Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: c9a2QcJ2nkV0tTtJAa1H6h2gt6MmcYN2b2uybvXAeaQ=
Subject key identifier: 28:07:F9:3D:8C:7B:4A:24:7E:C3:F0:AA:AC:01:AF:C5:92:7F:19:60
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 018F874B183D880E1F9E848F6B5D18169BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:03:16 +0000
Manifest this update: Fri 17 May 2024 16:03:16 +0000
Manifest next update: Sat 18 May 2024 16:03:16 +0000
Files and hashes: 1: BRrVkQDAHqSsV33Q-TZyhLkAGQw.roa (hash: krkQ6wfsbveFzQzORMNdcVAQz8A1BXZOKr6M02yGyHE=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: EKJxVTRldWpsGFed9VJZsNFvmYlnEaGVRTbDSC7mPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4b:18:3d:88:0e:1f:9e:84:8f:6b:5d:18:16:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: May 17 16:03:16 2024 GMT
Not After : May 18 16:03:16 2024 GMT
Subject: CN=2807f93d8c7b4a247ec3f0aaac01afc5927f1960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:f1:43:2b:3a:be:f0:cd:de:f3:2b:43:56:
7d:d5:57:dd:4a:ab:55:a9:c7:61:e9:66:8b:ac:9e:
f8:c0:49:fa:7d:e1:6f:c1:ed:c8:53:32:69:d8:4b:
96:de:e3:9c:07:cc:ef:44:01:4f:58:db:a7:2b:6f:
fb:0a:d2:1a:24:f8:88:64:cd:a4:24:03:94:dd:ec:
5a:b8:8b:fe:69:c7:8d:4d:cd:64:b8:34:42:f9:2e:
2c:7c:d7:19:b8:b3:60:70:e0:13:49:85:3b:2b:2a:
3e:27:e6:80:fb:bc:3b:71:52:b6:64:06:15:32:e9:
be:84:44:c9:2d:ec:ca:17:29:38:5c:d9:3a:7e:59:
ed:db:0e:7f:a2:3e:74:f9:60:6f:c3:7e:55:3e:a9:
d5:76:03:05:3a:1b:e5:7b:50:8e:55:47:cf:7d:47:
8e:0e:ac:ee:3e:a3:2a:c4:03:13:8a:16:2f:d5:d9:
e6:96:98:13:0a:ab:ca:85:18:6c:f5:33:c8:10:23:
ad:7f:d6:e1:5d:1c:39:1d:e9:a7:d6:0d:88:52:4c:
1f:00:86:f7:31:95:7c:6a:20:1f:09:dc:dc:de:fb:
d6:03:fe:22:26:83:22:4d:fc:bc:80:8a:07:71:3d:
15:5e:2a:a4:c0:97:d1:03:bc:bd:ea:08:96:79:8a:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:F9:3D:8C:7B:4A:24:7E:C3:F0:AA:AC:01:AF:C5:92:7F:19:60
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:65:2b:12:ad:21:da:8f:3b:1f:bc:92:a4:4f:2b:86:8a:
cd:3c:26:e9:68:01:3b:6e:44:79:bf:53:a7:27:30:2e:b5:28:
c0:6d:45:4d:0e:13:a3:ff:ac:d3:20:19:b4:fd:98:7c:6c:0b:
04:ea:05:ab:75:b2:65:5a:7b:e7:63:c5:bb:cc:6d:3e:7f:9b:
80:a6:c5:a1:b8:03:a5:fa:46:63:72:a7:0a:e3:52:9d:08:5f:
93:68:98:1a:bf:c9:3f:00:83:83:35:5b:6c:6a:ff:cb:09:16:
78:0b:a1:d9:f0:8a:ca:28:15:d9:37:46:e8:d5:c7:a3:8d:3c:
65:68:e1:86:f9:96:ea:07:de:5d:4c:81:58:c6:6a:58:c7:e2:
7f:e3:c1:29:32:10:79:30:df:d3:39:4b:c4:17:7c:7a:b2:03:
2d:c3:3a:de:cb:6b:46:f8:33:0b:be:ab:63:eb:b6:27:14:42:
01:09:dd:ad:1e:d9:74:25:c6:a7:4d:20:cd:26:fe:62:a3:6c:
4b:d9:76:9d:9e:10:12:e4:a4:59:4b:f0:09:0e:c6:65:c2:e7:
be:20:37:97:ab:15:ed:85:04:fc:47:62:97:37:fc:3f:b4:0a:
3a:a0:85:db:7c:1b:6c:95:fe:9f:9e:76:0e:04:dc:9b:57:55:
20:36:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:25 2024 by rpki-client on console-fra.rpki-client.org