Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: tUuHeiuccGRXwJFXVVGkhUvAKy3RYBTMbysRLde+/c0=
Subject key identifier: AA:94:54:6D:09:A3:1B:E5:15:E1:B0:C9:90:B7:36:45:CB:E2:5B:4D
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019239265D87A83384DC0D126B3E71AB7FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 12DE
Signing time: Sat 28 Sep 2024 15:01:08 +0000
Manifest this update: Sat 28 Sep 2024 15:01:08 +0000
Manifest next update: Sun 29 Sep 2024 15:01:08 +0000
Files and hashes: 1: 1o2xV0vzC4_QhtkkQxeyqKWhyA0.roa (hash: YUpjZ1gzKIc+MrzDw17On/btdMBC1SU0S1rZeCmQjYQ=)
2: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 9aXIkGivhW3icS/1IhH6s8gjYTBoJpAxaTaj+7rrn90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:26:5d:87:a8:33:84:dc:0d:12:6b:3e:71:ab:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Sep 28 15:01:08 2024 GMT
Not After : Sep 29 15:01:08 2024 GMT
Subject: CN=aa94546d09a31be515e1b0c990b73645cbe25b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:14:67:d3:8a:e9:21:43:7f:76:10:f5:9e:
b3:1f:37:f6:23:78:f5:68:6e:84:1d:f7:46:ef:56:
bc:91:36:80:96:4a:1e:22:66:3e:e7:af:06:41:0c:
e0:52:e3:55:5e:df:91:aa:9e:29:67:51:75:d4:02:
d8:9d:13:28:90:eb:37:86:94:20:de:2d:2f:48:2a:
34:80:ec:bb:2e:75:0b:16:ba:58:e0:b5:71:a1:f5:
99:7d:89:54:a3:b1:d4:90:5d:2a:9d:09:8a:48:a5:
66:0a:bc:be:4f:a5:c4:a4:92:6b:eb:0d:8e:3b:2d:
09:3c:2e:f2:e3:0b:ec:60:ac:70:df:6d:33:bf:82:
74:ae:cc:46:63:d6:45:c7:6f:cd:d0:50:20:d1:5c:
e2:44:0b:86:43:e1:d9:a9:3c:aa:ab:c3:47:d7:c7:
3a:c7:39:1d:0e:76:81:e6:f3:dc:8b:50:1e:6d:04:
ee:2a:21:81:54:31:c4:28:d3:fb:a0:e1:3a:b5:57:
c9:12:68:3d:10:48:b1:a5:73:7e:b7:2f:d9:62:bd:
88:4d:5c:4e:e6:f7:35:92:14:83:12:29:2a:ce:a6:
0f:2e:ab:ea:b0:ca:65:9f:d5:e3:18:98:a9:35:61:
aa:3e:39:89:82:c2:c8:61:78:26:60:b2:be:27:06:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:54:6D:09:A3:1B:E5:15:E1:B0:C9:90:B7:36:45:CB:E2:5B:4D
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:4f:1f:50:07:14:51:1a:76:87:cc:4a:e2:cf:24:13:d2:
80:a2:94:ef:dc:a0:af:4f:ef:c1:72:a1:95:66:61:20:a4:4a:
9d:db:b3:c4:ec:cb:5e:4e:92:da:93:e8:0b:2b:ad:aa:04:b5:
e6:f0:1a:15:d5:89:96:57:a1:71:57:6f:4f:62:cf:fe:fd:43:
b4:7a:62:69:3b:20:3a:55:41:d1:1d:2c:b8:62:ee:90:49:fc:
84:5b:21:d2:73:20:fe:1b:72:c2:7f:6a:66:5f:3d:85:16:55:
9f:fa:eb:56:8b:52:ee:54:a0:cc:ef:ac:21:6a:b4:ac:d6:a7:
50:6e:01:e4:50:d7:83:9e:07:f2:ee:42:2d:06:07:3f:b9:0a:
c2:53:dc:b8:c7:72:c2:37:c0:f9:f0:d9:a9:73:d9:9c:77:a8:
69:a5:6a:db:70:f3:3d:aa:b6:81:99:44:4f:79:50:02:94:16:
f7:9b:f2:73:2e:69:cc:ff:a1:d4:3d:76:76:88:7d:c2:05:4e:
7b:d8:df:e1:d0:b2:64:dc:c8:66:50:22:64:f7:ff:3f:fa:7e:
db:f7:0b:fe:3c:01:c2:97:c0:25:5a:90:e9:f0:63:dd:d9:bd:
47:d0:47:dc:aa:13:98:88:be:45:b8:f6:e2:4e:35:d6:ba:fc:
d7:bb:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:14:01 2024 by rpki-client on console-ams.rpki-client.org