Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: yoJ9rzMyxycQ1ZylIN6ZM+h/9Yn7ubTsyc+uRPQa5WU=
Subject key identifier: BD:0F:52:F7:27:BB:49:C8:9D:E8:6C:2A:3B:D2:F5:A7:64:F2:2F:6F
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019369D94A0D890AE4B3836025D04E132FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 0E9C
Signing time: Tue 26 Nov 2024 19:01:07 +0000
Manifest this update: Tue 26 Nov 2024 19:01:07 +0000
Manifest next update: Wed 27 Nov 2024 19:01:07 +0000
Files and hashes: 1: 47E-iNWWXEqISS9jX01HEWOdSBU.roa (hash: cKqwognUP6C22xkA0VV16xAz388DpmiqWf8c38KQyLI=)
2: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: gEVxjis1ivgyOXceBKG6+vyonXV3Hj9/XdOdMhJdCxw=)
3: wRiB1bqp97qpuZHsVkDKZOAgYoI.roa (hash: YB0dS9hUG6NEUEWIIyjlOgtQ00ER+yuCq7Y02PXxfxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:4a:0d:89:0a:e4:b3:83:60:25:d0:4e:13:2f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Nov 26 19:01:07 2024 GMT
Not After : Nov 27 19:01:07 2024 GMT
Subject: CN=bd0f52f727bb49c89de86c2a3bd2f5a764f22f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:60:f6:3a:d8:6e:18:9a:fe:6a:bf:45:dc:
aa:02:89:02:bb:cb:5e:e9:e6:64:df:97:00:7a:a5:
8f:40:2a:18:8e:56:5d:94:36:71:7a:11:12:f3:96:
9f:ae:d7:3b:59:7d:24:c4:70:36:26:37:b9:be:15:
99:62:c5:02:ff:d9:13:db:c6:9e:50:34:9e:bb:2a:
a2:6a:00:8d:16:88:6e:53:48:0e:14:b1:41:39:7a:
13:26:e5:f6:5c:1d:ac:f3:0c:a0:69:44:10:87:e8:
82:15:3c:a9:32:82:4f:d7:ab:41:cb:2b:aa:94:7f:
f4:9d:64:04:cd:c9:9f:ee:41:31:5e:f7:96:ba:50:
09:50:2c:23:e4:5f:94:6e:aa:75:2d:46:22:f7:4c:
7c:df:5d:65:45:6e:47:dc:52:8b:aa:9b:32:1a:5a:
80:40:32:19:7e:aa:b8:18:ec:7b:89:03:a8:fe:40:
73:75:19:47:f0:31:b0:82:43:19:0f:fc:1b:3d:ce:
be:d1:83:d7:41:33:d8:94:02:7e:a4:c1:5f:63:82:
03:c9:bf:d8:6f:c0:9d:7d:6e:38:4f:d7:77:de:67:
e2:84:eb:bb:80:f6:73:f3:2a:25:c4:5d:58:b7:3b:
0b:fb:63:ba:ca:3a:78:d6:17:ba:35:f2:a1:cd:e8:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:52:F7:27:BB:49:C8:9D:E8:6C:2A:3B:D2:F5:A7:64:F2:2F:6F
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:12:ae:d7:b4:65:9a:c3:26:6e:ee:93:23:97:a3:46:58:
11:a9:c5:7d:30:f8:37:05:f1:f1:ae:47:69:96:84:9e:06:a8:
b9:4d:d1:92:79:14:3b:15:48:5c:90:54:f1:d7:16:d1:9a:fb:
e0:40:eb:a9:2d:85:b6:ef:6e:6e:cc:36:44:7a:e7:ff:67:1b:
b5:cf:44:90:1d:73:20:c4:c6:b2:9f:f7:57:4a:ca:42:10:ef:
75:94:fc:d8:75:81:a0:97:be:28:96:b2:d1:b3:73:00:82:64:
53:a5:65:45:72:56:28:6a:f7:32:1c:f4:18:94:b9:e0:0e:71:
5b:f5:64:72:4f:86:fa:89:0f:03:a3:78:17:fd:a7:e5:a5:29:
0f:d8:09:fa:41:1e:96:67:34:d0:ed:05:2f:c5:7c:16:fb:2e:
bf:f6:42:99:2d:3b:0e:c2:f6:19:5b:d7:77:b5:c6:5a:8d:42:
e1:d5:a2:2b:5b:6b:ad:53:dc:41:ad:d9:f3:f8:6f:89:e0:85:
c7:9f:64:c5:79:52:f7:f8:b6:5e:86:f2:d3:52:b3:59:4d:c4:
e5:2d:8d:3f:4e:20:20:db:e0:93:31:d6:1c:9f:aa:3d:43:e4:
a8:ac:e9:e5:17:60:54:5b:40:50:4d:c3:df:0b:41:d8:a4:25:
2c:57:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:21 2024 by rpki-client on console-fra.rpki-client.org