Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: U1LzC+KloEE9yGbnCx4cTdFDgWnVbjeqr8pjhZWjxlM=
Subject key identifier: 4D:D2:73:3F:48:1C:E7:D2:E7:38:75:72:61:0B:5F:EB:5B:9B:13:A1
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 018F87ED24F9EBAFD3B6871A2C7329015DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 011D
Signing time: Fri 17 May 2024 19:00:16 +0000
Manifest this update: Fri 17 May 2024 19:00:16 +0000
Manifest next update: Sat 18 May 2024 19:00:16 +0000
Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 1xyyxHjX5Kfwt6SOCbQo1OrAWFnNNgLH3ItqNtJUnbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:24:f9:eb:af:d3:b6:87:1a:2c:73:29:01:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: May 17 19:00:16 2024 GMT
Not After : May 18 19:00:16 2024 GMT
Subject: CN=4dd2733f481ce7d2e7387572610b5feb5b9b13a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:fb:9b:f1:28:08:26:2a:ec:47:c8:7e:31:
af:fb:8b:c8:0f:57:02:d6:bc:ba:24:6d:28:4c:6d:
39:b5:62:80:6f:6a:f9:fe:fb:a8:39:fb:55:14:44:
7e:2d:2c:4d:74:cb:93:b3:d1:9d:6a:96:9e:b3:cd:
16:8a:f6:d7:1d:1e:47:58:14:53:1f:59:29:05:e1:
fa:78:50:3a:7d:98:91:af:f9:cb:c5:26:c6:b6:2f:
04:11:49:88:51:7c:d1:78:01:eb:26:6e:a0:39:2f:
cf:b6:de:f6:72:ad:69:0c:45:23:a5:14:9e:a8:61:
3f:6a:e8:8c:34:a6:3f:af:b3:65:fd:3a:e0:57:5b:
30:8d:b8:65:71:0f:a2:ef:2b:bb:34:8c:3e:1a:92:
6d:4e:8c:ee:3c:43:08:b7:f1:d3:e5:b6:f3:e1:a9:
d7:94:37:c3:cc:9c:32:cb:49:91:88:2d:95:25:e0:
21:ad:18:74:43:9d:5b:d6:a6:3a:94:8a:2f:24:02:
12:88:9b:aa:f5:ec:e4:a2:69:db:eb:f3:a2:17:26:
74:09:77:d9:99:e6:97:07:f4:a1:b0:f8:25:22:af:
f0:4e:50:09:41:ab:1a:40:3b:ef:65:03:0e:c6:54:
7c:b1:45:bb:f3:3b:89:a2:97:89:9b:e8:03:67:e9:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:73:3F:48:1C:E7:D2:E7:38:75:72:61:0B:5F:EB:5B:9B:13:A1
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:c0:7e:6a:dc:a4:67:3c:e9:9c:10:83:7b:0e:ff:f5:ad:
d5:e1:05:83:e4:4d:77:77:97:6c:f2:f7:90:7a:44:d0:6a:e3:
a5:ce:37:0e:36:6f:94:43:b7:8f:0c:28:d3:73:98:7e:7b:cf:
8d:b3:4f:df:f8:03:03:5b:92:a6:44:c1:5a:9b:12:59:80:6a:
09:1c:23:6b:91:de:0b:19:04:6a:9a:94:67:56:79:03:10:e7:
55:7a:9e:4c:31:e1:73:b2:d1:07:92:26:d6:67:aa:81:4d:5e:
cd:53:be:28:61:99:45:c7:6c:a4:f6:03:a1:cb:72:5e:16:20:
b9:e7:7f:6d:a5:64:38:1f:9f:8e:3c:1f:51:63:e4:55:dc:f4:
2f:0b:d0:32:61:1e:27:51:f8:61:ea:45:d6:b9:8f:83:9b:73:
0e:83:c9:46:7b:d5:7d:14:06:3f:08:d1:47:bc:e8:f2:b0:41:
b6:16:17:0d:cc:28:ff:0a:71:e0:d7:74:ce:b3:c8:95:22:ef:
89:f1:c3:c4:a5:62:ed:aa:9f:1c:9f:1c:c3:19:a4:68:95:83:
9c:23:3f:85:bc:fe:7e:0e:36:58:73:2a:f1:e2:bd:46:33:eb:
b1:a0:a8:ea:21:db:9a:36:bc:9a:9e:ab:f6:0a:53:1a:7c:bb:
de:58:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:55 2024 by rpki-client on console-fra.rpki-client.org