Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
File: PJiu68LWwGwWm6wwMGpem2hCbFk.mft (raw, json)
Hash identifier: Dg6FkjGTfXTSPvqjPMqfWh/cy/beU2lP0eUmwcXdTeg=
Subject key identifier: DE:C3:5D:35:66:D4:B2:CF:B8:F9:E3:C9:A0:EF:D8:36:5D:85:F4:AB
Authority key identifier: 3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59
Certificate issuer: /CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
Certificate serial: 0191FA47DDCD544CDB73A54344356972D188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
Manifest number: 28
Signing time: Mon 16 Sep 2024 10:01:39 +0000
Manifest this update: Mon 16 Sep 2024 10:01:39 +0000
Manifest next update: Tue 17 Sep 2024 10:01:39 +0000
Files and hashes: 1: CF_4fI5DFQfyR3NH39briaccWsE.roa (hash: x1knXDAEV+9RkZUG8ii2jk6coRrblKvokilSTR7AJAc=)
2: PJiu68LWwGwWm6wwMGpem2hCbFk.crl (hash: JrbY9SI3rok4BD3jz11lmnYGBYlxH8A5LCeKntMvcTE=)
3: upfecyqbrgZcVLz594piPyry5pE.roa (hash: OxgcUsjwI7tTMEjmoHN9xHei67rz+LeAdLfKMs/p8ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:47:dd:cd:54:4c:db:73:a5:43:44:35:69:72:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
Validity
Not Before: Sep 16 10:01:39 2024 GMT
Not After : Sep 17 10:01:39 2024 GMT
Subject: CN=dec35d3566d4b2cfb8f9e3c9a0efd8365d85f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:4a:70:eb:60:e8:ca:45:ec:cf:b4:7d:f1:
4b:18:40:48:5a:8c:07:0f:6d:4b:07:f3:30:d0:1e:
36:13:5a:34:4c:a0:33:ea:c5:f9:48:db:c0:4f:24:
ec:b9:52:90:00:82:fb:3b:25:3b:6b:1b:21:65:a3:
f6:45:9b:bb:13:fe:69:8b:19:17:ce:85:34:5c:9b:
d3:82:7e:ff:b7:ff:d4:bd:96:11:d0:32:86:b9:e1:
75:56:af:c9:00:69:73:3f:6b:3e:52:cc:04:5a:56:
b1:50:19:09:b9:da:8a:db:70:10:71:a1:1e:d6:d9:
a2:b1:52:c4:e8:60:2d:ae:bc:64:b2:22:17:33:25:
79:b0:b2:ac:ab:70:a4:9d:be:05:21:88:55:88:5d:
6c:f2:d0:cf:c4:53:3e:2c:0c:75:de:3e:af:fc:33:
ef:0a:f8:f5:0a:0a:f5:59:d8:37:8e:76:67:8c:aa:
d6:05:f6:09:b2:e1:36:75:e6:9e:b8:e7:1c:cb:25:
e5:48:1b:ee:45:4e:a3:e0:98:39:40:7b:7e:6f:c7:
34:36:d4:53:de:7a:ab:f8:50:fc:bb:60:25:04:32:
e1:c6:3a:82:0f:00:69:4b:04:28:48:51:14:1d:7d:
03:e4:05:89:ab:4f:70:85:f3:ba:ac:dd:74:82:a3:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:5D:35:66:D4:B2:CF:B8:F9:E3:C9:A0:EF:D8:36:5D:85:F4:AB
X509v3 Authority Key Identifier:
keyid:3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ca:6c:ae:60:fd:e4:96:e7:9c:82:2b:63:89:e0:5a:48:db:
16:5a:d7:16:5a:53:db:cd:f6:dc:da:50:0f:b6:49:58:a6:53:
31:d9:e7:9d:08:e5:05:76:e8:d1:a6:d9:ff:f9:d2:4c:3b:52:
9b:15:e2:40:21:07:48:5b:1d:17:ec:cb:d7:3f:2d:35:98:1b:
9f:f9:21:be:d2:cf:4f:d5:ab:8d:89:a4:58:75:84:96:74:83:
04:9b:56:57:cf:98:dc:fa:4d:c7:09:e8:fd:a4:2a:58:e6:69:
f9:79:f0:6b:84:8a:e1:0b:c0:8d:52:93:02:ac:93:ee:d1:09:
4c:cf:24:c8:e5:29:c8:53:46:21:c8:98:e7:be:14:34:3b:ea:
90:17:68:28:97:d5:41:64:96:a3:4e:c8:fa:c5:3d:37:40:81:
3d:3f:59:20:58:09:3d:d3:b0:e8:52:a6:ec:13:d9:a4:d2:bd:
ac:bf:b6:ad:6e:52:7c:bf:b6:b8:58:77:93:7a:fe:0a:8b:f3:
a3:9c:c9:f1:84:ef:4b:ec:42:8e:99:d8:45:9e:cd:23:d8:b4:
3e:71:34:d4:46:43:65:55:69:96:66:2e:8b:4a:8e:25:d6:f9:
30:fb:f0:f8:fa:59:4d:b9:be:a1:db:43:69:d1:70:6f:9a:8b:
5b:01:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:28:21 2024 by rpki-client on console-ams.rpki-client.org