Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: jMBdyHS7+4f6NBar1zRwN1FlFt3AA/T5xVCXUnIM64E=
Subject key identifier: 25:B7:52:25:33:05:F1:96:D4:53:EE:F0:76:B2:73:FB:2B:4A:D9:09
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 018F8DEF50C3DCBD1EA253CA59F151842DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 10FD
Signing time: Sat 18 May 2024 23:00:22 +0000
Manifest this update: Sat 18 May 2024 23:00:22 +0000
Manifest next update: Sun 19 May 2024 23:00:22 +0000
Files and hashes: 1: JZHYljHn2L_86lv_5IjUIICcXGU.roa (hash: VbrZWmv+AvyD22UVIsNsr3iMG8LNgz90JbqU20N9XiE=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: Whbv8rSHWi8X9xNFdWrKo39pio9ePNbVIYmPjvBq2Uc=)
3: PlndmN7rsLrenYwTfJMaMo5zwQY.roa (hash: hXNJDfUpg8XN0QO/zYLuMnlJb+soPyHOVlMuedCpZZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:ef:50:c3:dc:bd:1e:a2:53:ca:59:f1:51:84:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: May 18 23:00:22 2024 GMT
Not After : May 19 23:00:22 2024 GMT
Subject: CN=25b752253305f196d453eef076b273fb2b4ad909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:c6:7f:5a:07:28:c2:67:e1:04:98:a3:23:
b2:bc:62:8f:28:8b:a8:be:9a:25:dd:55:d4:00:75:
3e:76:58:9a:6b:53:1d:a4:4f:51:39:53:e0:26:91:
ac:75:fe:e6:6d:38:19:52:ed:21:c1:d6:7a:35:96:
f3:5b:da:69:3b:24:c6:93:46:0a:db:f1:f0:e8:4b:
2c:01:09:35:e4:a5:92:5c:ef:f5:8e:d9:e8:c3:69:
00:b2:f6:61:9a:1e:f4:6b:35:7f:a0:d0:ac:29:14:
f6:ac:fa:db:23:d8:b0:eb:6e:1b:43:53:d2:f8:d4:
ac:04:f3:e5:b3:34:5e:4b:0a:ca:74:ff:fc:6e:2c:
e4:93:7e:16:f4:2c:80:60:b4:d4:e0:e9:5e:83:cf:
64:21:89:e2:94:3b:f5:0b:69:68:aa:70:4e:32:50:
f5:c2:4a:27:60:32:ad:16:b9:6d:94:1e:4e:75:32:
25:a5:f0:8b:af:3d:3c:0c:6b:e7:f2:34:d0:b8:77:
07:a3:ad:bd:93:21:74:72:0b:38:d6:7b:4b:73:50:
62:d0:1e:18:d5:da:cb:f2:6c:f3:26:e6:a9:a0:c0:
11:1e:67:8e:81:99:1f:04:ca:29:82:3e:76:e5:6b:
16:51:cf:c5:4b:5e:1f:6e:c2:fa:3f:5a:ec:6d:48:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:52:25:33:05:F1:96:D4:53:EE:F0:76:B2:73:FB:2B:4A:D9:09
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:08:af:88:5b:b0:c1:72:4c:a5:08:89:a6:18:08:4d:c2:
5e:db:45:24:aa:55:e7:ef:eb:92:a7:ed:77:bf:19:7f:d8:a1:
71:43:61:97:4a:fe:f1:30:4a:5c:5d:3b:a1:a6:11:10:07:b4:
53:de:b5:b1:2c:24:25:8c:64:b2:2f:0a:48:e2:b4:90:10:01:
fd:3f:28:6d:7e:9b:16:35:a8:3f:5c:58:26:45:d1:bf:90:32:
fb:97:ae:e2:f4:a7:5e:c9:a1:60:6c:91:78:8e:b1:e1:a1:41:
53:30:61:a4:14:74:a9:0d:7c:2d:60:8b:c1:a5:52:1b:28:91:
a5:37:bb:0e:bc:5e:19:91:5c:b9:b5:f5:58:b0:98:65:45:cc:
90:14:76:b5:fd:23:6d:69:f5:45:2e:13:b2:08:6a:b1:00:9a:
c9:04:69:c2:49:a6:54:97:8c:a0:bf:b6:db:da:50:4e:e1:d6:
89:1f:8c:d1:54:eb:f9:59:2e:0b:43:44:dd:c9:ce:0a:c2:f3:
c0:18:50:f3:76:c5:92:c3:95:4d:c2:ec:c1:ac:b4:fc:6a:a5:
a0:31:fb:98:3b:26:1d:58:da:f5:5e:53:c7:f8:5f:e3:bc:05:
9c:f2:ce:15:4c:50:1a:49:f6:a0:6b:41:ee:79:d5:24:a9:4c:
ef:52:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:17:06 2024 by rpki-client on console-fra.rpki-client.org