Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: o0YXEHTB78L+HEZ0FYywH6ltNFksrNqEXkB+N5HWU7k=
Subject key identifier: 17:D3:6C:22:D4:BB:F1:E0:07:EC:D1:C8:D9:85:9F:3A:77:0E:81:28
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019356F7273803C722AEBE5D7FBD0A70590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 03:00:58 +0000
Manifest this update: Sat 23 Nov 2024 03:00:58 +0000
Manifest next update: Sun 24 Nov 2024 03:00:58 +0000
Files and hashes: 1: N7tH7buzIu0N2-g9B0fM2wqP0Rc.roa (hash: OK6Jv6CUHfmKjr0XiW9AOvYpr8ZuIlaiUiop3dCuoaQ=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: WcD+rWbngL5dfMhiGhXWM5TADdBgF5BJzqp9tMyiAR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:27:38:03:c7:22:ae:be:5d:7f:bd:0a:70:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Nov 23 03:00:58 2024 GMT
Not After : Nov 24 03:00:58 2024 GMT
Subject: CN=17d36c22d4bbf1e007ecd1c8d9859f3a770e8128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:4c:cb:cf:91:f0:ce:bc:42:61:d6:c3:e7:
87:03:71:7f:df:3c:20:93:f6:e7:5c:79:ae:14:9b:
ae:d8:58:1f:7d:02:16:cf:f3:08:4e:c0:76:7d:e7:
ff:22:b8:8d:91:d5:86:31:bc:68:7b:e4:0f:dd:97:
44:8b:6c:03:33:51:b8:ab:f1:9d:55:20:88:b9:16:
15:0d:36:d2:4f:24:7e:a8:9f:f5:a1:8c:27:85:31:
9a:58:22:62:47:7e:e1:2b:13:b1:a0:f4:68:5f:7f:
75:ac:83:51:ee:9f:a0:3f:d6:37:73:a9:db:2e:57:
f1:0f:4a:56:8e:d6:1d:c5:60:43:1c:e9:9b:f8:50:
8a:8a:2d:b0:6a:ae:25:47:43:40:df:8b:a6:0c:15:
b4:f7:4d:df:d7:07:bd:63:e5:9b:5f:3e:cc:f2:1c:
6d:e5:af:51:f2:ab:b4:ee:26:db:36:12:db:69:e7:
99:13:2b:0b:1f:67:94:d4:0c:e2:70:a0:44:45:ca:
c2:9f:a6:47:ae:f7:65:65:8e:60:1f:0f:e9:53:14:
0a:53:c9:77:f2:93:6b:31:6c:7a:ec:ff:90:ec:bd:
8b:61:51:a8:77:e1:08:ea:46:7c:ae:a7:0c:1c:3b:
dd:fe:94:a4:4e:12:18:f4:84:d2:5b:e7:7e:f9:40:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:6C:22:D4:BB:F1:E0:07:EC:D1:C8:D9:85:9F:3A:77:0E:81:28
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:48:6f:ba:1a:a1:db:5d:91:b1:77:32:a1:cb:46:f9:04:
7f:dc:64:00:68:96:80:9f:b3:7f:b1:5a:87:c1:4d:23:d6:e3:
d6:fa:fb:f3:56:77:c0:d3:04:78:09:6c:44:db:d5:09:d4:35:
6b:83:39:b1:8c:81:06:e7:ac:3f:31:a0:f5:6b:8d:83:54:a1:
b0:68:23:d1:d1:1c:80:18:06:55:ea:5a:e7:6b:9e:83:58:c9:
30:25:45:20:1b:8b:9a:2e:c9:3a:55:a2:e8:e0:dd:b4:d8:7a:
dd:28:54:f2:86:69:bc:e2:0e:9e:5e:d6:f2:f3:da:85:fc:2f:
73:c5:b3:f6:d0:9c:2a:c3:1e:ac:55:b8:2f:b2:0c:53:8f:fe:
d3:df:b4:38:af:19:e5:dc:b6:fd:74:0c:b5:a0:fc:90:83:a1:
3c:49:58:42:df:5e:92:e1:78:e4:a8:8d:9e:d1:6c:2a:47:e7:
b9:d5:aa:47:77:3e:dc:05:61:0c:26:1d:1d:75:20:43:04:9c:
23:6b:df:9d:92:82:f0:bc:2b:a7:42:f4:63:df:b4:1d:8b:e5:
77:93:b6:8b:8e:1a:f6:7b:76:c7:11:9c:57:d4:e9:88:c6:c9:
6b:dd:78:43:85:65:72:07:4e:a2:fc:fb:d1:79:e5:47:cd:07:
bf:06:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:42 2024 by rpki-client on console-fra.rpki-client.org