Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: S7PZ1CC8msAhVV8byPHWRjOZD/GVbOqP8/VfFmpiyoA=
Subject key identifier: 1E:62:1B:10:FF:75:4E:3C:9F:23:92:31:18:96:5C:DA:EF:67:F3:44
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 018F86A3D5CE328DCF024042EB9D459A4D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 0EA2
Signing time: Fri 17 May 2024 13:00:34 +0000
Manifest this update: Fri 17 May 2024 13:00:34 +0000
Manifest next update: Sat 18 May 2024 13:00:34 +0000
Files and hashes: 1: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: zXt4k/blsEcOh1G7QNgQvBHfVgKDgxUB5lCXRhIa+Eo=)
2: YL20aOKzaTiO9LQL8EVkVl92eks.roa (hash: NPfxgdhjAqdlI1693nDnSDqpv2Vv4skJCytG9xlAUbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:d5:ce:32:8d:cf:02:40:42:eb:9d:45:9a:4d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: May 17 13:00:34 2024 GMT
Not After : May 18 13:00:34 2024 GMT
Subject: CN=1e621b10ff754e3c9f23923118965cdaef67f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:6b:81:6d:09:46:08:48:88:e7:61:88:a5:
6a:64:e4:ae:ec:9b:15:94:05:89:bc:46:dc:ce:55:
af:3d:50:5f:dc:dd:a9:a1:a1:5d:05:d6:0e:59:c0:
47:2c:f7:14:fe:9c:aa:20:50:a8:7a:8c:36:c6:ba:
50:16:ec:4d:d8:43:0a:2f:be:31:8d:cb:03:cc:a7:
82:23:80:e6:8b:8f:16:e8:ad:e2:c6:6b:1b:41:aa:
f0:52:8b:d1:84:04:1b:71:ef:7d:26:57:d8:5d:1e:
ce:c3:ea:9a:3d:b5:9b:00:3c:ca:86:60:7d:0b:c5:
84:64:12:27:3f:e1:16:e9:d9:30:ef:1e:5e:99:9e:
9e:90:06:05:13:f8:57:17:2a:1b:a7:03:dd:75:a0:
f2:59:50:fe:f3:1b:54:5e:81:8c:70:e5:85:70:59:
57:3e:8f:e4:48:20:40:a3:e8:d0:34:17:d0:b0:86:
81:3b:7e:91:19:e2:30:ac:b9:01:91:80:8f:8a:f6:
ea:50:55:7d:83:ee:f7:32:10:fe:9c:7b:01:94:9b:
36:e3:8d:59:08:5a:2e:6d:89:05:bb:a8:0d:7f:39:
15:d8:ee:79:52:ba:01:96:04:51:4a:e6:04:68:d0:
7a:7c:e2:8b:2a:a3:90:d0:ab:1c:91:b3:78:7b:74:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:1B:10:FF:75:4E:3C:9F:23:92:31:18:96:5C:DA:EF:67:F3:44
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:59:e0:df:15:75:75:f3:76:c5:0b:45:ad:a6:cc:d9:be:
36:f2:51:0b:a8:2f:10:2b:54:b2:bb:eb:22:b6:a0:97:f6:32:
c8:fc:84:56:43:7b:43:fb:7a:98:94:7b:77:2e:21:ba:49:68:
31:92:88:da:49:cd:ed:48:35:ab:a5:61:f1:f4:f1:fb:f5:4b:
a7:2d:d2:72:a5:b0:6b:c1:b9:04:6f:a3:02:04:99:96:76:94:
b5:f8:cf:50:3e:2f:9f:54:a3:c0:bf:71:5f:2a:4c:a8:6c:d8:
a7:fa:4c:6f:ec:4b:51:0e:b8:70:68:9d:8b:f7:bf:67:5a:25:
e8:e2:8f:6b:ad:36:d9:fd:d8:59:b6:db:d0:e8:66:ff:ce:05:
67:08:6a:c3:66:5a:ef:71:ff:a7:3d:f6:e9:dd:e7:ba:a1:42:
18:17:6a:76:77:44:a3:25:45:1a:71:5d:fb:9c:c8:e0:eb:7b:
98:df:d7:08:ca:f0:a4:22:f3:32:b0:6e:60:c6:da:bd:f2:66:
ee:94:6f:51:50:fa:82:3d:13:10:4a:d3:72:9c:dd:88:92:66:
38:e1:8c:9d:64:75:fe:bd:8d:04:15:b5:78:5a:3a:60:ef:42:
f4:94:4f:ab:4e:95:e0:07:a4:ca:31:fc:ce:dd:53:80:3f:2d:
30:53:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:40 2024 by rpki-client on console-fra.rpki-client.org