Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: rFkWvVWyj/txsrdX7qhmgSPU7JaSLf0DIlfLcx38utE=
Subject key identifier: 27:BF:C1:12:84:0E:E7:50:02:84:69:E7:C2:75:C5:18:85:57:05:10
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 01936CA2DC37CBC8B8AC18319C11EBF6852F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0A10
Signing time: Wed 27 Nov 2024 08:00:32 +0000
Manifest this update: Wed 27 Nov 2024 08:00:32 +0000
Manifest next update: Thu 28 Nov 2024 08:00:32 +0000
Files and hashes: 1: 0Ej2q3Sj-9HQTia-YOfZUBi4bI4.roa (hash: Dmdea0pHkYNxRmB1+c1ZvPaBxKjrPsIzM+ZxkYBiyys=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: JC8Fq4Fr0sh2fHtYm8smjo/wQsK6pQzTG+H9Z+eszXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:a2:dc:37:cb:c8:b8:ac:18:31:9c:11:eb:f6:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Nov 27 08:00:32 2024 GMT
Not After : Nov 28 08:00:32 2024 GMT
Subject: CN=27bfc112840ee750028469e7c275c51885570510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:eb:66:33:86:b1:aa:14:4c:56:43:a4:a3:
ad:50:51:e1:f8:a2:13:75:c6:84:cc:23:33:cc:be:
d0:6d:f6:7c:3a:98:fa:0a:af:19:14:77:c3:2c:5f:
d9:f2:f5:33:88:e9:63:39:c2:27:a2:7d:44:01:4a:
63:e6:15:77:03:ef:2a:25:2a:1b:6c:12:17:70:43:
20:10:14:69:2d:7f:26:68:06:40:b7:db:2b:9a:58:
b8:2c:c3:85:2a:6d:a5:8a:c2:af:91:07:b9:e9:cb:
04:05:82:64:c5:88:2f:e2:35:19:c7:1d:b7:b1:80:
05:d8:33:6f:00:73:4f:14:84:0c:52:5a:13:71:20:
5d:1d:85:9b:95:65:1b:1f:0a:61:13:43:3d:c9:76:
98:e7:e7:58:c6:4a:2b:5a:10:af:62:37:65:b6:db:
a0:4d:4c:e6:5f:13:f9:e4:7c:e7:6a:f3:da:99:98:
f6:40:c6:ea:9c:ad:9e:e3:03:a6:63:c3:cc:81:82:
fb:89:3b:75:c9:7e:59:e8:06:37:ba:f9:f9:6f:63:
cf:09:7d:60:89:dd:5b:a7:f8:d2:ce:23:89:a4:3c:
8c:1e:11:5f:62:aa:c8:fc:ca:cf:26:8e:a8:a4:be:
b6:db:74:80:e2:6c:2a:6d:48:68:a0:29:aa:76:96:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:C1:12:84:0E:E7:50:02:84:69:E7:C2:75:C5:18:85:57:05:10
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:5d:f7:2a:03:4f:20:23:be:4a:8b:8b:05:af:87:f5:96:
e7:ad:25:72:ac:6d:0a:e1:f4:72:2a:b6:12:bc:cb:57:06:7a:
16:d7:c7:10:57:04:6a:81:9e:f2:f2:d7:a3:cf:ff:00:95:a8:
03:16:cc:6c:9e:01:c2:0f:47:57:fa:77:08:2c:09:c7:98:4f:
1c:20:57:b3:63:02:f0:62:a2:e0:e5:5a:5d:7f:11:86:bc:21:
79:d8:ae:80:56:e1:f6:14:6d:72:7b:7f:5d:44:68:b2:49:82:
f6:43:2f:80:95:90:2d:5e:25:64:f3:3e:3e:d6:2a:63:0f:ef:
0a:2c:8d:70:77:8c:17:fc:30:52:cb:f0:43:13:51:5f:be:bf:
1d:52:29:58:6b:b3:c6:c6:28:11:ae:f5:83:ce:67:e0:dc:cb:
23:3e:c2:6e:86:9d:19:71:0a:99:1b:09:49:71:3b:e8:ce:8b:
15:81:b9:52:97:5b:00:85:ba:dd:92:4c:0b:57:3c:e5:12:3a:
06:3b:dd:f5:66:0c:58:ea:9b:90:72:3b:26:7c:3c:42:03:2f:
9f:cf:7b:32:7b:34:95:96:12:3b:85:e5:ee:03:c0:bf:0c:6d:
6c:7c:98:6d:c3:49:1b:54:38:fe:c7:e4:bf:31:5f:9a:7a:3b:
98:d3:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:39:00 2024 by rpki-client on console-ams.rpki-client.org