Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: k8QMgeP3wi8z8vjkSE5x7DAOMVgy/BSM1NpcfCLYTSk=
Subject key identifier: 0D:0A:E2:6A:AF:B8:16:B9:91:81:8F:B4:C9:FF:44:E3:AC:D1:E1:8D
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01935387BE10D9C97348BE83A0E49E10F1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0825
Signing time: Fri 22 Nov 2024 11:00:25 +0000
Manifest this update: Fri 22 Nov 2024 11:00:25 +0000
Manifest next update: Sat 23 Nov 2024 11:00:25 +0000
Files and hashes: 1: LnpOD7dP6ExFBX4MRMD3rgpbQJI.roa (hash: q/d1+8A9HcNX8j10AfLZgr8+lPkkjyUYFOV5YuGPEGA=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: v2zfzGRY4rReTiyrUVtAx1HFi5kTGoxj09cQoR1pX8g=)
3: Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa (hash: 6H2eFA5BzmC/ibF7FU+PauwgI4ry1aTDqj7AUxxrPVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:87:be:10:d9:c9:73:48:be:83:a0:e4:9e:10:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Nov 22 11:00:25 2024 GMT
Not After : Nov 23 11:00:25 2024 GMT
Subject: CN=0d0ae26aafb816b991818fb4c9ff44e3acd1e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:b8:2b:ce:51:d8:cc:64:1e:84:46:52:e0:
aa:bf:01:cb:10:92:ac:69:ea:b5:37:e9:a0:5a:11:
8f:13:0e:00:48:84:43:f5:73:a7:8f:68:29:8c:c5:
af:2f:02:48:02:a1:33:c8:82:16:09:f5:5f:eb:73:
ed:85:8f:84:4c:57:c1:ea:20:99:bc:9d:94:e8:cb:
d0:cb:f0:8e:d8:58:0c:0b:37:26:95:4b:24:67:90:
ec:c3:00:4a:cf:8f:d9:62:71:50:63:9d:33:8f:2b:
06:6f:1c:d8:24:ac:07:82:d4:d6:3f:6e:f5:f7:56:
8f:05:e5:2a:bf:2c:99:73:e4:ae:7b:75:f8:8e:23:
26:b4:79:73:e6:91:88:30:cd:57:b9:3c:18:5e:d7:
6a:fe:92:c6:bf:92:c3:a3:13:eb:0a:c6:50:51:cf:
0d:c7:fd:3a:04:b2:73:02:e8:2f:7c:3d:ce:f8:44:
da:7b:7a:57:5f:d9:7e:95:04:5e:40:ba:3e:be:32:
8f:ba:8f:b8:cb:61:12:cd:fb:44:d0:d3:dc:7a:b7:
ea:00:fd:99:3f:d7:0d:5d:7a:03:83:7e:c4:55:e9:
1f:ac:8f:48:a4:a5:fa:7e:b3:2d:20:01:27:dd:3c:
a7:4e:02:6d:1f:7c:84:95:3c:aa:12:48:32:26:9b:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:E2:6A:AF:B8:16:B9:91:81:8F:B4:C9:FF:44:E3:AC:D1:E1:8D
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5c:00:cd:44:78:7e:fa:40:d5:48:39:3e:70:4b:03:c5:a0:
53:52:32:3c:d6:5c:62:82:93:54:04:c8:db:c1:0d:5c:d6:d5:
77:89:1b:a1:5b:46:5b:84:7b:5f:fd:82:25:42:22:ba:21:7a:
37:1c:65:dc:8b:54:dc:a0:cc:c5:a1:68:3f:87:6c:33:0b:0b:
61:db:ab:8d:87:ca:23:c8:01:91:1a:37:ac:c0:43:4c:83:87:
42:0c:63:db:76:c3:c0:bb:6d:d7:6c:3a:54:27:c2:a9:66:30:
49:71:3c:71:a6:b1:5c:64:d1:68:3f:bb:4b:8a:15:a9:72:02:
ff:b4:41:92:62:a4:ff:2c:1b:2e:14:ab:15:40:85:f5:ce:b8:
76:79:c9:af:95:c4:3e:6a:07:f0:5d:df:19:38:cb:16:82:e3:
cd:17:36:24:67:68:1b:6b:6e:71:88:c8:6f:e7:a9:e9:b7:cb:
0a:39:78:cb:97:32:4c:7c:3c:10:44:d9:f7:c3:da:8a:7f:1e:
c7:fe:09:6a:5b:35:60:91:12:e6:16:3c:08:e0:1e:3a:bb:42:
0e:76:1c:28:ff:e5:1b:3b:f9:73:11:74:bc:d2:6e:f9:6e:fb:
17:9c:e1:22:b0:81:ec:4d:35:26:af:08:a4:d5:c8:cf:cb:d8:
b3:89:23:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:31 2024 by rpki-client on console-ams.rpki-client.org