Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: yjW1JACI9vshl5YC620rpKgWLip/xzDAuePy04F4I44=
Subject key identifier: 26:FF:E4:68:D1:B1:01:12:AA:48:B8:38:EE:B0:BA:7C:57:A9:DE:D2
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01935162C3042231081A14FA06B838A391C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 01:00:47 +0000
Manifest this update: Fri 22 Nov 2024 01:00:47 +0000
Manifest next update: Sat 23 Nov 2024 01:00:47 +0000
Files and hashes: 1: LDXTj4PfnTzbmV9biM03I7z6iwg.roa (hash: R510hx90VD3yyq6TRXRN9n9LhLVTIBezM3IXATnqiZE=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: VnOAp93Obz8uEAxwXAQxjlQMYzMk533k37cIQevQ3z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:c3:04:22:31:08:1a:14:fa:06:b8:38:a3:91:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Nov 22 01:00:47 2024 GMT
Not After : Nov 23 01:00:47 2024 GMT
Subject: CN=26ffe468d1b10112aa48b838eeb0ba7c57a9ded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:fb:6f:60:07:4e:57:43:d0:19:07:a8:a8:
e0:02:80:6c:e9:24:47:01:c7:da:e5:34:74:dc:d0:
f9:1a:48:4c:55:bb:66:b5:00:78:c5:9b:49:98:26:
0e:0f:58:db:57:6f:5e:33:cc:db:15:58:1e:6d:66:
28:b0:10:e7:b3:ca:bc:31:2e:9b:f5:b6:c9:50:64:
39:77:b1:fa:97:22:c6:11:19:a4:04:1e:57:1d:9a:
4b:95:40:14:f2:6c:84:db:5e:84:71:51:b4:16:0d:
1f:58:90:41:42:30:77:4a:aa:d3:0c:7c:1e:be:d8:
fa:57:ed:65:7f:a8:1d:0b:2d:d5:d2:74:4b:28:76:
92:0f:8b:46:63:9b:da:0b:20:97:40:4e:6e:94:49:
8d:1f:35:84:ad:b9:fe:4b:50:f6:ec:32:02:47:08:
60:fd:e6:c1:a5:d9:0d:24:e1:2f:76:73:67:34:7f:
24:79:24:a5:f6:63:3a:1f:8f:7f:86:fa:57:f7:e9:
65:ba:e7:fb:1e:b0:b4:0e:94:20:42:84:f7:77:83:
71:3b:14:0f:e8:2d:07:87:d8:08:64:20:49:07:da:
90:d6:11:7b:32:ac:5f:77:51:46:ab:70:04:c2:31:
14:dd:2a:b3:f8:ea:5d:5b:52:46:54:b7:bc:26:da:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:E4:68:D1:B1:01:12:AA:48:B8:38:EE:B0:BA:7C:57:A9:DE:D2
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:e0:5d:23:b8:9a:c2:f7:5e:27:75:b4:5e:92:30:49:8b:
fe:ac:96:a4:56:90:11:45:c9:30:fa:bd:9f:a3:99:54:7c:79:
d3:2b:ba:c5:6f:28:3a:ad:a2:8e:0f:95:1c:58:ea:1b:70:96:
5e:b6:e3:51:15:61:23:74:21:e2:55:07:9c:f5:53:91:35:c3:
d1:fe:f2:45:7c:40:e2:2d:0e:c5:73:33:1f:85:f7:ec:b9:2b:
d8:95:57:b6:aa:66:77:a0:03:98:5c:d1:8f:46:9a:47:72:64:
e8:4a:c6:dd:29:db:b1:7a:08:ce:50:14:06:2a:ab:f7:ec:37:
b0:30:4c:44:27:2f:a6:b6:f6:8f:7f:3a:fa:78:db:31:67:c3:
90:20:28:e4:8f:43:ea:8d:85:46:7f:a4:46:f6:5d:ac:b4:0c:
3d:7b:57:c5:ce:04:c8:83:54:b1:d4:ff:c1:e7:0e:42:8d:1b:
8b:ca:69:a8:27:56:60:17:a5:4e:36:71:40:7f:eb:25:34:ee:
a2:d2:5d:5d:a5:5f:93:d6:74:41:52:fd:22:42:ca:49:d7:6d:
0c:1c:a7:5b:8b:eb:a9:6a:2c:56:db:de:5e:f2:97:2b:57:85:
9e:19:6c:09:9e:f3:c4:f0:82:bf:66:c8:eb:98:52:82:68:e4:
bd:1d:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:35 2024 by rpki-client on console-ams.rpki-client.org