Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: J79aLYksE5PTduy1lshfBD4tK+FzDS7bXK+rOqFP4WE=
Subject key identifier: 59:81:1C:B5:C7:79:B0:D2:5A:2F:E6:02:04:CD:7A:AB:42:F7:85:62
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 0193576501589DC0A395AC1F53AB3FDA30BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 05:00:57 +0000
Manifest this update: Sat 23 Nov 2024 05:00:57 +0000
Manifest next update: Sun 24 Nov 2024 05:00:57 +0000
Files and hashes: 1: DJuIpVNbhcOiYCYZXfPvmgzY6tY.roa (hash: r4dsVrnxjyCxUOypIBMXhXp+xtJ8jVDD+/zO29UDDpI=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: BgbaMIiUDRTMTx5T4MiFt4uGYG3ACWs6E/lk/2QS6m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:65:01:58:9d:c0:a3:95:ac:1f:53:ab:3f:da:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Nov 23 05:00:57 2024 GMT
Not After : Nov 24 05:00:57 2024 GMT
Subject: CN=59811cb5c779b0d25a2fe60204cd7aab42f78562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:93:bc:e0:a9:c3:8f:99:0d:c9:af:23:ff:
6c:ae:7f:8c:95:8b:c3:72:40:ef:11:59:eb:4c:8c:
c2:f4:62:8a:f6:27:83:29:0f:49:33:a7:44:11:bc:
0b:62:2f:5f:ff:00:59:72:d4:fa:a8:0f:f1:ea:e8:
3c:cd:5f:f1:18:d7:15:44:32:5a:b5:81:77:69:6c:
a4:c8:43:8e:05:6c:23:51:62:d2:99:7b:2f:81:ab:
2d:59:96:05:48:d7:32:1a:53:a0:0c:f4:82:ac:2a:
22:a4:36:97:36:3d:91:be:4a:64:cb:d1:1b:94:ed:
66:c0:ce:99:53:ce:31:69:bc:52:d8:48:03:73:25:
5e:29:87:fd:ec:cd:88:61:b9:4c:e0:4b:e4:ac:09:
5e:8c:f6:74:04:97:f3:c0:1e:c0:df:93:a2:c9:f7:
98:9f:39:08:87:58:74:96:80:74:f9:59:da:5f:f4:
15:09:58:c6:71:81:90:a6:5e:79:8b:e3:d7:a6:f0:
df:9a:4b:0b:7d:fb:60:23:ff:e9:98:8a:e9:fe:79:
c6:80:29:37:84:ca:e4:c7:a6:54:93:5d:51:8e:7e:
6a:c8:ee:1e:fd:77:95:30:e4:1e:cd:fa:50:47:13:
fb:5e:ff:cb:07:c9:58:57:1f:29:05:c9:47:1d:c7:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:1C:B5:C7:79:B0:D2:5A:2F:E6:02:04:CD:7A:AB:42:F7:85:62
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7d:a2:bd:f5:dc:12:5f:9d:f3:dc:11:7d:a6:1d:db:e5:0b:
f2:2d:76:a9:bc:89:61:4c:16:fd:b8:39:72:06:57:eb:22:da:
70:5e:3f:a7:02:d3:f1:99:0e:17:8d:c1:ec:2f:7c:9e:d3:f8:
d6:19:c0:c2:ae:5b:08:46:40:44:ef:e8:df:88:10:9b:5d:c6:
9f:78:a1:55:0a:74:24:75:f9:60:14:94:63:d7:2c:92:9e:00:
f2:e7:dd:1a:38:09:4d:2e:9c:83:e0:68:a5:47:95:d3:6d:e7:
c4:65:39:ce:f8:eb:0f:39:f3:52:0a:cc:57:0c:18:f9:d6:03:
fa:86:03:40:a5:64:09:33:b0:4b:b8:23:6c:36:89:de:08:20:
99:9a:4a:55:1b:b0:b5:74:f2:19:50:c5:41:a4:c6:42:17:26:
0f:6f:f9:7b:d3:f4:de:87:97:55:05:14:5b:1f:4e:2d:08:3d:
fd:05:8d:00:b2:a2:28:bd:9d:a3:44:1e:51:61:aa:e3:cf:03:
39:f1:c9:22:22:84:b3:38:a4:f5:38:8b:ad:0c:ba:4a:43:cd:
63:6d:14:cf:e5:99:72:f3:ef:22:7c:71:20:00:07:a2:e4:2d:
17:90:b5:17:1e:07:d9:63:ff:5a:d7:17:e0:da:58:c4:a1:73:
fb:f3:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:54 2024 by rpki-client on console-fra.rpki-client.org