Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: bmcj6mtqkJMKiHKFJg5hEROoYror9oCZ6aayj5OTFXY=
Subject key identifier: F4:5F:20:B9:92:C6:FC:00:1F:C7:27:69:DE:48:08:43:32:AF:3B:AB
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 0193549A9A63EFCE080CCA96B1D6771B9096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 16:00:38 +0000
Manifest this update: Fri 22 Nov 2024 16:00:38 +0000
Manifest next update: Sat 23 Nov 2024 16:00:38 +0000
Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: MJQuaIFMM3FjZzoALwMESZargegLrH+RJ051jtpBUxk=)
2: qUeoYdI6AaL4v5MsCzmcm-JoMyA.roa (hash: AmJwUmjPuHvvzGHOtbbgPGlWlwLQWN4Jwe8J7cprc8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:9a:63:ef:ce:08:0c:ca:96:b1:d6:77:1b:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Nov 22 16:00:38 2024 GMT
Not After : Nov 23 16:00:38 2024 GMT
Subject: CN=f45f20b992c6fc001fc72769de48084332af3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:83:fe:d2:bb:ce:a5:23:a4:bc:5a:e9:75:
78:f6:9a:51:c9:e5:d6:cd:83:03:ab:85:59:f8:62:
49:6a:89:56:5c:b2:60:93:2f:e0:16:19:47:82:6b:
c2:d7:a1:0a:e2:38:21:43:dc:06:42:25:64:f4:55:
bd:52:f5:e2:47:36:81:e4:d0:58:a2:05:40:d9:ff:
a3:5c:3c:a1:5e:e3:66:97:3c:80:b1:c7:66:49:22:
f0:0d:ed:4e:fc:b0:9c:7d:13:bb:27:b8:ed:2e:7d:
0a:f3:55:8f:6c:16:89:e9:64:7d:b3:5f:2f:2a:76:
1e:54:41:56:92:6b:59:fc:83:6c:01:26:98:fd:6f:
f1:df:61:34:34:9d:43:87:8c:9b:40:6b:af:14:ef:
cd:a1:d0:40:b2:22:ca:74:3e:1a:36:c3:39:71:50:
ef:9c:9c:4a:c4:1f:94:1f:30:d9:24:3c:2f:94:b6:
f9:b7:26:c7:4c:9b:75:17:fa:6c:8e:86:b3:3f:77:
0d:fa:60:e7:4b:30:82:5c:2b:1d:d6:a8:6f:36:e2:
31:69:45:8e:1f:96:81:76:55:85:03:fa:ef:33:13:
a8:f9:d8:18:a9:80:82:62:13:fa:85:4f:54:d9:c1:
8a:a6:0b:ed:81:c9:6d:86:ee:5f:15:a8:65:56:2e:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:20:B9:92:C6:FC:00:1F:C7:27:69:DE:48:08:43:32:AF:3B:AB
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:59:ce:97:cb:c6:dd:56:23:fd:ab:87:40:aa:cf:dd:33:
db:9e:43:1c:c7:90:c9:94:5b:05:19:49:fc:11:d7:42:af:81:
f6:19:a9:a9:b3:21:c8:5d:94:66:fe:0c:c3:65:db:4b:3a:59:
a0:35:99:47:5e:55:2a:d1:83:10:30:85:e1:9e:bb:f9:d4:c8:
1e:40:a2:16:3d:15:ef:0f:5e:52:9d:fa:7b:90:78:66:19:2a:
80:2b:1b:28:55:c5:39:f5:85:7f:b1:64:61:6f:d2:e6:1d:d3:
80:c6:07:76:fb:16:71:56:a6:da:f2:7e:4f:9b:ad:b4:88:77:
bd:07:39:90:ac:b9:b3:74:11:1f:8b:a3:31:15:ab:ba:d0:2c:
40:61:44:f4:78:a5:83:4f:c9:fc:a7:82:db:83:7d:3d:b2:c8:
60:c4:5e:ae:4f:8c:e7:62:e2:a5:29:3b:8b:b6:99:f2:5b:39:
07:4c:fa:5c:15:78:d1:cd:53:1b:8e:0e:44:fe:b8:1f:1e:ac:
88:f6:51:51:08:0c:59:f5:15:47:32:52:8f:7e:31:01:f0:47:
34:02:04:11:c4:6b:3a:83:f9:f7:80:02:78:ec:41:5a:b5:1b:
da:33:39:3e:12:ff:d2:c9:a9:34:f4:6b:72:67:3a:94:3d:b9:
63:e8:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:19 2024 by rpki-client on console-fra.rpki-client.org