Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: xyty3jiknpW1ldWX5cqJqppGr+AyDAtk6KAYj2oLT/4=
Subject key identifier: F2:6D:20:55:2F:4C:5C:BF:20:11:39:1D:F4:32:86:B7:5E:38:1B:79
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019364B27922EB69DFF1A9D5D186E0D9850E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0C8D
Signing time: Mon 25 Nov 2024 19:00:38 +0000
Manifest this update: Mon 25 Nov 2024 19:00:38 +0000
Manifest next update: Tue 26 Nov 2024 19:00:38 +0000
Files and hashes: 1: Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa (hash: ouRcbVePhBEi1sg0DekWBBPqZw1Z5xT00z5zL5JP3jU=)
2: oDG92IltuWRAout8DiuQOd6mwN0.roa (hash: Dy1sckAy6SnN985aUfcG6wjjvbDmMJgvgTUIqqrAY6U=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: Epoyq2dNp2b0QwveReCtXhVK5cPvYoA05oKRFQj4HOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:79:22:eb:69:df:f1:a9:d5:d1:86:e0:d9:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Nov 25 19:00:38 2024 GMT
Not After : Nov 26 19:00:38 2024 GMT
Subject: CN=f26d20552f4c5cbf2011391df43286b75e381b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:8d:33:eb:74:12:40:5c:c5:67:f4:48:7b:
d5:37:f8:0f:11:f4:cc:49:78:99:5e:49:f4:78:9a:
df:87:b4:69:1d:19:70:3b:73:0e:c4:4b:ea:d7:25:
06:db:96:2f:e1:8d:79:d3:41:06:ed:e4:7b:8d:59:
ee:d6:5e:75:e6:75:08:2b:58:19:31:01:36:00:63:
46:c8:7d:b2:8d:61:5c:37:16:1c:32:2a:37:fd:67:
05:29:6c:35:0c:54:50:f4:3c:89:8a:79:a0:f9:c2:
6e:a3:6f:53:db:a7:ee:75:50:01:84:88:cd:61:cc:
93:57:db:09:c0:35:be:39:e4:e6:b0:ac:06:ca:1d:
22:4e:93:ad:08:50:51:bd:31:3c:da:c6:91:d0:dd:
18:f7:6e:e2:2a:0a:7b:1a:2f:a2:de:5f:66:ad:e3:
99:f3:c8:6d:c9:6c:db:5b:46:52:9e:eb:3f:2c:19:
e8:fb:30:4c:4d:fc:54:01:37:b7:a2:22:a3:ed:41:
2f:b1:7a:15:6c:ac:2b:ce:09:ce:e4:d4:8e:0a:24:
fa:82:cb:5f:c4:86:d0:83:3a:f7:07:65:04:23:90:
e1:7d:7c:2b:f0:bf:22:0a:7a:14:f2:a5:3a:f0:0b:
9b:cd:43:57:6f:98:29:72:ae:0b:f7:60:09:1c:66:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:20:55:2F:4C:5C:BF:20:11:39:1D:F4:32:86:B7:5E:38:1B:79
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:11:12:eb:7d:41:aa:f4:d5:d9:5d:46:3a:2e:77:61:48:d8:
6d:1b:8a:30:06:6a:5a:23:37:de:b1:e6:23:14:92:56:23:42:
d3:23:b2:6d:8d:fb:55:98:91:18:13:ce:90:7b:90:32:7c:d2:
30:3d:78:a1:85:87:7c:e0:78:05:2a:20:72:cc:75:1f:71:06:
1e:a3:03:65:fe:a3:52:6c:65:50:25:13:ef:39:b6:78:c0:a6:
91:d3:f5:54:e3:97:2e:a3:0d:41:6c:16:18:ce:ba:e1:39:c8:
4d:98:f1:12:6f:78:34:f1:37:2d:82:e6:02:96:0f:e3:ff:ff:
21:cf:fa:ca:3e:1f:85:12:74:64:79:55:60:b8:4a:c7:08:8b:
7a:11:22:1a:9c:a5:b2:17:da:c1:26:4c:3d:c0:10:0f:2e:cd:
74:e1:94:e1:58:16:7c:70:c8:8e:66:73:6a:44:3d:fe:6b:72:
2c:0b:8f:4d:59:8c:2f:c3:9b:a0:40:5a:4d:da:8a:a2:33:48:
9d:4a:d3:ba:3b:c0:bf:75:f3:54:fe:84:39:6d:d9:fc:b9:43:
83:5b:10:87:be:07:b5:f7:67:e9:77:a0:b7:9b:56:64:9b:d1:
f4:7c:bb:1d:b5:f4:f9:e7:d4:ff:d2:53:a9:49:e9:ae:a8:dc:
3f:a8:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:30 2024 by rpki-client on console-ams.rpki-client.org