:00:bd:e6:72:28:e1:a5:1e:22:30:
7d:59:21:6e:75:73:0f:74:1f:bc:1e:07:fd:f4:21:84:0f:7c:
df:05:c2:79:f0:db:88:12:11:b6:45:2d:73:18:92:c3:86:dd:
cb:e9:bb:28:6b:c5:d5:98:5b:c0:8b:ab:b6:20:53:30:95:56:
11:c5:b0:36:77:47:a1:c8:f8:53:3f:3a:f5:f1:0d:c6:20:8d:
1b:5e:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:24 2024 by rpki-client on console-ams.rpki-client.org