Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: 6oI/LGMx4RTUT0zOCqWyhm7EWS9Qb+ebYT7CYLjocsE=
Subject key identifier: F7:CA:6C:D0:64:7D:8F:7C:13:D3:FB:09:65:8B:D8:F6:7E:B4:1B:41
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 018F87B6140ADA663605143ACA3F29CA309A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 0CE1
Signing time: Fri 17 May 2024 18:00:07 +0000
Manifest this update: Fri 17 May 2024 18:00:07 +0000
Manifest next update: Sat 18 May 2024 18:00:07 +0000
Files and hashes: 1: IAxenfahMAyj5xjgK8KeHbQgwE4.roa (hash: BIyfMKlAliVG2eyHSOPgAATQLZJ0WCxb/Bm5bLBwKqI=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: XnI2jmukjnPxQcP2OxBbVtnu2rqn8ORXL+Cz2iepsYo=)
3: v5dfbCMLPoIr477WnPpiP7IdPYw.roa (hash: odomW2grL1u1kuLiSrEruLCBSimF3DIcFui0MDvVY1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:14:0a:da:66:36:05:14:3a:ca:3f:29:ca:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: May 17 18:00:07 2024 GMT
Not After : May 18 18:00:07 2024 GMT
Subject: CN=f7ca6cd0647d8f7c13d3fb09658bd8f67eb41b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:33:94:14:94:4a:62:c6:8d:7f:00:2f:8b:
0f:9d:3b:87:8c:05:92:c3:6b:60:d0:b6:ee:c7:db:
d3:12:87:6f:6a:5f:19:97:97:4b:4e:92:10:88:9c:
08:51:b3:e9:42:d4:68:8c:cb:62:e8:9c:12:db:31:
90:b9:31:17:82:c6:16:65:ec:4f:88:37:f0:8d:6c:
77:7f:05:3e:c0:fd:14:f5:a6:7c:ec:de:83:2f:8d:
0c:e3:04:21:a3:88:43:49:d8:f4:25:26:a1:dd:11:
f6:c6:aa:f4:ba:71:14:63:cd:fb:a6:2e:c7:c0:2c:
09:a5:a7:6c:7e:b4:f1:db:ab:f8:20:e1:76:c5:3b:
15:9b:7f:5f:d4:ed:23:57:78:0d:9a:e5:3d:88:c1:
0c:1b:31:b2:24:5f:0a:0a:52:c2:f3:b5:c6:9e:97:
0c:c5:48:14:bc:b6:8f:9f:1b:b2:73:2f:21:83:ac:
86:9b:fe:d9:b2:51:98:dd:ca:a4:b2:7d:e4:34:ee:
7e:c8:05:c9:00:fd:a8:1a:af:45:9f:07:9a:2f:87:
cc:3c:3b:48:cb:b9:6d:8d:4e:6c:83:f9:0e:83:7a:
a3:27:59:d7:80:28:53:bf:52:73:65:cf:58:fe:24:
a5:04:1f:37:1e:0d:88:2b:6c:af:57:08:87:d9:7d:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:6C:D0:64:7D:8F:7C:13:D3:FB:09:65:8B:D8:F6:7E:B4:1B:41
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5c:e6:af:7b:24:78:d6:93:ed:dd:3c:d9:d5:a7:e2:5a:40:
76:5f:5b:97:51:30:ea:b8:ec:ab:73:c0:4d:25:c6:b7:35:62:
80:03:1e:70:5a:48:76:8b:18:d2:b6:0d:96:c4:7e:cb:9b:45:
95:22:25:66:56:dd:7a:93:66:ba:e2:f8:01:05:9c:9c:98:3d:
1e:9b:b7:d6:1b:63:0f:ba:fb:cd:62:af:49:1d:41:8d:b8:70:
eb:55:ba:03:e3:90:b7:8e:3d:c3:91:d9:f6:95:4b:70:14:c2:
80:49:57:a6:f8:42:20:b9:e0:36:81:22:b1:7b:43:02:11:1b:
24:2f:2a:a2:e8:7c:74:5c:74:71:68:29:ca:59:48:81:1c:bb:
8b:f5:ef:58:e7:30:d5:93:ba:73:44:74:90:2b:71:75:c9:c5:
eb:49:d1:7d:5c:fb:1b:0f:0f:2b:cc:ff:25:1a:3f:13:47:a4:
c3:07:27:d6:b8:e7:5c:de:a1:f7:9b:5b:40:69:a9:de:a1:63:
77:50:3b:27:40:b3:5b:4e:6f:fd:51:c7:fa:60:2f:c2:df:d0:
ed:43:fc:2c:57:ea:e9:4b:99:de:9c:ac:59:d0:3f:ea:fc:b3:
66:d3:1e:9c:5c:c5:7a:85:90:4d:6c:60:25:fe:66:d2:22:4d:
3d:de:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:50 2024 by rpki-client on console-fra.rpki-client.org