Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: i5ykkUqKAhm1b7KaozduoF6M4LN9/lBv1hkLuF3kRxg=
Subject key identifier: A3:51:C0:C0:FA:02:38:40:66:89:CE:1B:96:EC:56:80:E7:F7:BC:0F
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019369D9CADD657466750DD589BDD13302AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 028D
Signing time: Tue 26 Nov 2024 19:01:41 +0000
Manifest this update: Tue 26 Nov 2024 19:01:41 +0000
Manifest next update: Wed 27 Nov 2024 19:01:41 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: mb/mmglZmXtVMAM/Rvsav0AsA2vR0J96WSMHwk6R5HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:ca:dd:65:74:66:75:0d:d5:89:bd:d1:33:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Nov 26 19:01:41 2024 GMT
Not After : Nov 27 19:01:41 2024 GMT
Subject: CN=a351c0c0fa0238406689ce1b96ec5680e7f7bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:a9:56:e1:44:e1:b2:6f:d1:fc:9c:06:ef:
35:14:44:15:ed:5e:84:29:28:fe:b9:de:c6:af:be:
5f:9b:a7:22:c7:81:94:2e:b1:7d:0f:78:ae:bc:d7:
44:e7:4b:05:9d:93:d5:4c:95:17:a0:9d:72:2a:f8:
cb:b1:9e:82:14:76:d9:96:4d:17:d4:12:e1:44:44:
e4:55:3a:97:39:a4:c1:b5:6d:35:16:1c:d0:c0:71:
cc:3c:cc:00:de:46:28:d0:4e:5e:72:75:50:b9:ac:
33:2b:25:02:1f:4c:e8:8a:be:4d:69:c4:bb:8e:1a:
f7:19:4a:7d:16:77:4f:6d:a0:56:b8:b9:7d:93:a4:
40:2c:87:63:e2:65:b2:c4:59:52:f3:12:3d:a2:af:
51:f9:b3:0d:b0:73:69:db:d4:14:23:53:3d:bd:0e:
aa:04:0d:7d:ec:67:92:3c:81:61:fc:eb:9d:f4:4f:
c7:f9:19:e5:4e:6d:a4:eb:5a:69:62:8a:ce:67:c4:
62:25:82:88:b9:76:85:68:39:5c:9d:21:a1:34:f0:
2f:b0:f9:cd:cb:d6:94:7e:c4:bf:e9:2c:8d:b2:1e:
d8:b2:d5:5a:ad:a1:33:c8:60:eb:f4:f9:0f:e2:65:
6d:f0:23:8c:7d:86:c6:82:b9:82:b1:82:7d:62:16:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:C0:C0:FA:02:38:40:66:89:CE:1B:96:EC:56:80:E7:F7:BC:0F
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:41:1e:66:c7:91:38:81:68:89:cc:7b:2b:25:b3:16:94:
ce:31:a5:b6:10:ea:3c:f9:8f:bb:5c:0e:c4:3a:73:e3:38:83:
52:f3:4e:7e:d2:fb:e5:57:67:4c:87:f8:85:03:e5:09:85:d9:
b6:c5:91:68:48:f5:15:e3:82:ea:c2:3e:b8:d0:86:f5:f5:2b:
6e:d6:68:6e:14:02:2b:4f:a8:61:6c:e7:02:15:c1:aa:86:f9:
41:98:4b:aa:fc:b1:22:0b:22:5f:59:ed:16:96:36:be:f9:ec:
64:49:67:8b:f9:71:68:7c:57:18:06:95:e9:e7:43:f4:39:4b:
56:8f:ce:69:f8:d5:b3:c0:fe:24:4a:cf:43:85:5d:91:d7:b4:
0f:18:27:2b:cc:99:71:10:6a:b8:d3:26:b9:97:ac:fe:47:b0:
45:19:e2:d9:de:71:7d:35:80:db:c0:37:e7:9a:f9:5f:0e:0b:
ed:b4:92:47:79:ef:55:5b:2e:45:04:f2:a8:d6:f7:9e:b5:70:
29:b7:53:66:d7:35:6b:c7:19:79:eb:a3:4d:7b:b9:f1:ab:35:
7a:4d:8c:0d:25:36:0f:b4:9a:37:e7:9f:50:ea:50:de:4c:0a:
90:a6:fb:73:6d:5a:a4:f6:7e:db:c6:a3:d9:d1:20:c8:d4:61:
e1:31:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:53 2024 by rpki-client on console-fra.rpki-client.org