Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 1EQaxeeZjUQKlbSXdm2z2n2SMPN4J7C0+J/CGKera8I=
Subject key identifier: 5F:0F:45:B7:D0:52:81:83:DD:00:B9:28:79:56:5C:D8:5A:3D:B4:A5
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 018F15FC7476A9AD1FC10B0330D9FB3C7826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 1109
Signing time: Thu 25 Apr 2024 16:00:17 +0000
Manifest this update: Thu 25 Apr 2024 16:00:17 +0000
Manifest next update: Fri 26 Apr 2024 16:00:17 +0000
Files and hashes: 1: Maw9MkzZIAqBNmLsDH-Qo6m-D00.roa (hash: fNB2ftojaYzfIp3Qt52S6pQX2rHXWGPz9U0P2jZsMJk=)
2: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: 4RtJLxMgoISPfAJX4FfE14i3r7xt6CsFyUw/JBMA0/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:fc:74:76:a9:ad:1f:c1:0b:03:30:d9:fb:3c:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Apr 25 16:00:17 2024 GMT
Not After : Apr 26 16:00:17 2024 GMT
Subject: CN=5f0f45b7d0528183dd00b92879565cd85a3db4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:c4:2a:16:2d:06:66:1c:bb:4d:d3:7b:35:
3f:9f:0e:16:91:30:cc:c8:48:6f:eb:30:b5:8c:57:
de:35:0c:4e:19:59:78:e2:5e:b5:14:ec:04:58:bb:
ca:b8:34:d0:13:42:ad:47:e4:ad:4c:66:4f:91:79:
43:8f:22:2b:9e:fe:79:10:c1:c0:0c:1e:8e:ce:a8:
aa:a4:10:0e:c3:5c:7a:eb:e6:c1:83:ff:0b:cb:bf:
3f:5c:b2:36:f8:75:18:8e:7b:74:b1:12:a0:ea:4a:
11:59:ed:40:98:2b:a9:0a:f1:27:41:56:34:f1:ee:
e4:64:ce:5c:d1:3b:a3:0e:43:49:fc:a0:64:04:55:
de:9e:83:e1:9a:ac:40:8f:a2:8d:40:0d:d9:14:81:
42:53:cf:29:2b:ef:a4:13:2b:71:b4:3f:ff:ce:cd:
0c:16:bd:d5:99:23:8a:4c:bf:43:bd:99:30:c6:b0:
75:4d:58:bc:2f:12:32:ce:b5:87:6e:1c:25:eb:c2:
6d:a5:b2:18:ef:d0:d4:5c:69:7b:bb:7e:91:e2:7f:
c9:66:92:2a:db:a5:28:c7:ef:94:42:a4:b4:f8:87:
10:78:93:0d:3a:b6:38:03:50:7f:ad:e6:8a:1a:35:
ba:55:04:20:f2:e5:87:a9:21:fb:70:4c:bc:90:24:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:45:B7:D0:52:81:83:DD:00:B9:28:79:56:5C:D8:5A:3D:B4:A5
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:21:0d:5d:20:54:d3:9d:f0:73:c9:d4:75:f8:b2:8d:ab:
35:f2:67:14:2d:7a:b2:3d:67:78:e0:72:96:67:79:80:8f:1a:
8a:47:2c:2b:a2:61:91:d2:b4:25:12:bf:c1:9b:a2:2a:c8:75:
2a:32:bf:67:c0:45:c7:d8:c2:94:66:ee:44:6b:29:14:a7:80:
73:e5:0d:25:7a:12:77:fd:7b:b9:e2:62:44:08:31:73:b5:a6:
ba:88:d7:5b:cd:96:47:37:cd:28:66:f2:8c:e3:5e:86:f0:a5:
e8:46:d5:d6:0e:9e:a9:e8:e9:30:af:ac:16:13:a4:82:b9:38:
76:4e:39:81:9b:2b:38:9c:81:eb:92:f1:c0:24:90:c7:dc:2b:
36:f3:95:e8:b4:7b:6a:c7:47:10:cd:44:bf:4c:6d:5a:39:2e:
bf:29:e7:4c:c9:f4:53:67:af:e1:fb:ee:c9:48:12:f9:93:e8:
a0:3b:86:7c:46:26:50:f4:4e:0e:2f:36:d0:f9:52:59:13:f7:
08:7e:15:8f:10:4b:23:b2:aa:1b:78:44:cc:c2:66:91:a6:35:
ba:85:87:ad:f9:5e:9f:d0:81:f2:89:f7:ba:41:03:aa:d4:f9:
9b:9c:48:e8:d4:d5:6d:00:5e:56:01:25:8e:5b:6f:0b:b9:d8:
34:77:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:43:11 2024 by rpki-client on console-fra.rpki-client.org