Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: BY1BVXQpIGeZ55Wcuxteg/BJkIHZAO58xVrhSflucT4=
Subject key identifier: 2D:51:03:C3:44:80:ED:21:F4:D7:9F:AC:03:25:42:97:41:B5:01:55
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019352072D0D78F85C9F32A32B4206ED3A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0B50
Signing time: Fri 22 Nov 2024 04:00:22 +0000
Manifest this update: Fri 22 Nov 2024 04:00:22 +0000
Manifest next update: Sat 23 Nov 2024 04:00:22 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: ESslFSo1jGvZd4JatHyYWLID4gBwwcuUcZYuZL8CnHQ=)
2: MOo_Xp_bK2aAdK5Wek5UjElrTFY.roa (hash: MXVe85r5JFdnbCFKavZD1XEy/Qlf9T5E2nxBfYuGKlI=)
3: zD6mW9ybAuJJLOo1VDLuqLqqZ2I.roa (hash: jsrTajcYiWS9v+IrS0azpIUIvvi2tyyM3RZH9wopo14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:2d:0d:78:f8:5c:9f:32:a3:2b:42:06:ed:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Nov 22 04:00:22 2024 GMT
Not After : Nov 23 04:00:22 2024 GMT
Subject: CN=2d5103c34480ed21f4d79fac0325429741b50155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:a9:11:59:f1:2e:9b:40:4e:43:89:14:55:
52:2d:39:95:07:14:bc:2a:85:47:ce:ff:8c:b2:74:
f2:bc:e8:59:e3:d4:42:23:e0:29:72:cb:9b:5a:dd:
76:31:a0:5d:04:41:ac:e4:54:43:71:b5:da:14:fb:
2a:c3:86:4c:8e:5c:6a:29:44:c1:57:79:5f:5d:de:
f7:fb:a0:c2:91:c4:47:d8:72:fe:b1:ed:04:30:ab:
6c:0f:f3:95:cc:08:e1:01:58:7e:fb:bf:cd:74:48:
83:4b:23:79:77:10:a8:85:b7:db:17:dd:2e:70:2b:
38:0c:38:9c:13:b3:cb:c4:6f:1f:26:5d:5e:3e:eb:
53:e5:2b:58:18:fa:b9:fd:56:be:1e:a2:ca:88:46:
20:b9:c5:c1:e2:f2:fc:22:ab:d1:85:3d:d8:72:a7:
1a:1c:a4:d1:db:3f:37:50:30:ca:90:34:35:75:f6:
3f:58:7d:ff:36:f6:4b:7a:db:93:ea:43:4d:5d:62:
24:e5:ed:6d:36:fe:9b:da:70:a8:09:28:58:94:ab:
c2:f0:0c:d6:75:f3:f0:bd:11:34:0c:81:5a:84:5e:
ea:67:74:91:04:1a:18:6e:47:3f:2b:4c:d1:fb:76:
a2:7c:94:67:66:21:14:32:5c:ea:de:cd:ff:a8:76:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:03:C3:44:80:ED:21:F4:D7:9F:AC:03:25:42:97:41:B5:01:55
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bd:36:0f:8d:43:31:0b:75:e8:1a:15:76:44:e6:02:39:9b:
1d:0b:76:17:c4:a8:ce:12:56:18:5a:30:39:bf:f0:37:0f:d5:
b9:57:44:d9:e1:c4:7b:ee:8d:09:a6:04:71:cf:00:9d:03:9e:
be:31:fc:61:b3:7e:a1:70:4e:5e:ea:e9:60:d2:59:eb:9b:25:
0f:40:c6:96:a9:5b:92:1d:20:ca:48:e2:6a:a3:24:3f:60:d2:
91:33:7b:ed:c8:eb:04:fa:d3:0e:ec:50:e0:9d:9e:0a:d8:b4:
7a:34:30:a0:ea:d1:15:6d:41:84:5b:d1:3f:de:04:9d:76:eb:
76:fe:67:95:d8:f0:6f:d9:3a:23:c7:d6:80:5d:66:1c:43:07:
4b:da:8a:78:a4:8a:7c:99:19:bd:2a:87:ff:66:83:26:81:14:
55:6a:48:a3:5c:ec:97:87:b7:17:4d:95:93:1a:9f:af:7d:e5:
a1:7c:e2:2a:a7:da:30:ad:e4:3e:f8:f6:47:e0:56:6c:3e:db:
e9:1c:aa:ad:6a:24:11:a3:b4:1e:ce:64:9b:06:70:5d:96:d7:
84:8f:eb:e6:c9:52:72:61:b1:0a:ce:f3:b3:19:3c:ad:f1:1d:
ab:cd:37:ef:7a:5d:d3:ea:bf:d1:46:04:c6:9d:cc:80:31:da:
d3:a6:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:22 2024 by rpki-client on console-ams.rpki-client.org