Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: IahI9lI3qO1Fvyc3cEJUPxquPLdG5xY6zgGFQwbPWgY=
Subject key identifier: 16:45:FD:1D:2F:33:BF:85:08:6F:23:69:8A:76:75:14:4D:2A:AE:94
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019356F6DDCB2491A5A70ADF4514DDD97EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 0EDA
Signing time: Sat 23 Nov 2024 03:00:39 +0000
Manifest this update: Sat 23 Nov 2024 03:00:39 +0000
Manifest next update: Sun 24 Nov 2024 03:00:39 +0000
Files and hashes: 1: IAxenfahMAyj5xjgK8KeHbQgwE4.roa (hash: BIyfMKlAliVG2eyHSOPgAATQLZJ0WCxb/Bm5bLBwKqI=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: 3dzKDOc7iICJlRCEYT6Z1NteCW7UuT+BpTz6o12BZEs=)
3: v5dfbCMLPoIr477WnPpiP7IdPYw.roa (hash: odomW2grL1u1kuLiSrEruLCBSimF3DIcFui0MDvVY1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:dd:cb:24:91:a5:a7:0a:df:45:14:dd:d9:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Nov 23 03:00:39 2024 GMT
Not After : Nov 24 03:00:39 2024 GMT
Subject: CN=1645fd1d2f33bf85086f23698a7675144d2aae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:11:f1:45:74:7b:77:99:4f:54:55:e0:cd:
ef:02:1c:ef:fa:df:15:7e:32:81:76:0a:c9:85:a7:
12:0c:db:0b:80:a4:f0:22:4c:b9:63:95:73:00:2a:
b0:3a:49:26:f4:14:12:1e:4f:ef:4e:43:af:48:ab:
47:24:b7:b0:88:8c:d3:ea:3f:b4:93:18:81:5b:12:
1f:9b:5d:74:21:ec:89:de:8f:ca:28:d4:a8:44:a8:
27:09:a2:6e:f0:27:3b:b6:c7:e8:70:dc:68:2c:84:
87:a3:0f:74:35:85:f3:f4:70:fb:28:0b:06:c3:0b:
78:42:dc:0c:1a:17:c1:a7:78:21:89:f6:fc:b2:8f:
77:f9:c6:5d:89:c6:cc:b7:a9:66:3a:74:cf:7b:3c:
6b:9c:ab:ec:9e:00:be:d8:f1:73:7a:1f:77:d0:18:
d6:a1:8f:11:d9:fd:2e:52:25:7f:e6:2e:0f:4c:07:
27:1b:a3:26:34:a1:a5:bd:d2:54:7a:1c:9c:1c:e4:
93:81:a6:80:87:4b:7b:1c:21:7e:24:4c:1c:e6:89:
c0:d2:d2:73:9d:cd:a5:62:63:9c:52:f8:e5:9e:da:
35:77:1b:f0:2e:3c:71:68:9c:2e:1d:f1:46:c6:02:
55:fc:f1:38:aa:6f:75:61:62:b5:dc:d4:f9:7c:6d:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:FD:1D:2F:33:BF:85:08:6F:23:69:8A:76:75:14:4D:2A:AE:94
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:0d:d4:34:b3:8e:b2:2f:a5:e5:3e:d4:f0:4d:2b:d1:e4:
b2:69:65:d6:d4:9f:39:27:ab:35:38:c6:31:e6:d8:c8:dc:8a:
04:60:c7:fa:14:60:c4:ce:a3:af:42:aa:2a:d1:fd:16:8f:e6:
3e:bc:1e:c5:c3:05:be:6a:3b:f2:ff:44:50:f8:38:88:86:e5:
f8:bf:08:71:28:f9:ef:2b:b8:ed:1f:7c:23:c9:53:df:b3:e0:
c2:ae:d3:2f:79:b9:a9:80:e4:41:c3:45:1d:5c:78:fc:ea:b8:
b5:00:b0:72:79:51:61:06:dc:61:3c:3d:93:5e:95:ac:18:f7:
46:dc:a0:f1:af:ef:1b:e0:9f:ca:46:f5:ca:fb:7c:f1:6a:20:
20:6f:a5:62:90:08:5f:19:a5:eb:c3:f0:e5:d0:73:e0:9d:b8:
39:d8:ad:5d:5d:75:69:b7:ed:ca:72:f5:eb:62:1a:93:81:5c:
f9:41:44:3a:3e:bb:f7:e7:63:5d:35:1b:3f:fe:85:5f:bc:27:
9f:02:11:20:e9:c8:e4:78:e8:14:11:41:c1:27:aa:f3:90:33:
9b:82:99:df:39:dc:93:52:ee:fb:7f:ec:9d:cb:55:73:58:b6:
22:6f:41:db:63:10:13:db:5e:18:81:36:61:7b:11:5c:1a:f5:
5c:42:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:53 2024 by rpki-client on console-fra.rpki-client.org