Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: k+JEVLJsKELb4AL0NwAxuhlagPSsfChEXltavOH1c7Q=
Subject key identifier: D0:6F:7B:7B:B1:9E:8F:5C:F4:D5:3B:73:5F:48:DE:E9:13:75:1C:19
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 018F92031C79E9811749D9F245254B47943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 091D
Signing time: Sun 19 May 2024 18:00:28 +0000
Manifest this update: Sun 19 May 2024 18:00:28 +0000
Manifest next update: Mon 20 May 2024 18:00:28 +0000
Files and hashes: 1: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: 6Vb2QK1m9z6WVhQO5Z/xI4erplPWEnaxvCbwdvZF5d8=)
2: fAhEGn-vd-HRQRLyyF0xYKoddB0.roa (hash: XVuVMRQgIqjOGGXKmnkdaSaLSN+fGBYCWcjGaNttZ0o=)
3: u3MqeVLP6UfUDB7EejC4gUatdVY.roa (hash: b8f3wAHrAO8RX43AUTStHdHZstaDazYZvlbhrnu+as4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:92:03:1c:79:e9:81:17:49:d9:f2:45:25:4b:47:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: May 19 18:00:28 2024 GMT
Not After : May 20 18:00:28 2024 GMT
Subject: CN=d06f7b7bb19e8f5cf4d53b735f48dee913751c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:30:7e:5e:45:22:38:14:92:96:b1:61:04:
6b:28:5c:20:16:42:ad:68:71:60:b1:b1:8e:05:09:
3d:2f:2a:c4:38:b8:57:6a:23:67:15:d7:b8:5d:ec:
b8:ee:f9:ec:a7:38:c1:4d:6f:38:16:61:0a:6e:c8:
6b:5f:42:5c:0a:fb:cf:21:a7:e9:94:aa:f9:a0:9c:
0e:8e:6e:4c:f0:0f:e0:44:54:89:13:1f:ed:56:90:
6b:8d:04:a9:e4:18:3d:eb:e3:2e:cc:7d:ab:12:14:
71:cd:04:12:5f:1d:4b:a5:72:3b:b3:ee:98:b8:d7:
44:f0:22:aa:b3:ea:1b:54:d4:eb:d4:9a:ff:90:85:
bb:23:37:e9:f6:ee:9b:a5:78:13:3a:7f:29:bb:64:
1b:1b:62:4f:4c:75:fc:2c:fe:23:9e:84:35:c4:d1:
69:53:bd:db:3f:e7:1a:2a:60:f9:11:c7:a6:3c:c7:
d4:6b:cb:62:a2:a7:c0:ea:be:82:c9:c9:d3:a8:5b:
eb:67:45:8d:36:7d:05:53:cb:96:a1:7d:ef:a4:13:
62:7f:1c:9f:9b:2a:43:b5:3b:08:ca:6e:61:b2:8e:
cf:1a:f9:65:8a:1f:89:59:d0:31:ba:99:8a:4d:a5:
3c:70:b4:e9:a5:ef:23:76:b6:c4:39:3d:72:7a:d6:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:7B:7B:B1:9E:8F:5C:F4:D5:3B:73:5F:48:DE:E9:13:75:1C:19
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:dc:e1:ba:e7:12:b2:ba:a3:ea:7e:66:24:b2:91:49:37:95:
45:dd:82:71:41:16:df:59:b4:39:df:8e:11:de:9f:61:08:68:
c3:d0:72:7c:7f:06:fe:fc:70:4e:59:fc:72:1f:c9:23:f9:dd:
ed:47:9a:3a:65:22:c9:17:32:67:0d:95:ab:96:8c:b5:15:3a:
33:e5:b2:83:9d:51:19:e6:c4:e3:c7:c8:0a:b6:53:8d:48:b1:
6d:5b:7f:49:44:c4:9b:1f:b2:bf:76:3b:fe:06:34:86:9d:b8:
46:f8:7c:f5:dd:d1:80:6b:55:98:8a:30:76:4d:86:31:d3:05:
3a:c0:6d:cf:1c:86:b4:98:95:a8:d5:13:a8:61:4a:89:c3:53:
af:0a:71:00:d3:f4:32:88:40:6c:33:06:2c:d1:b3:07:aa:d4:
b4:32:91:cc:bb:9f:9c:7b:c9:c8:12:ab:38:d3:59:71:54:ba:
c4:b1:ef:fa:a2:5a:cd:b5:23:2d:1c:72:cc:ab:01:f3:41:08:
53:fe:d7:29:39:08:89:6c:92:41:3b:8c:be:62:bf:11:9f:8d:
5a:1b:6b:fb:7c:c5:31:4e:10:ad:5d:8c:e5:37:47:f0:61:66:
3e:ff:ed:1c:50:5d:91:e1:d3:e6:46:6b:c9:6d:05:03:4e:57:
5f:f3:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:45:53 2024 by rpki-client on console-ams.rpki-client.org