Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: OC6rnEyhejJpvLB4r1RyZAZT3Zy/6665pjX6PCLgcsY=
Subject key identifier: EC:B3:F6:65:4D:51:7B:63:BC:95:E4:EE:C4:02:9F:F0:09:41:89:0D
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0193549AA304457B18F7E7786B082E23B69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 12AF
Signing time: Fri 22 Nov 2024 16:00:40 +0000
Manifest this update: Fri 22 Nov 2024 16:00:40 +0000
Manifest next update: Sat 23 Nov 2024 16:00:40 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: Q/SErC6BCPR8+OSkJ4SyCNfMBHL3az/ymdN1P46XJWE=)
2: d9j1EMOBh9SOoAk-ogDtxStSdGU.roa (hash: 2g4QmgtO0VYsEUKUN5vAFlt52kJOeZ0EoQz0xecJOnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:a3:04:45:7b:18:f7:e7:78:6b:08:2e:23:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Nov 22 16:00:40 2024 GMT
Not After : Nov 23 16:00:40 2024 GMT
Subject: CN=ecb3f6654d517b63bc95e4eec4029ff00941890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b0:52:87:63:c4:7e:5f:84:45:c5:94:6a:78:
70:a2:22:06:3d:02:c9:4c:42:cb:44:33:0a:06:37:
e1:2a:4f:f9:8e:5b:9b:bb:35:b3:2e:1e:76:97:aa:
17:3f:24:08:2c:c7:97:dc:a4:09:b6:56:48:3f:5c:
e8:85:aa:8d:4c:ad:f7:c4:da:d4:97:84:b5:73:fb:
58:68:4e:09:60:96:57:31:4c:24:75:f1:5b:99:32:
91:d2:e8:90:5a:59:e3:d4:2f:4c:35:53:aa:89:43:
f3:b3:e4:65:b0:35:f8:ff:b4:e0:db:47:ce:27:3c:
2a:a5:4c:7a:1c:a9:6c:8d:c6:76:66:7d:aa:a6:2c:
c6:be:c0:6d:7e:eb:6f:b3:d6:1d:d0:38:88:05:e8:
dd:70:b5:8b:1e:6a:32:bf:bb:3a:96:0c:3d:f6:f1:
76:fa:c8:80:9b:41:64:cf:38:1d:5c:81:ac:b6:e8:
99:8b:f3:4b:7b:92:d5:78:77:28:c2:68:6e:64:69:
ff:45:9d:9c:c4:22:62:00:9a:e8:90:7b:91:91:d3:
b0:9f:14:e7:d8:c8:a4:c2:bf:a3:74:f4:9b:cd:bc:
0a:ea:1d:58:86:f4:c1:d0:f7:5f:a7:e0:a7:60:39:
b6:af:5a:87:df:28:f3:32:3e:a6:1b:eb:bb:09:96:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:F6:65:4D:51:7B:63:BC:95:E4:EE:C4:02:9F:F0:09:41:89:0D
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:ce:1f:35:e9:ad:3f:3a:cb:dd:e9:21:76:99:9f:7d:c2:
19:c6:59:cc:75:c1:bd:fa:1d:02:6d:01:2a:c0:0c:50:62:87:
fa:db:58:22:ec:2c:e1:4d:b6:6e:34:76:2f:03:84:21:b7:b1:
0d:45:95:60:4d:09:92:88:98:a1:87:7a:6c:cf:0b:9b:ef:85:
d5:8e:0f:99:91:40:c6:74:f4:05:9a:8d:81:d5:11:a1:24:d2:
a5:ad:5a:db:ac:45:c2:69:5a:d8:ee:74:ea:f1:d0:3e:56:d9:
e7:18:24:cc:0e:64:ae:7f:03:e1:49:57:4d:f3:0c:8f:38:c6:
ff:4a:2c:a0:c1:23:b6:0a:2a:2b:6f:e1:0e:ee:69:a1:a4:ba:
6b:cf:1c:f3:f6:5e:d8:24:af:c7:7b:e4:b2:3e:f4:2f:47:68:
5c:8e:78:03:8c:34:d0:ff:33:b1:f0:fb:c7:d4:e1:a6:8c:1d:
d3:9a:2e:75:c5:c7:ef:de:ab:f9:f9:29:e7:b0:e0:51:2c:0c:
68:70:97:41:49:de:38:bf:ca:b7:ce:91:89:71:a9:c2:b2:da:
ee:77:7b:e3:6d:8a:99:95:54:7a:63:9c:e0:d0:5f:d8:89:fb:
f3:27:f0:79:35:03:73:29:f6:f9:6f:4d:26:67:c0:67:bb:9c:
cb:15:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:19 2024 by rpki-client on console-fra.rpki-client.org