Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
File: tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft (raw, json)
Hash identifier: +HC0D9PF5qnnAQ3FvatQ5ChD9hnfYq48KWLHp00SpJM=
Subject key identifier: 71:05:02:1D:CC:18:ED:3C:06:88:A9:7A:32:00:E4:EE:68:15:03:85
Authority key identifier: B7:39:73:BC:4F:57:CF:EF:ED:E1:EC:96:16:0B:CE:6C:EA:42:B1:79
Certificate issuer: /CN=b73973bc4f57cfefede1ec96160bce6cea42b179
Certificate serial: 019359C0CAF72D269611A9B02A852175084E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzlzvE9Xz-_t4eyWFgvObOpCsXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 16:00:27 +0000
Manifest this update: Sat 23 Nov 2024 16:00:27 +0000
Manifest next update: Sun 24 Nov 2024 16:00:27 +0000
Files and hashes: 1: CrHdYOOAtBBYNy65kLRlVfwRRJ0.roa (hash: KHuntttauyezNK7JBSSyU/0IyOPcGTzztNHsuxXu2mY=)
2: tzlzvE9Xz-_t4eyWFgvObOpCsXk.crl (hash: z2mm0KeusJHAVo5KzMQIcl7hLhAg+HMFBNgPm1mXBaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzlzvE9Xz-_t4eyWFgvObOpCsXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:ca:f7:2d:26:96:11:a9:b0:2a:85:21:75:08:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73973bc4f57cfefede1ec96160bce6cea42b179
Validity
Not Before: Nov 23 16:00:27 2024 GMT
Not After : Nov 24 16:00:27 2024 GMT
Subject: CN=7105021dcc18ed3c0688a97a3200e4ee68150385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:53:49:d3:55:c0:47:eb:d5:10:9d:e7:57:
ec:4c:37:d7:00:e8:da:a5:d5:c3:dd:8d:1c:9a:9b:
9e:88:37:f9:aa:6a:94:1e:4d:c2:8d:21:be:c3:f9:
87:71:41:22:c3:b4:2f:6b:b2:05:3f:e3:b8:2e:01:
18:17:3e:95:3a:f7:59:b7:70:eb:d6:f5:a3:f8:ef:
3c:44:8a:c1:d4:bb:15:37:18:0d:c3:d4:77:b2:9c:
89:2c:58:9e:a6:50:da:75:d8:70:ee:8a:2d:d0:60:
8b:ab:92:6a:37:dd:08:8e:72:7f:74:a8:03:06:af:
0e:31:a6:a8:91:08:50:53:a0:a5:eb:c3:2a:80:f9:
3d:b4:2c:55:ff:11:ec:b4:f7:ea:d8:50:cb:69:46:
bd:80:90:29:f2:94:c1:4a:94:79:fb:92:ed:d4:88:
56:c1:e3:cb:25:4a:9c:2f:87:e0:8b:e7:f2:9c:d4:
f2:a2:57:87:89:df:3e:fd:61:63:3a:89:e7:31:ee:
6d:0c:90:db:99:b0:9a:2c:68:3d:82:8a:dc:33:ff:
67:34:c9:6d:0c:12:3d:e2:72:21:0f:2d:76:81:65:
cd:66:75:9f:a2:64:01:a9:ab:f5:98:fb:fe:85:a9:
b8:79:7c:ff:93:68:61:64:3c:a7:f6:07:12:34:ac:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:02:1D:CC:18:ED:3C:06:88:A9:7A:32:00:E4:EE:68:15:03:85
X509v3 Authority Key Identifier:
keyid:B7:39:73:BC:4F:57:CF:EF:ED:E1:EC:96:16:0B:CE:6C:EA:42:B1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzlzvE9Xz-_t4eyWFgvObOpCsXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:a3:27:d7:ee:15:4a:7f:2d:89:22:16:94:38:33:34:00:
92:5b:6a:79:e6:9a:34:d1:44:ef:f3:1e:46:63:b6:b7:ed:b6:
8d:34:50:60:04:c4:ee:cd:39:6e:9c:16:11:11:cd:a8:8d:57:
72:3d:f1:6f:b8:67:5a:dd:2c:f6:e6:2b:56:e3:d1:b9:c8:53:
36:89:f6:73:66:65:a7:af:d9:16:7e:15:22:e7:26:32:ff:40:
a3:ef:e7:ae:ba:c7:3a:2e:31:df:87:10:4f:a2:a1:d9:47:2c:
27:ee:8f:06:b8:54:40:58:6b:2e:08:a5:3a:dd:17:48:46:e3:
54:a6:61:2d:ae:30:a8:de:b2:48:26:79:a2:79:74:b9:9e:8e:
32:55:c6:25:de:6c:4a:69:41:aa:56:56:53:7a:ed:d5:56:97:
be:fa:b1:47:83:dd:c8:d7:12:d8:dc:fd:7f:e9:96:7b:3e:09:
6d:36:da:d9:f1:fe:3e:60:3f:35:ce:06:12:60:77:e2:83:dc:
93:d2:40:63:fa:f9:76:35:9c:79:34:91:41:96:f1:6a:4b:63:
6f:1c:b4:be:a2:ec:e8:5e:72:ad:02:b8:ea:a7:7a:7b:83:51:
31:45:b6:3d:85:b6:fb:d2:cd:bc:54:18:d1:e0:1f:2d:42:2c:
ae:b6:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:03 2024 by rpki-client on console-ams.rpki-client.org