Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: n26aYaPUYfbEtbOSc3jB2vN3N73kbtyywXBGwaW9nzU=
Subject key identifier: 18:A1:8B:10:E6:97:F1:F1:B9:EA:80:52:83:B7:D0:65:24:65:33:CE
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019369D9A83B301EDB6791CC464AAA13E0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 10BA
Signing time: Tue 26 Nov 2024 19:01:32 +0000
Manifest this update: Tue 26 Nov 2024 19:01:32 +0000
Manifest next update: Wed 27 Nov 2024 19:01:32 +0000
Files and hashes: 1: EGnxwDx_IuXYa659Q0tLIGCNaMc.roa (hash: s67ffbgtutQeXzHEqgNskK7GNHRCIzpjtn5rEZdJYCY=)
2: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: QWun1+hX2WgDc6hRmFuTz15P5oyCSYt3JMRCUF9NOZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:a8:3b:30:1e:db:67:91:cc:46:4a:aa:13:e0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Nov 26 19:01:32 2024 GMT
Not After : Nov 27 19:01:32 2024 GMT
Subject: CN=18a18b10e697f1f1b9ea805283b7d065246533ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:e0:fa:31:f7:f7:30:2e:90:d5:7d:07:ef:
ca:da:8a:94:77:32:1b:e1:7c:5e:5d:ea:41:50:2e:
cf:94:99:14:09:bb:45:be:a6:bb:e2:64:1c:3f:7c:
06:bf:d8:37:c5:2f:df:47:44:9f:ff:b5:cf:4d:4d:
df:30:7c:bb:4f:ff:7e:29:23:c4:a2:2f:05:41:5b:
16:e4:6a:a2:2d:c9:6a:ca:5a:39:d1:b3:0f:bb:5b:
92:ee:d2:ea:4e:3f:02:c9:2a:d0:3e:9f:bb:56:33:
16:d2:54:c5:45:f6:2c:7f:81:f2:61:e0:28:e3:48:
36:40:e9:72:34:01:c7:29:18:10:5e:76:82:34:28:
f0:79:1a:55:8a:bf:08:10:82:84:c4:99:a9:91:d8:
8b:5d:ed:c5:f9:84:63:a4:3e:be:94:e1:19:35:75:
f2:54:c8:2b:17:c5:8f:7c:14:fc:76:db:44:44:b0:
91:76:af:98:a4:7f:52:e6:00:f2:2b:c6:67:91:88:
5d:f1:02:05:5d:d2:90:74:26:f1:01:72:1a:97:4a:
7f:99:f6:88:4c:c9:81:fa:02:d0:6d:71:2e:b5:20:
c7:3e:69:32:e4:aa:71:64:83:c8:4e:75:60:7e:52:
70:e4:52:65:53:2e:8b:10:88:12:8b:d2:03:ff:b4:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:8B:10:E6:97:F1:F1:B9:EA:80:52:83:B7:D0:65:24:65:33:CE
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:14:56:db:00:e2:ee:1e:a8:a2:90:1e:bb:a0:8c:18:68:
5c:21:7d:31:4c:62:f5:e3:9d:0f:6b:62:43:38:79:ac:0c:c1:
99:09:26:22:90:36:b3:d5:a1:a5:81:cb:d9:4e:6a:e7:5c:3a:
80:4e:0c:d1:32:fd:a8:20:b0:ae:7a:3c:3c:b5:84:01:e7:e4:
72:e6:e7:5b:69:ad:bb:18:fb:f7:19:02:4a:85:39:e2:0e:c8:
9d:0f:71:48:81:8a:63:3a:c2:c4:c2:5d:8c:b7:d3:2d:c5:be:
a5:56:09:b5:39:3d:78:88:33:a4:6e:dd:63:92:84:68:7c:ca:
29:ab:09:24:b6:86:dc:5f:c1:24:bf:c6:59:5f:0d:84:64:92:
58:62:a3:05:75:a1:27:0c:5a:de:0d:0d:aa:58:33:e4:f8:93:
67:94:45:41:a2:87:d4:04:07:73:f1:75:65:eb:65:19:3a:c2:
e2:b9:4d:99:3e:d6:82:ce:62:19:01:0c:6c:08:88:bc:5e:18:
a7:9b:ca:6e:d2:14:ec:4a:66:ce:7d:12:9d:56:3c:b1:48:31:
29:d5:77:55:b3:06:b5:d1:5e:4d:58:d6:b9:d3:2f:5a:5f:f7:
07:7f:fc:37:de:75:a0:a8:d9:fd:34:c3:86:d2:34:3d:a4:92:
56:1a:ba:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2ag7MB7bZ5HMRkqqE+DnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw
ZjU0YzYwHhcNMjQxMTI2MTkwMTMyWhcNMjQxMTI3MTkwMTMyWjAzMTEwLwYDVQQD
EygxOGExOGIxMGU2OTdmMWYxYjllYTgwNTI4M2I3ZDA2NTI0NjUzM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhejg+jH39zAukNV9B+/K2oqUdzIb
4XxeXepBUC7PlJkUCbtFvqa74mQcP3wGv9g3xS/fR0Sf/7XPTU3fMHy7T/9+KSPE
oi8FQVsW5GqiLclqylo50bMPu1uS7tLqTj8CySrQPp+7VjMW0lTFRfYsf4HyYeAo
40g2QOlyNAHHKRgQXnaCNCjweRpVir8IEIKExJmpkdiLXe3F+YRjpD6+lOEZNXXy
VMgrF8WPfBT8dttERLCRdq+YpH9S5gDyK8ZnkYhd8QIFXdKQdCbxAXIal0p/mfaI
TMmB+gLQbXEutSDHPmky5KpxZIPITnVgflJw5FJlUy6LEIgSi9ID/7RqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBihixDml/HxueqAUoO30GUkZTPOMB8GA1UdIwQY
MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct
MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx
LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsMUVtsA
4u4eqKKQHrugjBhoXCF9MUxi9eOdD2tiQzh5rAzBmQkmIpA2s9WhpYHL2U5q51w6
gE4M0TL9qCCwrno8PLWEAefkcubnW2mtuxj79xkCSoU54g7InQ9xSIGKYzrCxMJd
jLfTLcW+pVYJtTk9eIgzpG7dY5KEaHzKKasJJLaG3F/BJL/GWV8NhGSSWGKjBXWh
Jwxa3g0Nqlgz5PiTZ5RFQaKH1AQHc/F1ZetlGTrC4rlNmT7Wgs5iGQEMbAiIvF4Y
p5vKbtIU7Epmzn0SnVY8sUgxKdV3VbMGtdFeTVjWudMvWl/3B3/8N951oKjZ/TTD
htI0PaSSVhq6VQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:24 2024 by rpki-client on console-ams.rpki-client.org